diff --git a/internal/data/assets/core_gen.json b/internal/data/assets/core_gen.json
index 04907169..7b99c4ee 100644
--- a/internal/data/assets/core_gen.json
+++ b/internal/data/assets/core_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/00376356-4a85-4898-a101-710e1cb5c6bb/wordpress","title":"WordPress Core <= 3.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-01-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"00376356-4a85-4898-a101-710e1cb5c6bb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/00376356-4a85-4898-a101-710e1cb5c6bb?source=api-prod","cve":"CVE-2012-0287","affectedVersions":"<=3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0114f098-713d-4eef-8643-901f607375de/wordpress","title":"WordPress Core < 5.8.3 - SQL Injection via WP_Meta_Query\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"0114f098-713d-4eef-8643-901f607375de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0114f098-713d-4eef-8643-901f607375de?source=api-prod","cve":"CVE-2022-21664","affectedVersions":">=4.1,<4.1.34|>=4.2,<4.2.31|>=4.3,<4.3.27|>=4.4,<4.4.26|>=4.5,<4.5.25|>=4.6,<4.6.22|>=4.7,<4.7.22|>=4.8,<4.8.18|>=4.9,<4.9.19|>=5.0,<5.0.15|>=5.1,<5.1.12|>=5.2,<5.2.14|>=5.3,<5.3.11|>=5.4,<5.4.9|>=5.5,<5.5.8|>=5.6,<5.6.7|>=5.7,<5.7.5|>=5.8,<5.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/01ebc1b1-2dd3-4e91-93b2-fc8e5e93e925/wordpress","title":"WordPress Core < 4.9.2 - Authenticated Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-01-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"01ebc1b1-2dd3-4e91-93b2-fc8e5e93e925"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01ebc1b1-2dd3-4e91-93b2-fc8e5e93e925?source=api-prod","cve":"CVE-2018-5776","affectedVersions":"<=3.6.1|>=3.7,<=3.7.24|>=3.8,<=3.8.24|>=3.9,<=3.9.22|>=4.0,<=4.0.21|>=4.1,<=4.1.21|>=4.2,<=4.2.18|>=4.3,<=4.3.14|>=4.4,<=4.4.13|>=4.5,<=4.5.12|>=4.6,<=4.6.9|>=4.7,<=4.7.8|>=4.8,<=4.8.4|>=4.9,<=4.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0248f829-84de-40b9-bb63-354fbf06472d/wordpress","title":"WordPress Core < 6.0.2 - Authenticated SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"0248f829-84de-40b9-bb63-354fbf06472d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0248f829-84de-40b9-bb63-354fbf06472d?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.38|>=3.8,<=3.8.38|>=3.9,<=3.9.36|>=4.0,<=4.0.35|>=4.1,<=4.1.35|>=4.2,<=4.2.32|>=4.3,<=4.3.28|>=4.4,<=4.4.27|>=4.5,<=4.5.26|>=4.6,<=4.6.23|>=4.7,<=4.7.23|>=4.8,<=4.8.19|>=4.9,<=4.9.20|>=5.0,<=5.0.16|>=5.1,<=5.1.13|>=5.2,<=5.2.15|>=5.3,<=5.3.12|>=5.4,<=5.4.10|>=5.5,<=5.5.9|>=5.6,<=5.6.8|>=5.7,<=5.7.6|>=5.8,<=5.8.4|>=5.9,<=5.9.3|>=6.0,<=6.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/043d64ed-78dd-442e-87c9-92b5b64260b8/wordpress","title":"WordPress Core < 4.7.5 - Stored Cross-Site Scripting via filenames\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"043d64ed-78dd-442e-87c9-92b5b64260b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/043d64ed-78dd-442e-87c9-92b5b64260b8?source=api-prod","cve":"CVE-2017-9061","affectedVersions":"<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/044babea-8c04-4461-be53-80f2171da619/wordpress","title":"WordPress Core <= 2.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"044babea-8c04-4461-be53-80f2171da619"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/044babea-8c04-4461-be53-80f2171da619?source=api-prod","cve":"CVE-2007-5710","affectedVersions":"<=2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/04516d92-7f66-47b3-aeae-6752e03c1f95/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Scripting via CSS\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"04516d92-7f66-47b3-aeae-6752e03c1f95"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/04516d92-7f66-47b3-aeae-6752e03c1f95?source=api-prod","cve":"CVE-2014-9036","affectedVersions":"<=3.6.1|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/04e0b17e-efab-4b08-8c8a-93e3e4baffaa/wordpress","title":"WordPress Core < 5.2.4 - Type Confusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"04e0b17e-efab-4b08-8c8a-93e3e4baffaa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/04e0b17e-efab-4b08-8c8a-93e3e4baffaa?source=api-prod","cve":"CVE-2019-17675","affectedVersions":"<=3.6.1|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.13|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0534bc03-5d7d-47fe-9c07-c9a61af38df2/wordpress","title":"WordPress Core < 0.72 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2003-10-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"0534bc03-5d7d-47fe-9c07-c9a61af38df2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0534bc03-5d7d-47fe-9c07-c9a61af38df2?source=api-prod","cve":"CVE-2003-1598","affectedVersions":"<0.72","severity":"high"},{"advisoryId":"WPSECADV/WF/05873114-ceed-404c-9cc2-d85aa92ef6f3/wordpress","title":"Wordpress Core < 4.0.1 - Hash Collision\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"05873114-ceed-404c-9cc2-d85aa92ef6f3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05873114-ceed-404c-9cc2-d85aa92ef6f3?source=api-prod","cve":"CVE-2014-9037","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/06e4d7e3-c800-4b3d-9504-c69aa9a918fb/wordpress","title":"WordPress Core < 2.0.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"06e4d7e3-c800-4b3d-9504-c69aa9a918fb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06e4d7e3-c800-4b3d-9504-c69aa9a918fb?source=api-prod","cve":"CVE-2006-0986","affectedVersions":"<=2.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/0788659e-be5b-413d-b4fb-d60df07075e1/wordpress","title":"WordPress Core < 4.7.3 - Authenticated Cross-Site Scripting in Youtube URL Embeds\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"0788659e-be5b-413d-b4fb-d60df07075e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0788659e-be5b-413d-b4fb-d60df07075e1?source=api-prod","cve":"CVE-2017-6817","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0848d526-9530-40f3-8430-499d96b9a1b1/wordpress","title":"WordPress Core <= 2.2.1 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"0848d526-9530-40f3-8430-499d96b9a1b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0848d526-9530-40f3-8430-499d96b9a1b1?source=api-prod","cve":"CVE-2007-3544","affectedVersions":"<=2.2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/08f83fd1-5e8c-472f-819a-6078a5d2a56b/wordpress","title":"WordPress Core & WordPress MU < 2.8.1 - Username Enumeration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-07-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"08f83fd1-5e8c-472f-819a-6078a5d2a56b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/08f83fd1-5e8c-472f-819a-6078a5d2a56b?source=api-prod","cve":"CVE-2009-2336","affectedVersions":"<=2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/0987285b-4daf-4979-934b-7fa4a0ded99f/wordpress","title":"WordPress Core < 4.5.2 - Cross-Site Scripting via MediaElement.js\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-05-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"0987285b-4daf-4979-934b-7fa4a0ded99f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0987285b-4daf-4979-934b-7fa4a0ded99f?source=api-prod","cve":"CVE-2016-4567","affectedVersions":"<3.7|>=3.7,<=3.7.13|>=3.8,<=3.8.13|>=3.9,<=3.9.11|>=4.0,<=4.0.10|>=4.1,<=4.1.10|>=4.2,<=4.2.7|>=4.3,<=4.3.3|>=4.4,<=4.4.2|>=4.5,<=4.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/09935fd1-5a95-411a-a820-60888be7b059/wordpress","title":"WordPress Core < 3.8.2 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-04-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"09935fd1-5a95-411a-a820-60888be7b059"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09935fd1-5a95-411a-a820-60888be7b059?source=api-prod","affectedVersions":"=3.8.1","severity":"high"},{"advisoryId":"WPSECADV/WF/0a16651c-613b-462b-9d73-10a74892ecdc/wordpress","title":"WordPress Core < 2.5.1 - Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a16651c-613b-462b-9d73-10a74892ecdc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a16651c-613b-462b-9d73-10a74892ecdc?source=api-prod","cve":"CVE-2008-1930","affectedVersions":"<=2.5","severity":"high"},{"advisoryId":"WPSECADV/WF/0a6707ef-aab7-449c-8160-034bc188a998/wordpress","title":"WordPress Core < 6.4.3 - Authenticated(Administrator+) PHP File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a6707ef-aab7-449c-8160-034bc188a998"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a6707ef-aab7-449c-8160-034bc188a998?source=api-prod","cve":"CVE-2018-14028","affectedVersions":"<4.1|>=4.1,<=4.1.39|>=4.2,<=4.2.36|>=4.3,<=4.3.32|>=4.4,<=4.4.31|>=4.5,<=4.5.30|>=4.6,<=4.6.27|>=4.7,<=4.7.27|>=4.8,<=4.8.23|>=4.9,<=4.9.24|>=5.0,<=5.0.20|>=5.1,<=5.1.17|>=5.2,<=5.2.19|>=5.3,<=5.3.16|>=5.4,<=5.4.14|>=5.5,<=5.5.13|>=5.6,<=5.6.12|>=5.7,<=5.7.10|>=5.8,<=5.8.8|>=5.9,<=5.9.8|>=6.0,<=6.0.6|>=6.1,<=6.1.4|>=6.2,<=6.2.3|>=6.3,<=6.3.2|>=6.4,<=6.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ac7a936-70fa-41ce-89f7-ec6a77964c96/wordpress","title":"WordPress Core <= 3.3.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ac7a936-70fa-41ce-89f7-ec6a77964c96"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ac7a936-70fa-41ce-89f7-ec6a77964c96?source=api-prod","cve":"CVE-2012-6635","affectedVersions":"<3.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0b4ec57a-c52a-40c1-897a-db67efbd7177/wordpress","title":"WordPress Core < 4.9.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b4ec57a-c52a-40c1-897a-db67efbd7177"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b4ec57a-c52a-40c1-897a-db67efbd7177?source=api-prod","cve":"CVE-2017-17094","affectedVersions":"<3.7|=4.9|>=3.7,<=3.7.23|>=3.8,<=3.8.23|>=3.9,<=3.9.21|>=4.0,<=4.0.20|>=4.1,<=4.1.20|>=4.2,<=4.2.17|>=4.3,<=4.3.13|>=4.4,<=4.4.12|>=4.5,<=4.5.11|>=4.6,<=4.6.8|>=4.7,<=4.7.7|>=4.8,<=4.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ba551a4-109d-4e28-b497-539264095134/wordpress","title":"WordPress Core < 5.8.2 - ca-bundle.crt contains expired certificate DST Root CA X3\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ba551a4-109d-4e28-b497-539264095134"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ba551a4-109d-4e28-b497-539264095134?source=api-prod","affectedVersions":"<5.2|>=5.2,<=5.2.12|>=5.3,<=5.3.9|>=5.4,<=5.4.7|>=5.5,<=5.5.6|>=5.6,<=5.6.5|>=5.7,<=5.7.3|>=5.8,<=5.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0da1cc3b-5d6b-4ca0-9d8a-31c63ab5b9c9/wordpress","title":"WordPress Core < 6.2.1 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"0da1cc3b-5d6b-4ca0-9d8a-31c63ab5b9c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0da1cc3b-5d6b-4ca0-9d8a-31c63ab5b9c9?source=api-prod","affectedVersions":"<4.1|>=4.1,<4.1.38|>=4.2,<4.2.35|>=4.3,<4.3.31|>=4.4,<4.4.30|>=4.5,<4.5.29|>=4.6,<4.6.26|>=4.7,<4.7.26|>=4.8,<4.8.22|>=4.9,<4.9.23|>=5.0,<5.0.19|>=5.1,<5.1.16|>=5.2,<5.2.18|>=5.3,<5.3.15|>=5.4,<5.4.13|>=5.5,<5.5.12|>=5.6,<5.6.11|>=5.7,<5.7.9|>=5.8,<5.8.7|>=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ddb582a-e966-4c0b-a743-29d8943f846b/wordpress","title":"WordPress Core 5.9 - 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ddb582a-e966-4c0b-a743-29d8943f846b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ddb582a-e966-4c0b-a743-29d8943f846b?source=api-prod","affectedVersions":">=5.9,<5.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ed8ee65-d910-42a4-b6de-3229346dc59e/wordpress","title":"WordPress Core < 4.7.3 - Bypass URL Validation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ed8ee65-d910-42a4-b6de-3229346dc59e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ed8ee65-d910-42a4-b6de-3229346dc59e?source=api-prod","cve":"CVE-2017-6815","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0eff89a8-07b7-49fc-b68d-9efd87fcac3c/wordpress","title":"WordPress Core < 3.0.3 - Access Control Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-12-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"0eff89a8-07b7-49fc-b68d-9efd87fcac3c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0eff89a8-07b7-49fc-b68d-9efd87fcac3c?source=api-prod","cve":"CVE-2010-5106","affectedVersions":"<=3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0f19194c-dbe8-455d-bee7-2f7d4ce9224f/wordpress","title":"WordPress Core < 4.6.1 - Authenticated Directory Traversal to Arbitrary File Access\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"0f19194c-dbe8-455d-bee7-2f7d4ce9224f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0f19194c-dbe8-455d-bee7-2f7d4ce9224f?source=api-prod","cve":"CVE-2016-7169","affectedVersions":"<3.7|=4.6|>=3.7,<=3.7.15|>=3.8,<=3.8.15|>=3.9,<=3.9.13|>=4.0,<=4.0.12|>=4.1,<=4.1.12|>=4.2,<=4.2.9|>=4.3,<=4.3.5|>=4.4,<=4.4.4|>=4.5,<=4.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0fbb1044-dd42-469d-9299-135ef2e609e0/wordpress","title":"WordPress Core < 4.5 - Cross-Site Request Forgery  via wp_ajax_wp_compression_test\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"0fbb1044-dd42-469d-9299-135ef2e609e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fbb1044-dd42-469d-9299-135ef2e609e0?source=api-prod","cve":"CVE-2016-6635","affectedVersions":"<4.5","severity":"high"},{"advisoryId":"WPSECADV/WF/0fcdfba2-aa19-4d0c-8880-5ee2c0680555/wordpress","title":"WordPress Core < 6.0.3 - Shared User Instance Weakness\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"0fcdfba2-aa19-4d0c-8880-5ee2c0680555"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fcdfba2-aa19-4d0c-8880-5ee2c0680555?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"low"},{"advisoryId":"WPSECADV/WF/10a811f3-0c5b-4e06-a9bb-338d36d0b5eb/wordpress","title":"WordPress Core < 4.5.3 - Revision History Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"10a811f3-0c5b-4e06-a9bb-338d36d0b5eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10a811f3-0c5b-4e06-a9bb-338d36d0b5eb?source=api-prod","cve":"CVE-2016-5835","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/112ed4f2-fe91-4d83-a3f7-eaf889870af4/wordpress","title":"WordPress Core - All known versions - Unauthenticated Blind Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"112ed4f2-fe91-4d83-a3f7-eaf889870af4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/112ed4f2-fe91-4d83-a3f7-eaf889870af4?source=api-prod","cve":"CVE-2022-3590","affectedVersions":">=4.1.30,<=6.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/11d53df8-f7b3-467c-8b3a-515974f1ea69/wordpress","title":"WordPress Core < 1.5.1.3 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"11d53df8-f7b3-467c-8b3a-515974f1ea69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/11d53df8-f7b3-467c-8b3a-515974f1ea69?source=api-prod","cve":"CVE-2005-2108","affectedVersions":"<1.5.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/12072b77-fe68-4304-8230-7c137a8d05ac/wordpress","title":"WordPress Core < 3.0.2 - Spam Protection Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"12072b77-fe68-4304-8230-7c137a8d05ac"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12072b77-fe68-4304-8230-7c137a8d05ac?source=api-prod","cve":"CVE-2010-5293","affectedVersions":"<3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/120fa415-81e3-4084-8943-df83cde334c5/wordpress","title":"WordPress Core < 2.8.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-08-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"120fa415-81e3-4084-8943-df83cde334c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/120fa415-81e3-4084-8943-df83cde334c5?source=api-prod","cve":"CVE-2009-2854","affectedVersions":"<=2.8.2","severity":"high"},{"advisoryId":"WPSECADV/WF/1351cd6b-ae22-4363-b36b-f892c504f5d9/wordpress","title":"WordPress Core < 4.4.2 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"1351cd6b-ae22-4363-b36b-f892c504f5d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1351cd6b-ae22-4363-b36b-f892c504f5d9?source=api-prod","cve":"CVE-2016-2222","affectedVersions":"<3.7|>=3.7,<=3.7.12|>=3.8,<=3.8.12|>=3.9,<=3.9.10|>=4.0,<=4.0.9|>=4.1,<=4.1.9|>=4.2,<=4.2.6|>=4.3,<=4.3.2|>=4.4,<=4.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/14689386-fca5-48a6-9494-4a79b920d5f8/wordpress","title":"WordPress Core < 3.4.2 - Missing Authorization Checks on create_post\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"14689386-fca5-48a6-9494-4a79b920d5f8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/14689386-fca5-48a6-9494-4a79b920d5f8?source=api-prod","cve":"CVE-2012-4421","affectedVersions":"<3.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/149eb7ef-be96-442e-925e-01d8d76e3a1a/wordpress","title":"WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"149eb7ef-be96-442e-925e-01d8d76e3a1a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/149eb7ef-be96-442e-925e-01d8d76e3a1a?source=api-prod","cve":"CVE-2019-16781","affectedVersions":"<3.7|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/14b7fd1e-6e2d-49bb-8492-b072afeebd88/wordpress","title":"WordPress Core < 4.7.1 - Weak Multi-Site Activation Key for User and Site Signup\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"14b7fd1e-6e2d-49bb-8492-b072afeebd88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/14b7fd1e-6e2d-49bb-8492-b072afeebd88?source=api-prod","cve":"CVE-2017-5493","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/159b5565-f4d8-4514-9397-20b6a0890475/wordpress","title":"WordPress Core < 2.0.4 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"159b5565-f4d8-4514-9397-20b6a0890475"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/159b5565-f4d8-4514-9397-20b6a0890475?source=api-prod","cve":"CVE-2006-3390","affectedVersions":"<=2.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/16102d4c-86d6-471e-b787-54e4bc14b5a2/wordpress","title":"WordPress Core < 4.5.3 - Cross-Site Scripting via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"16102d4c-86d6-471e-b787-54e4bc14b5a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16102d4c-86d6-471e-b787-54e4bc14b5a2?source=api-prod","cve":"CVE-2016-5832","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/17646179-47ad-4846-a581-3e713df43c32/wordpress","title":"WordPress Core < 4.5.3 - Denial of Service via oEmbed Protocol\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"17646179-47ad-4846-a581-3e713df43c32"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/17646179-47ad-4846-a581-3e713df43c32?source=api-prod","cve":"CVE-2016-5836","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/1984abee-a74c-48d7-874f-c4421243e5e5/wordpress","title":"WordPress Core <= 7.1 - Unauthenticated Stored Cross-Site Scripting via wpautop() Blockquote Handling\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"1984abee-a74c-48d7-874f-c4421243e5e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1984abee-a74c-48d7-874f-c4421243e5e5?source=api-prod","cve":"CVE-2026-93485","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"high"},{"advisoryId":"WPSECADV/WF/19c88a9a-1f97-4a46-b759-9ca030d577e7/wordpress","title":"WordPress Core < 6.0.3 - Open Redirect\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"19c88a9a-1f97-4a46-b759-9ca030d577e7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/19c88a9a-1f97-4a46-b759-9ca030d577e7?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/1ab4dc20-ce50-4ad0-aff4-9fc529d1911f/wordpress","title":"WordPress Core <= 3.3.1 - Same Origin Policy Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ab4dc20-ce50-4ad0-aff4-9fc529d1911f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ab4dc20-ce50-4ad0-aff4-9fc529d1911f?source=api-prod","cve":"CVE-2012-2401","affectedVersions":"<3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/1ac39498-3171-4d91-a911-381c8ed751dc/wordpress","title":"WordPress Core <= 3.9.1 - XML External Entity (XXE) Weakness\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ac39498-3171-4d91-a911-381c8ed751dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ac39498-3171-4d91-a911-381c8ed751dc?source=api-prod","cve":"CVE-2014-2053","affectedVersions":"<3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/1ba55302-b38f-4932-bbba-cdd517380ad7/wordpress","title":"WordPress Core 6.9 -  7.0.1 - Remote Code Execution via REST API Batch Request Route Confusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ba55302-b38f-4932-bbba-cdd517380ad7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ba55302-b38f-4932-bbba-cdd517380ad7?source=api-prod","cve":"CVE-2026-63030","affectedVersions":">=6.9,<6.9.5|>=7.0,<7.0.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/1bc0aa64-57a6-44ef-974a-70991cc3820f/wordpress","title":"WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"1bc0aa64-57a6-44ef-974a-70991cc3820f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1bc0aa64-57a6-44ef-974a-70991cc3820f?source=api-prod","cve":"CVE-2019-20041","affectedVersions":"<3.7|=5.3|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d2f973a-1fb3-4c75-8c33-6d1fadf9c906/wordpress","title":"WordPress Core <= 1.5 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d2f973a-1fb3-4c75-8c33-6d1fadf9c906"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d2f973a-1fb3-4c75-8c33-6d1fadf9c906?source=api-prod","cve":"CVE-2005-1102","affectedVersions":"<=1.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d305711-7a84-46c2-b333-02f5a745d76c/wordpress","title":"WordPress Core < 2.0.4 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d305711-7a84-46c2-b333-02f5a745d76c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d305711-7a84-46c2-b333-02f5a745d76c?source=api-prod","cve":"CVE-2007-5106","affectedVersions":"<=2.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d5987cd-1304-487c-8d1c-cab0510fbb84/wordpress","title":"WordPress Core < 5.0 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d5987cd-1304-487c-8d1c-cab0510fbb84"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d5987cd-1304-487c-8d1c-cab0510fbb84?source=api-prod","cve":"CVE-2018-6389","affectedVersions":"<5.0","severity":"high"},{"advisoryId":"WPSECADV/WF/1f2845a5-7572-4533-8949-08bee99fca20/wordpress","title":"WordPress < 2.0.6 -  Username Enumeration via Error Messages\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"1f2845a5-7572-4533-8949-08bee99fca20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f2845a5-7572-4533-8949-08bee99fca20?source=api-prod","cve":"CVE-2007-0109","affectedVersions":"<=2.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/1f846ffa-0dfa-4549-845a-7884a390462a/wordpress","title":"WordPress Core < 5.0.1 - PHAR Unserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"1f846ffa-0dfa-4549-845a-7884a390462a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f846ffa-0dfa-4549-845a-7884a390462a?source=api-prod","cve":"CVE-2018-1000773","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/1fc3f65e-5fbe-403b-b7cd-dde16a7e5778/wordpress","title":"WordPress Core < 6.3.2 – Authenticated (Subscriber+) Arbitrary Shortcode Execution via parse-media-shortcode\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"1fc3f65e-5fbe-403b-b7cd-dde16a7e5778"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1fc3f65e-5fbe-403b-b7cd-dde16a7e5778?source=api-prod","affectedVersions":"<=4.1.38|>=4.2,<=4.2.35|>=4.3,<=4.3.31|>=4.4,<=4.4.30|>=4.5,<=4.5.29|>=4.6,<=4.6.26|>=4.7,<=4.7.26|>=4.8,<=4.8.22|>=4.9,<=4.9.23|>=5.0,<=5.0.19|>=5.1,<=5.1.16|>=5.2,<=5.2.18|>=5.3,<=5.3.15|>=5.4,<=5.4.13|>=5.5,<=5.5.12|>=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2144ba9f-cb0a-4b54-a23f-3ecb2548a490/wordpress","title":"WordPress Core < 5.2.4 - Cache Poisoning\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"2144ba9f-cb0a-4b54-a23f-3ecb2548a490"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2144ba9f-cb0a-4b54-a23f-3ecb2548a490?source=api-prod","cve":"CVE-2019-17673","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.14|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/221872e2-7929-4fba-8a57-7d9fd73a76db/wordpress","title":"WordPress Core < 3.0.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"221872e2-7929-4fba-8a57-7d9fd73a76db"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/221872e2-7929-4fba-8a57-7d9fd73a76db?source=api-prod","cve":"CVE-2010-5297","affectedVersions":"<3.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/22b3ee70-7ba6-4f8a-add4-3c7f4765b3d1/wordpress","title":"WordPress Core < 4.2.4 - Stored Cross-Site Scripting via accessibility-helper Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"22b3ee70-7ba6-4f8a-add4-3c7f4765b3d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22b3ee70-7ba6-4f8a-add4-3c7f4765b3d1?source=api-prod","cve":"CVE-2015-5733","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/22bf2719-335d-4331-8c59-648f6f903ffa/wordpress","title":"WordPress Core <= 3.0.4 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-02-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"22bf2719-335d-4331-8c59-648f6f903ffa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22bf2719-335d-4331-8c59-648f6f903ffa?source=api-prod","cve":"CVE-2011-0700","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/23b2fc40-d8e3-4b84-ab8d-ff82a6f21842/wordpress","title":"WordPress Core < 4.5 - Cross-Site Scripting via Network Settings Page\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"23b2fc40-d8e3-4b84-ab8d-ff82a6f21842"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23b2fc40-d8e3-4b84-ab8d-ff82a6f21842?source=api-prod","cve":"CVE-2016-6634","affectedVersions":"<4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/2481f37b-a220-435d-9b43-6e7c5f42034f/wordpress","title":"WordPress Core < 4.7.2 -  Arbitrary Page Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"2481f37b-a220-435d-9b43-6e7c5f42034f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2481f37b-a220-435d-9b43-6e7c5f42034f?source=api-prod","cve":"CVE-2017-1001000","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"high"},{"advisoryId":"WPSECADV/WF/24b89ed2-9dfb-4068-8459-cb2e708c7778/wordpress","title":"WordPress Core < 4.3.1 - Authenticated Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"24b89ed2-9dfb-4068-8459-cb2e708c7778"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/24b89ed2-9dfb-4068-8459-cb2e708c7778?source=api-prod","cve":"CVE-2015-7989","affectedVersions":"<3.7|=4.3|>=3.7,<=3.7.10|>=3.8,<=3.8.10|>=3.9,<=3.9.8|>=4.0,<=4.0.7|>=4.1,<=4.1.7|>=4.2,<=4.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/254b5dd2-c3d9-45d9-8328-6cc8ef29c9db/wordpress","title":"Wordpress Core < 5.5 - Unauthorized Password Reset via Interception\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"254b5dd2-c3d9-45d9-8328-6cc8ef29c9db"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/254b5dd2-c3d9-45d9-8328-6cc8ef29c9db?source=api-prod","cve":"CVE-2017-8295","affectedVersions":"<5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/26753b92-3ec5-4b65-8fc7-2d6488f12974/wordpress","title":"WordPress Core < 4.5.2 - Cross-Site Scripting via plupload.flash.swf\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-05-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"26753b92-3ec5-4b65-8fc7-2d6488f12974"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26753b92-3ec5-4b65-8fc7-2d6488f12974?source=api-prod","cve":"CVE-2016-4566","affectedVersions":"<3.7|>=3.7,<=3.7.13|>=3.8,<=3.8.13|>=3.9,<=3.9.11|>=4.0,<=4.0.10|>=4.1,<=4.1.10|>=4.2,<=4.2.7|>=4.3,<=4.3.3|>=4.4,<=4.4.2|>=4.5,<=4.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/26daa367-ef73-4ae0-843e-6d5366cc4ecd/wordpress","title":"WordPress Core <= 2.2.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"26daa367-ef73-4ae0-843e-6d5366cc4ecd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26daa367-ef73-4ae0-843e-6d5366cc4ecd?source=api-prod","cve":"CVE-2007-4893","affectedVersions":"<=2.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2761c5e9-7c4c-4257-9b55-587c02d07153/wordpress","title":"WordPress Core < 3.0.5 - Improper Authorization to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2761c5e9-7c4c-4257-9b55-587c02d07153"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2761c5e9-7c4c-4257-9b55-587c02d07153?source=api-prod","cve":"CVE-2011-0701","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/278da117-fe04-45d6-86d4-e71fe6536032/wordpress","title":"WordPress Core <= 7.0.2 - Unauthenticated Reflected Cross-Site Scripting via log Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"278da117-fe04-45d6-86d4-e71fe6536032"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/278da117-fe04-45d6-86d4-e71fe6536032?source=api-prod","cve":"CVE-2026-64638","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2822114a-ffc2-43dd-bbf1-e4504aababfb/wordpress","title":"WordPress Core < 2.2.2 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2822114a-ffc2-43dd-bbf1-e4504aababfb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2822114a-ffc2-43dd-bbf1-e4504aababfb?source=api-prod","cve":"CVE-2007-3639","affectedVersions":"<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/28747e2e-9012-470c-a891-0fe97fd1ddba/wordpress","title":"WordPress Core <= 7.1 - Missing Authorization to customize_changeset Write via XML-RPC (Multisite/Custom Role edit_css Bypass)\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"28747e2e-9012-470c-a891-0fe97fd1ddba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28747e2e-9012-470c-a891-0fe97fd1ddba?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/28bcaf28-bb75-4d55-9e9b-afa760fc793e/wordpress","title":"WordPress Core < 2.7 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-12-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"28bcaf28-bb75-4d55-9e9b-afa760fc793e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28bcaf28-bb75-4d55-9e9b-afa760fc793e?source=api-prod","cve":"CVE-2008-6767","affectedVersions":"<=2.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/292be50c-6eab-4462-b46c-c7763e8aa223/wordpress","title":"WordPress Core < 2.1.3 -  Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"292be50c-6eab-4462-b46c-c7763e8aa223"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/292be50c-6eab-4462-b46c-c7763e8aa223?source=api-prod","cve":"CVE-2007-1893","affectedVersions":"<=2.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/29778d95-4859-4383-91c7-15e7907b825c/wordpress","title":"WordPress Core < 5.0.1 - PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"29778d95-4859-4383-91c7-15e7907b825c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/29778d95-4859-4383-91c7-15e7907b825c?source=api-prod","cve":"CVE-2018-20148","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/2a225ccb-a7dc-4437-bd97-b309d6ae6a47/wordpress","title":"WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a225ccb-a7dc-4437-bd97-b309d6ae6a47"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a225ccb-a7dc-4437-bd97-b309d6ae6a47?source=api-prod","cve":"CVE-2024-31111","affectedVersions":">=5.9,<=5.9.9|>=6.0,<=6.0.8|>=6.1,<=6.1.6|>=6.2,<=6.2.5|>=6.3,<=6.3.4|>=6.4,<=6.4.4|>=6.5,<=6.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a521be2-b3ce-47de-8a28-aeff94942d85/wordpress","title":"WordPress Core <= 3.0.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-12-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a521be2-b3ce-47de-8a28-aeff94942d85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a521be2-b3ce-47de-8a28-aeff94942d85?source=api-prod","cve":"CVE-2010-4536","affectedVersions":"<=3.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ab6e751-dc23-442f-b22e-ee41fd6651f6/wordpress","title":"WordPress Core < 2.0.4 - Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-07-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ab6e751-dc23-442f-b22e-ee41fd6651f6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ab6e751-dc23-442f-b22e-ee41fd6651f6?source=api-prod","cve":"CVE-2006-4028","affectedVersions":"<2.0.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/2ad674f7-aff6-432d-9c4c-95aebf8fcf6b/wordpress","title":"WordPress Core < 2.3.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ad674f7-aff6-432d-9c4c-95aebf8fcf6b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ad674f7-aff6-432d-9c4c-95aebf8fcf6b?source=api-prod","cve":"CVE-2007-6318","affectedVersions":"<=2.3.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/2b300f55-f1ee-4345-adc2-32cd3b081a30/wordpress","title":"WordPress Core < 4.7.1 - Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b300f55-f1ee-4345-adc2-32cd3b081a30"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b300f55-f1ee-4345-adc2-32cd3b081a30?source=api-prod","cve":"CVE-2017-5487","affectedVersions":"<3.7|=4.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2be089a0-d4d5-4d64-8fb7-8c42286ebbcd/wordpress","title":"WordPress Core < 5.2.3 - Cross-Site Scripting via Media Uploads\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"2be089a0-d4d5-4d64-8fb7-8c42286ebbcd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2be089a0-d4d5-4d64-8fb7-8c42286ebbcd?source=api-prod","cve":"CVE-2019-16217","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d0529df-70be-4559-a760-5537e0fd4d1e/wordpress","title":"WordPress Core < 3.1.3 - Media Related Security Issue\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"2d0529df-70be-4559-a760-5537e0fd4d1e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d0529df-70be-4559-a760-5537e0fd4d1e?source=api-prod","cve":"CVE-2011-3122","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d853bd5-4caa-4b90-a9a6-929fb18b9337/wordpress","title":"WordPress Core < 4.6.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2d853bd5-4caa-4b90-a9a6-929fb18b9337"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d853bd5-4caa-4b90-a9a6-929fb18b9337?source=api-prod","cve":"CVE-2016-7168","affectedVersions":"<3.7|=4.6|>=3.7,<=3.7.15|>=3.8,<=3.8.15|>=3.9,<=3.9.13|>=4.0,<=4.0.12|>=4.1,<=4.1.12|>=4.2,<=4.2.9|>=4.3,<=4.3.5|>=4.4,<=4.4.4|>=4.5,<=4.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/2dccdaa8-5095-42c4-9ca8-90fb444c0ae4/wordpress","title":"WordPress Core < 4.8.2 - Stored Cross-Site Scripting via Plugin Names\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"2dccdaa8-5095-42c4-9ca8-90fb444c0ae4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2dccdaa8-5095-42c4-9ca8-90fb444c0ae4?source=api-prod","cve":"CVE-2017-14721","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2e27cfff-6763-4e54-af5d-0f4cf23e72f7/wordpress","title":"WordPress Core < 4.0.1 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"2e27cfff-6763-4e54-af5d-0f4cf23e72f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2e27cfff-6763-4e54-af5d-0f4cf23e72f7?source=api-prod","cve":"CVE-2014-9038","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/2f0d4f48-a315-4308-a5b6-7d3f045b292f/wordpress","title":"WordPress Core < 6.0.3 - Information Disclosure (Multi-Part Email Leak)\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"2f0d4f48-a315-4308-a5b6-7d3f045b292f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f0d4f48-a315-4308-a5b6-7d3f045b292f?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"low"},{"advisoryId":"WPSECADV/WF/300c6ea4-4eed-4be5-abfd-ec4ad9b741d3/wordpress","title":"WordPress Core < 6.0.2 - Stored Cross-Site Scripting via Plugin Deactivation and Deletion Errors\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"300c6ea4-4eed-4be5-abfd-ec4ad9b741d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/300c6ea4-4eed-4be5-abfd-ec4ad9b741d3?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.38|>=3.8,<=3.8.38|>=3.9,<=3.9.36|>=4.0,<=4.0.35|>=4.1,<=4.1.35|>=4.2,<=4.2.32|>=4.3,<=4.3.28|>=4.4,<=4.4.27|>=4.5,<=4.5.26|>=4.6,<=4.6.23|>=4.7,<=4.7.23|>=4.8,<=4.8.19|>=4.9,<=4.9.20|>=5.0,<=5.0.16|>=5.1,<=5.1.13|>=5.2,<=5.2.15|>=5.3,<=5.3.12|>=5.4,<=5.4.10|>=5.5,<=5.5.9|>=5.6,<=5.6.8|>=5.7,<=5.7.6|>=5.8,<=5.8.4|>=5.9,<=5.9.3|>=6.0,<=6.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/303380f7-d043-48d5-8edb-9d45f13d0d82/wordpress","title":"WordPress Core <= 3.3.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"303380f7-d043-48d5-8edb-9d45f13d0d82"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/303380f7-d043-48d5-8edb-9d45f13d0d82?source=api-prod","cve":"CVE-2012-6634","affectedVersions":"<3.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/305ffc3b-5f1c-42fb-9fd5-0dfcbe1c661b/wordpress","title":"WordPress Core < 4.7.5 - Cross-Site Request Forgery Filesystem Credential Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"305ffc3b-5f1c-42fb-9fd5-0dfcbe1c661b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/305ffc3b-5f1c-42fb-9fd5-0dfcbe1c661b?source=api-prod","cve":"CVE-2017-9064","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"high"},{"advisoryId":"WPSECADV/WF/3379dde1-d1fb-4ec8-b834-de00fb6a38f2/wordpress","title":"WordPress Core < 5.4.1 - Authenticated (Author+) Cross-Site Scripting via File Uploads\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"3379dde1-d1fb-4ec8-b834-de00fb6a38f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3379dde1-d1fb-4ec8-b834-de00fb6a38f2?source=api-prod","cve":"CVE-2020-11026","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/33c666af-b51f-4d9e-9c32-ca0a124cd4b7/wordpress","title":"WordPress Core < 2.5 -  Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-12-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"33c666af-b51f-4d9e-9c32-ca0a124cd4b7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33c666af-b51f-4d9e-9c32-ca0a124cd4b7?source=api-prod","cve":"CVE-2008-0191","affectedVersions":"<=2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/33e8a48e-0ddb-4278-a023-818aebe92dab/wordpress","title":"WordPress Core < 2.6.1 - Cryptographic Weakness\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-08-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"33e8a48e-0ddb-4278-a023-818aebe92dab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33e8a48e-0ddb-4278-a023-818aebe92dab?source=api-prod","cve":"CVE-2008-3747","affectedVersions":"<=2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/342370a0-9364-40cd-9556-e53312e67548/wordpress","title":"WordPress Core < 3.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"342370a0-9364-40cd-9556-e53312e67548"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/342370a0-9364-40cd-9556-e53312e67548?source=api-prod","cve":"CVE-2012-4422","affectedVersions":"<=3.4.1","severity":"low"},{"advisoryId":"WPSECADV/WF/354a5b89-8845-4486-8cc5-7339a6a107c0/wordpress","title":"WordPress Core < 2.6.2 - Arbitrary User Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"354a5b89-8845-4486-8cc5-7339a6a107c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/354a5b89-8845-4486-8cc5-7339a6a107c0?source=api-prod","cve":"CVE-2008-4106","affectedVersions":"<=2.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/35ac717c-e299-4a56-bead-cb1d050da75c/wordpress","title":"WordPress Core <= 1.5.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"35ac717c-e299-4a56-bead-cb1d050da75c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/35ac717c-e299-4a56-bead-cb1d050da75c?source=api-prod","cve":"CVE-2005-2107","affectedVersions":"<=1.5.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/36e15052-0e04-4b72-b573-b736109517b8/wordpress","title":"WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"36e15052-0e04-4b72-b573-b736109517b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/36e15052-0e04-4b72-b573-b736109517b8?source=api-prod","cve":"CVE-2020-28036","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/371deb9d-707f-47e4-96d7-1a287926b536/wordpress","title":"WordPress Core < 5.4.2 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"371deb9d-707f-47e4-96d7-1a287926b536"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/371deb9d-707f-47e4-96d7-1a287926b536?source=api-prod","cve":"CVE-2020-4047","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/372632cb-8dfd-4d74-a765-c8fb9d0f1b78/wordpress","title":"WordPress Core <= 2.3.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"372632cb-8dfd-4d74-a765-c8fb9d0f1b78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/372632cb-8dfd-4d74-a765-c8fb9d0f1b78?source=api-prod","cve":"CVE-2008-1304","affectedVersions":"<=2.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/37f7f9ef-d57a-41e9-bd2c-2aa04a82b6c4/wordpress","title":"WordPress Core <= 2.0.5 - Cross-Site Request Forgery to Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"37f7f9ef-d57a-41e9-bd2c-2aa04a82b6c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/37f7f9ef-d57a-41e9-bd2c-2aa04a82b6c4?source=api-prod","cve":"CVE-2007-0106","affectedVersions":"<=2.0.5","severity":"high"},{"advisoryId":"WPSECADV/WF/3802cbf7-6725-4f93-a178-2af02bb022a1/wordpress","title":"WordPress Core < 5.2.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"3802cbf7-6725-4f93-a178-2af02bb022a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3802cbf7-6725-4f93-a178-2af02bb022a1?source=api-prod","cve":"CVE-2019-16221","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/38979e27-2023-4f84-a708-1732b4117066/wordpress","title":"WordPress Core < 6.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Customizer\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"38979e27-2023-4f84-a708-1732b4117066"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38979e27-2023-4f84-a708-1732b4117066?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/38b27ee7-0e92-47ad-89f8-1a3c8d5c9442/wordpress","title":"WordPress Core <= 2.3.3 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"38b27ee7-0e92-47ad-89f8-1a3c8d5c9442"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38b27ee7-0e92-47ad-89f8-1a3c8d5c9442?source=api-prod","cve":"CVE-2008-4769","affectedVersions":"<=2.3.3|=2.5","severity":"high"},{"advisoryId":"WPSECADV/WF/38b63167-e1a6-4279-97cf-900df0651f20/wordpress","title":"WordPress Core 4.7.0 - 6.3.1 - Sensitive Information Exposure via User Search REST Endpoint\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"38b63167-e1a6-4279-97cf-900df0651f20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38b63167-e1a6-4279-97cf-900df0651f20?source=api-prod","cve":"CVE-2023-5561","affectedVersions":">=4.7,<=4.7.26|>=4.8,<=4.8.22|>=4.9,<=4.9.23|>=5.0,<=5.0.19|>=5.1,<=5.1.16|>=5.2,<=5.2.18|>=5.3,<=5.3.15|>=5.4,<=5.4.13|>=5.5,<=5.5.12|>=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3a71b8da-73dd-488e-b553-77116731f13f/wordpress","title":"WordPress Core < 4.3.1 - Authorization Bypass to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"3a71b8da-73dd-488e-b553-77116731f13f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3a71b8da-73dd-488e-b553-77116731f13f?source=api-prod","cve":"CVE-2015-5715","affectedVersions":"<3.7|=4.3|>=3.7,<=3.7.10|>=3.8,<=3.8.10|>=3.9,<=3.9.8|>=4.0,<=4.0.7|>=4.1,<=4.1.7|>=4.2,<=4.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/3bdb73f9-d091-4de7-975c-10090ee1f749/wordpress","title":"WordPress Core < 3.9.2 - Cross-Site Request Forgery Protection Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"3bdb73f9-d091-4de7-975c-10090ee1f749"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3bdb73f9-d091-4de7-975c-10090ee1f749?source=api-prod","cve":"CVE-2014-5204","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"high"},{"advisoryId":"WPSECADV/WF/3cf00aef-427b-4256-9cbd-83c8e5059ecf/wordpress","title":"WordPress Core < 4.0 - Missing Session Cookie Expiration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"3cf00aef-427b-4256-9cbd-83c8e5059ecf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3cf00aef-427b-4256-9cbd-83c8e5059ecf?source=api-prod","cve":"CVE-2012-5868","affectedVersions":"<4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d3b090a-71a3-4430-871d-f19ee1033e01/wordpress","title":"WordPress Core < 1.5.1 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d3b090a-71a3-4430-871d-f19ee1033e01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d3b090a-71a3-4430-871d-f19ee1033e01?source=api-prod","cve":"CVE-2005-1688","affectedVersions":"<1.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d59700b-3540-464c-bd27-23bb71f9b082/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom Header Image Data\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d59700b-3540-464c-bd27-23bb71f9b082"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d59700b-3540-464c-bd27-23bb71f9b082?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d9f4fbe-6da6-4620-a071-00b7a462de45/wordpress","title":"WordPress Core < 4.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d9f4fbe-6da6-4620-a071-00b7a462de45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d9f4fbe-6da6-4620-a071-00b7a462de45?source=api-prod","cve":"CVE-2015-3438","affectedVersions":"<3.7|>=3.7,<=3.7.5|>=3.8,<=3.8.5|>=3.9,<=3.9.3|>=4.0,<=4.0.1|>=4.1,<=4.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/3e0b4faf-35cd-4f59-ae77-fb4f4819ad32/wordpress","title":"WordPress <= 6.9.1 - Missing Authorization to Authenticated (Author+) Sensitive Information Disclosure via query-attachments AJAX Endpoint\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e0b4faf-35cd-4f59-ae77-fb4f4819ad32"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e0b4faf-35cd-4f59-ae77-fb4f4819ad32?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3f389cbf-a327-46a1-9fb7-ed393212033a/wordpress","title":"WordPress Core 2.9.2 and 3.0.4 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-01-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f389cbf-a327-46a1-9fb7-ed393212033a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f389cbf-a327-46a1-9fb7-ed393212033a?source=api-prod","cve":"CVE-2011-3818","affectedVersions":"=2.9.2|=3.0.4","severity":"high"},{"advisoryId":"WPSECADV/WF/3f6b435b-d8b4-434b-8cac-cc3adbc437eb/wordpress","title":"WordPress Core <= 7.0.3 - Authenticated (Author+) Remote Code Execution via Malicious File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f6b435b-d8b4-434b-8cac-cc3adbc437eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f6b435b-d8b4-434b-8cac-cc3adbc437eb?source=api-prod","cve":"CVE-2026-65640","affectedVersions":">=4.7.0,<=4.7.34|>=4.8.0,<=4.8.29|>=4.9.0,<=4.9.30|>=5.0.0,<=5.0.26|>=5.1.0,<=5.1.23|>=5.2.0,<=5.2.25|>=5.3.0,<=5.3.22|>=5.4.0,<=5.4.20|>=5.5.0,<=5.5.19|>=5.6.0,<=5.6.18|>=5.7.0,<=5.7.16|>=5.8.0,<=5.8.14|>=5.9.0,<=5.9.15|>=6.0.0,<=6.0.13|>=6.1.0,<=6.1.11|>=6.2.0,<=6.2.10|>=6.3.0,<=6.3.9|>=6.4.0,<=6.4.9|>=6.5.0,<=6.5.9|>=6.6.0,<=6.6.6|>=6.7.0,<=6.7.6|>=6.8.0,<=6.8.7|>=6.9.0,<=6.9.6|>=7.0.0,<=7.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/40502842-8505-41fb-9d3a-a5d567040921/wordpress","title":"WordPress Core < 4.7.3 - Cross-Site Scripting via Media Metadata\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"40502842-8505-41fb-9d3a-a5d567040921"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40502842-8505-41fb-9d3a-a5d567040921?source=api-prod","cve":"CVE-2017-6814","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4290ee15-0362-48c5-a570-4a1b6719a948/wordpress","title":"WordPress Core < 5.5.2 - Reflected Cross-Site Scripting via Global Variables\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"4290ee15-0362-48c5-a570-4a1b6719a948"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4290ee15-0362-48c5-a570-4a1b6719a948?source=api-prod","cve":"CVE-2020-28034","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/42dd1eeb-10b4-48f1-b392-dfa3a9d4b9c4/wordpress","title":"WordPress Core < 5.2.3 - Stored Cross-Site Scripting via Comments via URLs\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"42dd1eeb-10b4-48f1-b392-dfa3a9d4b9c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/42dd1eeb-10b4-48f1-b392-dfa3a9d4b9c4?source=api-prod","cve":"CVE-2019-16222","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/43039c47-a34f-4020-9009-473e93468e21/wordpress","title":"WordPress Core < 3.0.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"43039c47-a34f-4020-9009-473e93468e21"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43039c47-a34f-4020-9009-473e93468e21?source=api-prod","cve":"CVE-2010-5294","affectedVersions":"<3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/431d352b-d79b-4a6b-91f9-95962be3049e/wordpress","title":"WordPress Core < 5.4.2 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"431d352b-d79b-4a6b-91f9-95962be3049e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/431d352b-d79b-4a6b-91f9-95962be3049e?source=api-prod","cve":"CVE-2020-4046","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/438fbd3f-052b-4a6d-acd2-233a93d56cbb/wordpress","title":"WordPress Core < 6.0.3 & Gutenberg < 14.3.1 - Authenticated Cross-Site Scripting in Various Blocks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"438fbd3f-052b-4a6d-acd2-233a93d56cbb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/438fbd3f-052b-4a6d-acd2-233a93d56cbb?source=api-prod","cve":"CVE-2022-43500","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4394f96a-ceb5-463f-b454-a6fa4a59fc45/wordpress","title":"WordPress Core < 6.0.3 - Authenticated Information Disclosure via REST-API\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"4394f96a-ceb5-463f-b454-a6fa4a59fc45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4394f96a-ceb5-463f-b454-a6fa4a59fc45?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/43c781c3-dc3e-4258-b594-689d0035cab0/wordpress","title":"WordPress Core < 4.0.1  - Denial of Service via Long Password\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"43c781c3-dc3e-4258-b594-689d0035cab0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43c781c3-dc3e-4258-b594-689d0035cab0?source=api-prod","cve":"CVE-2014-9034","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/43d46ada-4cbf-40e4-a0e5-685d8bf1a8a5/wordpress","title":"WordPress Core < 2.9.2 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-02-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"43d46ada-4cbf-40e4-a0e5-685d8bf1a8a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43d46ada-4cbf-40e4-a0e5-685d8bf1a8a5?source=api-prod","cve":"CVE-2010-0682","affectedVersions":"<2.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/45adeeba-22b0-4758-bc21-afc019653ce8/wordpress","title":"WordPress Core < 3.6.1 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"45adeeba-22b0-4758-bc21-afc019653ce8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/45adeeba-22b0-4758-bc21-afc019653ce8?source=api-prod","cve":"CVE-2013-4339","affectedVersions":"<=3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/4a1e77de-0207-412d-857d-ab6947116669/wordpress","title":"WordPress Core <= 2.5 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"4a1e77de-0207-412d-857d-ab6947116669"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a1e77de-0207-412d-857d-ab6947116669?source=api-prod","cve":"CVE-2008-2068","affectedVersions":"<=2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/4a3e3e6e-9c17-4ac5-9f83-1e01365436e9/wordpress","title":"WordPress Core 7.1 - 7.1.2 - Unauthenticated Stored Cross-Site Scripting via Pending Comments\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"4a3e3e6e-9c17-4ac5-9f83-1e01365436e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a3e3e6e-9c17-4ac5-9f83-1e01365436e9?source=api-prod","affectedVersions":">=7.1.0,<=7.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/4ac29d1c-0aae-4355-90df-24c99d23c411/wordpress","title":"WordPress Core <= 3.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"4ac29d1c-0aae-4355-90df-24c99d23c411"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ac29d1c-0aae-4355-90df-24c99d23c411?source=api-prod","cve":"CVE-2011-4956","affectedVersions":"<=3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/4af2b01b-2dcb-44ae-a764-8ecc5f8caa81/wordpress","title":"WordPress Core < 6.5.5 - Authenticated (Contributor+) Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"4af2b01b-2dcb-44ae-a764-8ecc5f8caa81"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4af2b01b-2dcb-44ae-a764-8ecc5f8caa81?source=api-prod","cve":"CVE-2024-32111","affectedVersions":"<4.1|>=4.1,<=4.1.40|>=4.2,<=4.2.37|>=4.3,<=4.3.33|>=4.4,<=4.4.32|>=4.5,<=4.5.31|>=4.6,<=4.6.28|>=4.7,<=4.7.28|>=4.8,<=4.8.24|>=4.9,<=4.9.25|>=5.0,<=5.0.21|>=5.1,<=5.1.18|>=5.2,<=5.2.20|>=5.3,<=5.3.17|>=5.4,<=5.4.15|>=5.5,<=5.5.14|>=5.6,<=5.6.13|>=5.7,<=5.7.11|>=5.8,<=5.8.9|>=5.9,<=5.9.9|>=6.0,<=6.0.8|>=6.1,<=6.1.6|>=6.2,<=6.2.5|>=6.3,<=6.3.4|>=6.4,<=6.4.4|>=6.5,<=6.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/4b389604-a999-45a1-a32f-7f8c951cb94c/wordpress","title":"WordPress Core < 3.9.2 - Denial of Service via XML\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b389604-a999-45a1-a32f-7f8c951cb94c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b389604-a999-45a1-a32f-7f8c951cb94c?source=api-prod","cve":"CVE-2014-5265","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"low"},{"advisoryId":"WPSECADV/WF/4b6f9700-eb29-4391-845c-58e1a2327b0b/wordpress","title":"WordPress Core < 5.2.3 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b6f9700-eb29-4391-845c-58e1a2327b0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b6f9700-eb29-4391-845c-58e1a2327b0b?source=api-prod","cve":"CVE-2019-16220","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4c1f4487-c684-4602-9b93-e547e2d38a64/wordpress","title":"WordPress Core < 4.3.1 - Cross-Site Scripting via Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"4c1f4487-c684-4602-9b93-e547e2d38a64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c1f4487-c684-4602-9b93-e547e2d38a64?source=api-prod","cve":"CVE-2015-5714","affectedVersions":"<3.7|=4.3|>=3.7,<=3.7.10|>=3.8,<=3.8.10|>=3.9,<=3.9.8|>=4.0,<=4.0.7|>=4.1,<=4.1.7|>=4.2,<=4.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/4d3191b0-829f-4d35-b8f6-323e7ea6f80b/wordpress","title":"WordPress Core < 4.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"4d3191b0-829f-4d35-b8f6-323e7ea6f80b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d3191b0-829f-4d35-b8f6-323e7ea6f80b?source=api-prod","cve":"CVE-2015-5622","affectedVersions":"<3.7|>=3.7,<=3.7.8|>=3.8,<=3.8.8|>=3.9,<=3.9.6|>=4.0,<=4.0.5|>=4.1,<=4.1.5|>=4.2,<=4.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4d4301ca-081b-4fa3-ac4f-aa8f0b37d32c/wordpress","title":"WordPress <= 6.9.1 - Unauthenticated Blind Server-Side Request Forgery via XML-RPC Pingback Discovery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"4d4301ca-081b-4fa3-ac4f-aa8f0b37d32c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d4301ca-081b-4fa3-ac4f-aa8f0b37d32c?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/4deae680-4829-4e24-b67b-4066ec9ce4da/wordpress","title":"WordPress Core <= 2.0.5 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"4deae680-4829-4e24-b67b-4066ec9ce4da"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4deae680-4829-4e24-b67b-4066ec9ce4da?source=api-prod","cve":"CVE-2006-6808","affectedVersions":"<=2.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/4df635b8-4c56-4b24-8446-8e39e6fe7441/wordpress","title":"WordPress Core < 5.0.1 - Stored Cross-Site Scripting via File Uploads\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"4df635b8-4c56-4b24-8446-8e39e6fe7441"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4df635b8-4c56-4b24-8446-8e39e6fe7441?source=api-prod","cve":"CVE-2018-20149","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e3a6fe2-6292-44ff-8925-a4aeb77c2a7f/wordpress","title":"WordPress Core < 6.2.2 - Shortcode Execution in User Generated Content\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e3a6fe2-6292-44ff-8925-a4aeb77c2a7f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e3a6fe2-6292-44ff-8925-a4aeb77c2a7f?source=api-prod","affectedVersions":">=5.9,<5.9.7|>=6.0,<6.0.5|>=6.1,<6.1.3|>=6.2,<6.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4fa453f3-d361-452c-940a-108252c9f302/wordpress","title":"WordPress Core <= 2.5.1 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"4fa453f3-d361-452c-940a-108252c9f302"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4fa453f3-d361-452c-940a-108252c9f302?source=api-prod","cve":"CVE-2008-2392","affectedVersions":"<=2.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/4fdf49e7-c89e-4b05-9236-ca28e715bc4a/wordpress","title":"WordPress Core <= 3.3.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"4fdf49e7-c89e-4b05-9236-ca28e715bc4a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4fdf49e7-c89e-4b05-9236-ca28e715bc4a?source=api-prod","cve":"CVE-2012-2404","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/501e3c8a-350e-4431-b6a2-012e837320bc/wordpress","title":"WordPress Core < 3.1.3 - Security Hardening\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"501e3c8a-350e-4431-b6a2-012e837320bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/501e3c8a-350e-4431-b6a2-012e837320bc?source=api-prod","cve":"CVE-2011-3125","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/506d1518-658f-4deb-9c30-d0bce5ef9df4/wordpress","title":"WordPress Core < 5.0.1 - Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"506d1518-658f-4deb-9c30-d0bce5ef9df4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/506d1518-658f-4deb-9c30-d0bce5ef9df4?source=api-prod","cve":"CVE-2019-8942","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/50f58944-1a12-4bac-9f90-8b0e1d109d11/wordpress","title":"WordPress Core <= 2.8 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-07-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"50f58944-1a12-4bac-9f90-8b0e1d109d11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50f58944-1a12-4bac-9f90-8b0e1d109d11?source=api-prod","cve":"CVE-2009-2334","affectedVersions":"<=2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/51cd834e-1b18-4702-9c6c-db7f34f2c687/wordpress","title":"WordPress Core < 5.8.1 - LoDash Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"51cd834e-1b18-4702-9c6c-db7f34f2c687"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51cd834e-1b18-4702-9c6c-db7f34f2c687?source=api-prod","cve":"CVE-2020-8203","affectedVersions":">=5.4,<5.4.7|>=5.5,<5.5.6|>=5.6,<5.6.5|>=5.7,<5.7.3|>=5.8,<5.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/54285c08-c9c8-4576-b1e8-e3b1c584c4bb/wordpress","title":"WordPress Core < 2.0.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"54285c08-c9c8-4576-b1e8-e3b1c584c4bb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54285c08-c9c8-4576-b1e8-e3b1c584c4bb?source=api-prod","cve":"CVE-2007-5105","affectedVersions":"<2.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/572fe891-5845-4a1c-ad3e-ddf5c54af5ba/wordpress","title":"WordPress <= 6.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Navigation Menu Items\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"572fe891-5845-4a1c-ad3e-ddf5c54af5ba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/572fe891-5845-4a1c-ad3e-ddf5c54af5ba?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/57666105-81e4-4ef4-8889-9ce9995d2629/wordpress","title":"Twenty Fifteen Theme <= 1.1 & WordPress Core < 4.2.2 - Cross-Site Scripting via example.html\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"57666105-81e4-4ef4-8889-9ce9995d2629"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57666105-81e4-4ef4-8889-9ce9995d2629?source=api-prod","cve":"CVE-2015-3429","affectedVersions":"<3.7|>=3.7,<=3.7.7|>=3.8,<=3.8.7|>=3.9,<=3.9.5|>=4.0,<=4.0.4|>=4.1,<=4.1.4|>=4.2,<=4.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/578a908a-d447-4b3e-b5d1-be86363c982a/wordpress","title":"WordPress Core < 4.7.3 - Cross-Site Request Forgery via Press This\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"578a908a-d447-4b3e-b5d1-be86363c982a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/578a908a-d447-4b3e-b5d1-be86363c982a?source=api-prod","cve":"CVE-2017-6819","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"high"},{"advisoryId":"WPSECADV/WF/5804b9da-11cd-4cb4-aa92-2c9e90aa527f/wordpress","title":"WordPress Core <= 3.0.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"5804b9da-11cd-4cb4-aa92-2c9e90aa527f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5804b9da-11cd-4cb4-aa92-2c9e90aa527f?source=api-prod","cve":"CVE-2010-4257","affectedVersions":"<=3.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/58300545-3e53-49be-bf55-eaf3e4cd82e9/wordpress","title":"WordPress Core < 5.5.2 - Deserialization Gadget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"58300545-3e53-49be-bf55-eaf3e4cd82e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/58300545-3e53-49be-bf55-eaf3e4cd82e9?source=api-prod","cve":"CVE-2020-28032","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/58e3b7f1-26f4-453a-ae1f-a1e6eed0348c/wordpress","title":"WordPress Core <= 5.0.3 - Path Traversal and Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"58e3b7f1-26f4-453a-ae1f-a1e6eed0348c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/58e3b7f1-26f4-453a-ae1f-a1e6eed0348c?source=api-prod","cve":"CVE-2019-8943","affectedVersions":"<=5.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5bfd1650-0cc1-4b1c-9fc2-c940d841a147/wordpress","title":"WordPress Core < 1.5.2 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"5bfd1650-0cc1-4b1c-9fc2-c940d841a147"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5bfd1650-0cc1-4b1c-9fc2-c940d841a147?source=api-prod","cve":"CVE-2005-4463","affectedVersions":"<1.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ceba1b2-2d39-4561-838b-b46e758517a3/wordpress","title":"WordPress Core < 5.3.1 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ceba1b2-2d39-4561-838b-b46e758517a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ceba1b2-2d39-4561-838b-b46e758517a3?source=api-prod","cve":"CVE-2019-20043","affectedVersions":"<3.7|=5.3|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d70b447-4f7f-4196-a37b-167679cef229/wordpress","title":"WordPress Core < 3.6.1 - HTML File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"5d70b447-4f7f-4196-a37b-167679cef229"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d70b447-4f7f-4196-a37b-167679cef229?source=api-prod","cve":"CVE-2013-5738","affectedVersions":"<=3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/5dee21da-dd92-41e7-8547-fb49eecec03c/wordpress","title":"WordPress Core < 3.3.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"5dee21da-dd92-41e7-8547-fb49eecec03c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5dee21da-dd92-41e7-8547-fb49eecec03c?source=api-prod","cve":"CVE-2012-2403","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/5faaf7d1-2012-42d5-affa-a5ff3388d25a/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Emoji Settings Element\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"5faaf7d1-2012-42d5-affa-a5ff3388d25a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5faaf7d1-2012-42d5-affa-a5ff3388d25a?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6300c8c2-f539-46b2-9ee0-80bebbe4cad3/wordpress","title":"WordPress Core < 6.2.1 - Shortcode Execution in User Generated Content\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"6300c8c2-f539-46b2-9ee0-80bebbe4cad3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6300c8c2-f539-46b2-9ee0-80bebbe4cad3?source=api-prod","affectedVersions":">=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6345d360-5f58-44d2-bc2d-1a20ee43e146/wordpress","title":"WordPress Core < 5.5.3 - PHP Object Injection Gadget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"6345d360-5f58-44d2-bc2d-1a20ee43e146"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6345d360-5f58-44d2-bc2d-1a20ee43e146?source=api-prod","cve":"CVE-2021-29476","affectedVersions":"<3.7|>=3.7,<3.7.35|>=3.8,<3.8.35|>=3.9,<3.9.33|>=4.0,<4.0.32|>=4.1,<4.1.32|>=4.2,<4.2.29|>=4.3,<4.3.25|>=4.4,<4.4.24|>=4.5,<4.5.23|>=4.6,<4.6.20|>=4.7,<4.7.19|>=4.8,<4.8.15|>=4.9,<4.9.16|>=5.0,<5.0.11|>=5.1,<5.1.8|>=5.2,<5.2.9|>=5.3,<5.3.6|>=5.4,<5.4.4|>=5.5,<5.5.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/6346024c-61d5-4f73-b7f2-3a8fd3fb838e/wordpress","title":"WordPress Core < 4.1.2 - Cross-Site Scripting via Ephox in Plupload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"6346024c-61d5-4f73-b7f2-3a8fd3fb838e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6346024c-61d5-4f73-b7f2-3a8fd3fb838e?source=api-prod","cve":"CVE-2015-3439","affectedVersions":"<3.7|>=3.7,<=3.7.5|>=3.8,<=3.8.5|>=3.9,<=3.9.3|>=4.0,<=4.0.1|>=4.1,<=4.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/63590140-9723-4e91-884c-f2b11b67eb8d/wordpress","title":"WordPress Core < 5.2.3 - Authenticated Cross-Site Scripting via Post Previews\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"63590140-9723-4e91-884c-f2b11b67eb8d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63590140-9723-4e91-884c-f2b11b67eb8d?source=api-prod","cve":"CVE-2019-16223","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/63fd62b2-455e-449b-b46a-78c5d2b86cde/wordpress","title":"WordPress Core < 2.1 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"63fd62b2-455e-449b-b46a-78c5d2b86cde"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63fd62b2-455e-449b-b46a-78c5d2b86cde?source=api-prod","cve":"CVE-2008-0195","affectedVersions":"<=2.0.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/64453a11-e0dd-40f8-99c3-f05ef640b42b/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Contributor+) Path Traversal via REST Templates Controller\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"64453a11-e0dd-40f8-99c3-f05ef640b42b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64453a11-e0dd-40f8-99c3-f05ef640b42b?source=api-prod","affectedVersions":"=7.1|>=5.8,<=6.6.7|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/64b4faf1-c2f2-43cd-900e-22edce3145a8/wordpress","title":"WordPress Core <= 2.2.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"64b4faf1-c2f2-43cd-900e-22edce3145a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64b4faf1-c2f2-43cd-900e-22edce3145a8?source=api-prod","cve":"CVE-2007-4139","affectedVersions":"<=2.0.10|>=2.2,<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/64f51991-f767-4f7b-94e7-68c0e2214849/wordpress","title":"WordPress Core < 3.0.6 - Incorrect Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"64f51991-f767-4f7b-94e7-68c0e2214849"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64f51991-f767-4f7b-94e7-68c0e2214849?source=api-prod","cve":"CVE-2011-5270","affectedVersions":"<3.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/65465de9-c527-4b18-8a52-c9cd2d594f72/wordpress","title":"WordPress Core < 3.5.2 - XXE Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"65465de9-c527-4b18-8a52-c9cd2d594f72"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65465de9-c527-4b18-8a52-c9cd2d594f72?source=api-prod","cve":"CVE-2013-2202","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/65c72e79-f0a9-4293-98be-956d8e4afb83/wordpress","title":"WordPress Core < 2.1.3 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"65c72e79-f0a9-4293-98be-956d8e4afb83"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65c72e79-f0a9-4293-98be-956d8e4afb83?source=api-prod","cve":"CVE-2007-1897","affectedVersions":"<2.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/66b1f597-f357-4525-8c67-e0be3a07bcfa/wordpress","title":"WordPress Core 5.9-6.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Navigation Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"66b1f597-f357-4525-8c67-e0be3a07bcfa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/66b1f597-f357-4525-8c67-e0be3a07bcfa?source=api-prod","cve":"CVE-2023-38000","affectedVersions":">=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6711f542-8b75-4968-86ac-9686ded775b7/wordpress","title":"WordPress Core 2.1.1 - Supply Chain Compromise\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"6711f542-8b75-4968-86ac-9686ded775b7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6711f542-8b75-4968-86ac-9686ded775b7?source=api-prod","affectedVersions":"=2.1.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/68f87cc7-fde5-4cd6-ab25-bf05cd3b5cde/wordpress","title":"WordPress Core < 5.4.1 - Cross-Site Scripting in the Block Editor\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"68f87cc7-fde5-4cd6-ab25-bf05cd3b5cde"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68f87cc7-fde5-4cd6-ab25-bf05cd3b5cde?source=api-prod","cve":"CVE-2020-11030","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/696f7c68-d19a-48ee-abc0-044f1734dfdb/wordpress","title":"WordPress Core < 3.8.2 - Contributor Users Can Publish Posts\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"696f7c68-d19a-48ee-abc0-044f1734dfdb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/696f7c68-d19a-48ee-abc0-044f1734dfdb?source=api-prod","cve":"CVE-2014-0165","affectedVersions":"<3.7|>=3.7,<=3.7.1|>=3.8,<=3.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6af83daa-ad8c-43ba-b77e-ad085889277c/wordpress","title":"WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"6af83daa-ad8c-43ba-b77e-ad085889277c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6af83daa-ad8c-43ba-b77e-ad085889277c?source=api-prod","cve":"CVE-2019-17674","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.14|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6b50656b-6cb4-4920-aa36-2634d4d41f5c/wordpress","title":"WordPress Core < 4.2.3 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b50656b-6cb4-4920-aa36-2634d4d41f5c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b50656b-6cb4-4920-aa36-2634d4d41f5c?source=api-prod","cve":"CVE-2015-5623","affectedVersions":"<3.7|>=3.7,<=3.7.8|>=3.8,<=3.8.8|>=3.9,<=3.9.6|>=4.0,<=4.0.5|>=4.1,<=4.1.5|>=4.2,<=4.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6b558818-f459-4bc1-893c-8c1c7bf9d6d2/wordpress","title":"WordPress Core < 4.8.2 - SQL Injection via Mishandled Placeholders\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b558818-f459-4bc1-893c-8c1c7bf9d6d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b558818-f459-4bc1-893c-8c1c7bf9d6d2?source=api-prod","cve":"CVE-2017-14723","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/6bea6a77-79e8-4d3a-bd3e-2bb3d20b6fe9/wordpress","title":"WordPress Core <= 6.3.1 - Authenticated(Contributor+) Sensitive Information Exposure via Comments on Protected Posts\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bea6a77-79e8-4d3a-bd3e-2bb3d20b6fe9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bea6a77-79e8-4d3a-bd3e-2bb3d20b6fe9?source=api-prod","cve":"CVE-2023-39999","affectedVersions":"<=4.1.38|>=4.2,<=4.2.35|>=4.3,<=4.3.31|>=4.4,<=4.4.30|>=4.5,<=4.5.29|>=4.6,<=4.6.26|>=4.7,<=4.7.26|>=4.8,<=4.8.22|>=4.9,<=4.9.23|>=5.0,<=5.0.19|>=5.1,<=5.1.16|>=5.2,<=5.2.18|>=5.3,<=5.3.15|>=5.4,<=5.4.13|>=5.5,<=5.5.12|>=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6cc6d71c-fb19-4142-a8be-4175afc1713c/wordpress","title":"WordPress Core < 5.2.4 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"6cc6d71c-fb19-4142-a8be-4175afc1713c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6cc6d71c-fb19-4142-a8be-4175afc1713c?source=api-prod","cve":"CVE-2019-17671","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.14|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e6f993b-ce09-4050-84a1-cbe9953f36b1/wordpress","title":"WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e6f993b-ce09-4050-84a1-cbe9953f36b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e6f993b-ce09-4050-84a1-cbe9953f36b1?source=api-prod","cve":"CVE-2023-5692","affectedVersions":"<=6.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6f6aa094-6bac-463f-b46d-c65f591abbb3/wordpress","title":"WordPress Core < 6.0.3 - Reflected Cross-Site Scripting via SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f6aa094-6bac-463f-b46d-c65f591abbb3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f6aa094-6bac-463f-b46d-c65f591abbb3?source=api-prod","cve":"CVE-2022-43497","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/6f998b76-9fa8-47c4-a95b-bdb5db5893e4/wordpress","title":"WordPress Core <= 2.0.3 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f998b76-9fa8-47c4-a95b-bdb5db5893e4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f998b76-9fa8-47c4-a95b-bdb5db5893e4?source=api-prod","cve":"CVE-2008-0194","affectedVersions":"<=2.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6ff76d9b-aa12-4391-90cd-f9df36d4a3a5/wordpress","title":"WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"6ff76d9b-aa12-4391-90cd-f9df36d4a3a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ff76d9b-aa12-4391-90cd-f9df36d4a3a5?source=api-prod","cve":"CVE-2026-87902","affectedVersions":">=4.7,<=4.7.36|>=4.8,<=4.8.31|>=4.9,<=4.9.32|>=5.0,<=5.0.28|>=5.1,<=5.1.25|>=5.2,<=5.2.27|>=5.3,<=5.3.24|>=5.4,<=5.4.22|>=5.5,<=5.5.21|>=5.6,<=5.6.20|>=5.7,<=5.7.18|>=5.8,<=5.8.16|>=5.9,<=5.9.17|>=6.0,<=6.0.15|>=6.1,<=6.1.13|>=6.2,<=6.2.12|>=6.3,<=6.3.11|>=6.4,<=6.4.11|>=6.5,<=6.5.11|>=6.6,<=6.6.8|>=6.7,<=6.7.8|>=6.8,<=6.8.9|>=6.9,<=6.9.8|>=7.0,<=7.0.5|>=7.1,<=7.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/70352973-5fa7-40b0-9e07-eab2e96520b7/wordpress","title":"WordPress Core < 4.9.5 - Security Misconfiguration with URL Hostnames\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"70352973-5fa7-40b0-9e07-eab2e96520b7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70352973-5fa7-40b0-9e07-eab2e96520b7?source=api-prod","cve":"CVE-2018-10101","affectedVersions":"<3.7|>=3.7,<=3.7.25|>=3.8,<=3.8.25|>=3.9,<=3.9.23|>=4.0,<=4.0.22|>=4.1,<=4.1.22|>=4.2,<=4.2.19|>=4.3,<=4.3.15|>=4.4,<=4.4.14|>=4.5,<=4.5.13|>=4.6,<=4.6.10|>=4.7,<=4.7.9|>=4.8,<=4.8.5|>=4.9,<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/705a0e1f-79c6-4c2a-8622-fb3df944cf22/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Scripting via Shortcode Brackets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"705a0e1f-79c6-4c2a-8622-fb3df944cf22"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/705a0e1f-79c6-4c2a-8622-fb3df944cf22?source=api-prod","cve":"CVE-2014-9031","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/719fe585-369b-47ef-b3c1-15729f88ae2d/wordpress","title":"WordPress Core < 5.8 - Dependency Confusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"719fe585-369b-47ef-b3c1-15729f88ae2d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/719fe585-369b-47ef-b3c1-15729f88ae2d?source=api-prod","cve":"CVE-2021-44223","affectedVersions":"<=5.7.5","severity":"high"},{"advisoryId":"WPSECADV/WF/71b521b5-acb5-4439-90f8-7d341291d583/wordpress","title":"WordPress Core < 2.0.3 -  IP Address Spoofing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"71b521b5-acb5-4439-90f8-7d341291d583"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71b521b5-acb5-4439-90f8-7d341291d583?source=api-prod","cve":"CVE-2006-2702","affectedVersions":"<=2.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/71f883d7-edf5-409e-92c1-f87f880602d3/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Imgur oEmbed\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"71f883d7-edf5-409e-92c1-f87f880602d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71f883d7-edf5-409e-92c1-f87f880602d3?source=api-prod","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/71fe2687-0dc9-4c56-91a4-447420818cca/wordpress","title":"WordPress Core < 5.4.1 - Password Reset Link Non-Expiration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"71fe2687-0dc9-4c56-91a4-447420818cca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71fe2687-0dc9-4c56-91a4-447420818cca?source=api-prod","cve":"CVE-2020-11027","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/72273368-042d-4ad4-9d1d-ca9c6db9cf3b/wordpress","title":"WordPress <= 6.9.1 - Cross-Site Scripting via Client-Side Template Override in Admin Area\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"72273368-042d-4ad4-9d1d-ca9c6db9cf3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72273368-042d-4ad4-9d1d-ca9c6db9cf3b?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/72b14197-560a-4dc2-9c23-a250f51dc51e/wordpress","title":"WordPress Core < 4.9.1 - Cross-domain Flash injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-10-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"72b14197-560a-4dc2-9c23-a250f51dc51e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72b14197-560a-4dc2-9c23-a250f51dc51e?source=api-prod","cve":"CVE-2016-9263","affectedVersions":"<3.7|>=3.7,<=3.7.24|>=3.8,<=3.8.24|>=3.9,<=3.9.23|>=4.0,<=4.0.21|>=4.1,<=4.1.21|>=4.2,<=4.2.18|>=4.3,<=4.3.14|>=4.4,<=4.4.13|>=4.5,<=4.5.12|>=4.6,<=4.6.9|>=4.7,<=4.7.8|>=4.8,<=4.8.4|>=4.9,<=4.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/73163743-2bff-459d-bed9-593f6ce837fa/wordpress","title":"WordPress Core < 3.1.3 - Username Enumeration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"73163743-2bff-459d-bed9-593f6ce837fa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/73163743-2bff-459d-bed9-593f6ce837fa?source=api-prod","cve":"CVE-2011-3126","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/76516f23-487f-48f6-82c0-88df651ddc65/wordpress","title":"WordPress Core < 4.9.1 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"76516f23-487f-48f6-82c0-88df651ddc65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76516f23-487f-48f6-82c0-88df651ddc65?source=api-prod","cve":"CVE-2017-17091","affectedVersions":"<3.7|=4.9|>=3.7,<=3.7.23|>=3.8,<=3.8.23|>=3.9,<=3.9.21|>=4.0,<=4.0.20|>=4.1,<=4.1.20|>=4.2,<=4.2.17|>=4.3,<=4.3.13|>=4.4,<=4.4.12|>=4.5,<=4.5.11|>=4.6,<=4.6.8|>=4.7,<=4.7.7|>=4.8,<=4.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/76af4656-547b-4daf-9078-8ed2b425d1ca/wordpress","title":"WordPress Core < 4.8.2 - Open Redirect in Admin Dashboard\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"76af4656-547b-4daf-9078-8ed2b425d1ca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76af4656-547b-4daf-9078-8ed2b425d1ca?source=api-prod","cve":"CVE-2017-14725","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"low"},{"advisoryId":"WPSECADV/WF/779ecd51-16d6-4799-aad7-372c5d5f2884/wordpress","title":"WordPress Core < 3.4.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"779ecd51-16d6-4799-aad7-372c5d5f2884"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/779ecd51-16d6-4799-aad7-372c5d5f2884?source=api-prod","cve":"CVE-2012-3383","affectedVersions":"<=3.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/78669d4f-3c1e-49e6-af8d-56f105f99d01/wordpress","title":"WordPress Core < 1.5.1.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"78669d4f-3c1e-49e6-af8d-56f105f99d01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78669d4f-3c1e-49e6-af8d-56f105f99d01?source=api-prod","cve":"CVE-2005-1810","affectedVersions":"<=1.5.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/78b98f21-ac0c-496b-8cb9-8d2f3bd751b1/wordpress","title":"WordPress Core < 5.3.1 - Stored Cross-Site Scripting via Block Editor\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"78b98f21-ac0c-496b-8cb9-8d2f3bd751b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78b98f21-ac0c-496b-8cb9-8d2f3bd751b1?source=api-prod","cve":"CVE-2019-16780","affectedVersions":"<3.7|=5.3|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/79ea853e-9d1d-4be0-8fd4-a80a924018ae/wordpress","title":"WordPress Core & WordPress MU < 2.8.1 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"79ea853e-9d1d-4be0-8fd4-a80a924018ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/79ea853e-9d1d-4be0-8fd4-a80a924018ae?source=api-prod","cve":"CVE-2009-2432","affectedVersions":"<=2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/7aa73c13-3f58-423a-ba5f-bebaae2b8371/wordpress","title":"WordPress Core < 4.0.1 Cross-Site Request Forgery to Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"7aa73c13-3f58-423a-ba5f-bebaae2b8371"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7aa73c13-3f58-423a-ba5f-bebaae2b8371?source=api-prod","cve":"CVE-2014-9039","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/7b23308d-7439-4dd2-9ec7-57b987909121/wordpress","title":"WordPress Core & WordPress MU < 2.8.1 - Username Enumeration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-07-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b23308d-7439-4dd2-9ec7-57b987909121"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b23308d-7439-4dd2-9ec7-57b987909121?source=api-prod","cve":"CVE-2009-2335","affectedVersions":"<=2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/7b851fd6-1477-4370-abf9-42ae2b6f8899/wordpress","title":"WordPress Core 5.4 - 5.8 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b851fd6-1477-4370-abf9-42ae2b6f8899"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b851fd6-1477-4370-abf9-42ae2b6f8899?source=api-prod","cve":"CVE-2021-39200","affectedVersions":">=5.4,<5.4.7|>=5.5,<5.5.6|>=5.6,<5.6.5|>=5.7,<5.7.3|>=5.8,<5.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7cef819e-71a3-4fe0-9d32-8d0e292bb904/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Unauthenticated Sensitive Information Exposure via Comment Feeds\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"7cef819e-71a3-4fe0-9d32-8d0e292bb904"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7cef819e-71a3-4fe0-9d32-8d0e292bb904?source=api-prod","cve":"CVE-2026-66666","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/7cfaf155-7766-4bb9-b89a-368d8adb889f/wordpress","title":"WordPress Core < 4.7.2 - Authorization Bypass to Term Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"7cfaf155-7766-4bb9-b89a-368d8adb889f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7cfaf155-7766-4bb9-b89a-368d8adb889f?source=api-prod","cve":"CVE-2017-5610","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7cfc1f42-c9dd-4dcb-8be5-c440a568a02e/wordpress","title":"WordPress Core < 5.4.1 - Reflected Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"7cfc1f42-c9dd-4dcb-8be5-c440a568a02e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7cfc1f42-c9dd-4dcb-8be5-c440a568a02e?source=api-prod","cve":"CVE-2020-11029","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/7d61b06b-6709-4f60-8324-53775dbb3c04/wordpress","title":"WordPress Core < 5.0.1 -  Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d61b06b-6709-4f60-8324-53775dbb3c04"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d61b06b-6709-4f60-8324-53775dbb3c04?source=api-prod","cve":"CVE-2018-20147","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/7d6a09f5-029a-4710-b2bd-974d0d8348b1/wordpress","title":"WordPress Core < 5.5.2 - Cross-Site Request Forgery to Theme Image Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d6a09f5-029a-4710-b2bd-974d0d8348b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d6a09f5-029a-4710-b2bd-974d0d8348b1?source=api-prod","cve":"CVE-2020-28040","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7dff5a77-a5d6-4aba-bf39-aa110a4f4996/wordpress","title":"WordPress Core < 4.2.2 - Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"7dff5a77-a5d6-4aba-bf39-aa110a4f4996"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7dff5a77-a5d6-4aba-bf39-aa110a4f4996?source=api-prod","cve":"CVE-2015-8834","affectedVersions":"<3.7|>=3.7,<=3.7.7|>=3.8,<=3.8.7|>=3.9,<=3.9.5|>=4.0,<=4.0.4|>=4.1,<=4.1.4|>=4.2,<=4.2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/7e42954c-1ae3-41ef-8dd3-16e5820aa36f/wordpress","title":"WordPress Core <= 3.5.1 - Content-Spoofing Attacks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"7e42954c-1ae3-41ef-8dd3-16e5820aa36f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e42954c-1ae3-41ef-8dd3-16e5820aa36f?source=api-prod","cve":"CVE-2013-2204","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/801d6f21-1f52-48d4-9f8e-5c971dd037f7/wordpress","title":"WordPress Core < 4.7.5 - Authorization Bypass Allowing Post Meta Updates\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"801d6f21-1f52-48d4-9f8e-5c971dd037f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/801d6f21-1f52-48d4-9f8e-5c971dd037f7?source=api-prod","cve":"CVE-2017-9065","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/8055886f-d0a9-4784-8430-41816db6c884/wordpress","title":"WordPress Core < 5.4.2 - Comment Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"8055886f-d0a9-4784-8430-41816db6c884"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8055886f-d0a9-4784-8430-41816db6c884?source=api-prod","cve":"CVE-2020-25286","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/80f92f7f-72e7-4d83-9ceb-ed0e11fb8003/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Site Creation on Multisite\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"80f92f7f-72e7-4d83-9ceb-ed0e11fb8003"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/80f92f7f-72e7-4d83-9ceb-ed0e11fb8003?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/81022d05-d1fc-4f27-9f89-b6f9c79cc084/wordpress","title":"WordPress Core < 3.5.2 - Cross-Site Scripting via Multiple Vectors\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"81022d05-d1fc-4f27-9f89-b6f9c79cc084"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81022d05-d1fc-4f27-9f89-b6f9c79cc084?source=api-prod","cve":"CVE-2013-2201","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/812d99bc-8d86-44a9-bafa-be8ce979229c/wordpress","title":"WordPress Core < 4.2.4 - Cross-Site Request Forgery to Post Lockage\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"812d99bc-8d86-44a9-bafa-be8ce979229c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/812d99bc-8d86-44a9-bafa-be8ce979229c?source=api-prod","cve":"CVE-2015-5731","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/81bf9a8d-fc70-45d9-a352-4a5bfb2c43f4/wordpress","title":"WordPress Core <= 2.8.4 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"81bf9a8d-fc70-45d9-a352-4a5bfb2c43f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81bf9a8d-fc70-45d9-a352-4a5bfb2c43f4?source=api-prod","cve":"CVE-2009-3622","affectedVersions":"<=2.8.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/834c92ba-8b48-4ae3-9073-085e8f559762/wordpress","title":"WordPress Core < 6.2.1 - Insufficient Sanitization of Block Attributes\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"834c92ba-8b48-4ae3-9073-085e8f559762"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/834c92ba-8b48-4ae3-9073-085e8f559762?source=api-prod","affectedVersions":"<4.1|>=4.1,<4.1.38|>=4.2,<4.2.35|>=4.3,<4.3.31|>=4.4,<4.4.30|>=4.5,<4.5.29|>=4.6,<4.6.26|>=4.7,<4.7.26|>=4.8,<4.8.22|>=4.9,<4.9.23|>=5.0,<5.0.19|>=5.1,<5.1.16|>=5.2,<5.2.18|>=5.3,<5.3.15|>=5.4,<5.4.13|>=5.5,<5.5.12|>=5.6,<5.6.11|>=5.7,<5.7.9|>=5.8,<5.8.7|>=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/83597e50-1992-4171-b24e-b14f55be6e4c/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Contributor+) Information Exposure via Sample Permalink AJAX Actions\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"83597e50-1992-4171-b24e-b14f55be6e4c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83597e50-1992-4171-b24e-b14f55be6e4c?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/83ec5fa5-2fd9-4c7d-a2f1-de885746d2d3/wordpress","title":"WordPress Core <= 2.0.4 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"83ec5fa5-2fd9-4c7d-a2f1-de885746d2d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83ec5fa5-2fd9-4c7d-a2f1-de885746d2d3?source=api-prod","cve":"CVE-2006-5705","affectedVersions":"<=2.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/83f8adea-4735-4c72-b274-58e813cab6ab/wordpress","title":"WordPress Core <= 4.5.3 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"83f8adea-4735-4c72-b274-58e813cab6ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83f8adea-4735-4c72-b274-58e813cab6ab?source=api-prod","cve":"CVE-2016-6896","affectedVersions":"<4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/855f5cca-b0cc-4a1b-be33-d11776ad7c08/wordpress","title":"WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"855f5cca-b0cc-4a1b-be33-d11776ad7c08"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/855f5cca-b0cc-4a1b-be33-d11776ad7c08?source=api-prod","cve":"CVE-2014-5240","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"low"},{"advisoryId":"WPSECADV/WF/856a6b88-f5fc-4b87-8a94-81e233f02e2f/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"856a6b88-f5fc-4b87-8a94-81e233f02e2f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/856a6b88-f5fc-4b87-8a94-81e233f02e2f?source=api-prod","cve":"CVE-2014-9035","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/861da9ac-fd73-4bb5-bc39-baf9efe71899/wordpress","title":"WordPress Core <= 3.1.2 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"861da9ac-fd73-4bb5-bc39-baf9efe71899"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/861da9ac-fd73-4bb5-bc39-baf9efe71899?source=api-prod","cve":"CVE-2011-3129","affectedVersions":"<=3.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/866f5121-81be-409e-b6d5-81b72bfb5539/wordpress","title":"WordPress Core 6.5.0 - 7.1.2 - Authenticated (Author+) Second-Order SQL Injection via WXR Export\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"866f5121-81be-409e-b6d5-81b72bfb5539"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/866f5121-81be-409e-b6d5-81b72bfb5539?source=api-prod","affectedVersions":">=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/86b2123f-9616-4dcc-904f-c7be802a8f8c/wordpress","title":"WordPress Core <= 3.1.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"86b2123f-9616-4dcc-904f-c7be802a8f8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86b2123f-9616-4dcc-904f-c7be802a8f8c?source=api-prod","cve":"CVE-2011-3130","affectedVersions":"<=3.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/87333eee-36ae-4272-b300-7352eb133745/wordpress","title":"WordPress Core <= 3.3.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"87333eee-36ae-4272-b300-7352eb133745"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/87333eee-36ae-4272-b300-7352eb133745?source=api-prod","cve":"CVE-2012-3414","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8746bd3a-6e2b-4ed2-9b21-4ed5a0e58de8/wordpress","title":"WordPress Core < 5.4.2 - Arbitrary User Meta Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"8746bd3a-6e2b-4ed2-9b21-4ed5a0e58de8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8746bd3a-6e2b-4ed2-9b21-4ed5a0e58de8?source=api-prod","cve":"CVE-2020-4050","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"low"},{"advisoryId":"WPSECADV/WF/88a3b4ad-7b8c-40ae-b81f-ccb979b49a47/wordpress","title":"WordPress Core < 5.0.1 - Authenticated Stored Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"88a3b4ad-7b8c-40ae-b81f-ccb979b49a47"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88a3b4ad-7b8c-40ae-b81f-ccb979b49a47?source=api-prod","cve":"CVE-2018-20153","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/8acf7327-2cdc-44ad-a04c-01cb0337d510/wordpress","title":"WordPress Core < 4.4.1 - Cross-Site Scripting via Theme Names\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-01-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"8acf7327-2cdc-44ad-a04c-01cb0337d510"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8acf7327-2cdc-44ad-a04c-01cb0337d510?source=api-prod","cve":"CVE-2016-1564","affectedVersions":"<3.7|=4.4|>=3.7,<=3.7.11|>=3.8,<=3.8.11|>=3.9,<=3.9.9|>=4.0,<=4.0.8|>=4.1,<=4.1.8|>=4.2,<=4.2.5|>=4.3,<=4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8afcb18c-71e6-4c77-b0f9-0700ee05966e/wordpress","title":"WordPress Core < 2.3.3 & WordPress MU < 1.3.2 - Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"8afcb18c-71e6-4c77-b0f9-0700ee05966e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8afcb18c-71e6-4c77-b0f9-0700ee05966e?source=api-prod","cve":"CVE-2008-5695","affectedVersions":"<=2.3.2","severity":"high"},{"advisoryId":"WPSECADV/WF/8b8d4431-ac72-45a2-b4a1-19690946d0ee/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Author+) Missing Authorization to Comment/Note Reparenting via REST API\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"8b8d4431-ac72-45a2-b4a1-19690946d0ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8b8d4431-ac72-45a2-b4a1-19690946d0ee?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ba30cbb-7a20-47aa-bbd6-82fdb27d4705/wordpress","title":"WordPress Core <= 1.5.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-12-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ba30cbb-7a20-47aa-bbd6-82fdb27d4705"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ba30cbb-7a20-47aa-bbd6-82fdb27d4705?source=api-prod","cve":"CVE-2006-1012","affectedVersions":"<=1.5.2","severity":"high"},{"advisoryId":"WPSECADV/WF/8be739cd-e594-41a5-85a4-9cf7d3436953/wordpress","title":"WordPress Core < 4.8.2 - Directory Traversal during unzip\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"8be739cd-e594-41a5-85a4-9cf7d3436953"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8be739cd-e594-41a5-85a4-9cf7d3436953?source=api-prod","cve":"CVE-2017-14719","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8bed0637-6d1b-4c30-b87c-01c88d573ae6/wordpress","title":"WordPress Core < 4.7.2 - Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"8bed0637-6d1b-4c30-b87c-01c88d573ae6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8bed0637-6d1b-4c30-b87c-01c88d573ae6?source=api-prod","cve":"CVE-2017-6514","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c483cf9-fb63-4c43-ad42-1404448540c2/wordpress","title":"WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c483cf9-fb63-4c43-ad42-1404448540c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c483cf9-fb63-4c43-ad42-1404448540c2?source=api-prod","cve":"CVE-2019-20042","affectedVersions":"<3.7|=5.3|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/8cf1ac25-2e55-4e27-af01-9b5b1997f339/wordpress","title":"WordPress Core < 5.5.2 - Stored Cross-Site Scripting via post slugs\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8cf1ac25-2e55-4e27-af01-9b5b1997f339"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8cf1ac25-2e55-4e27-af01-9b5b1997f339?source=api-prod","cve":"CVE-2020-28038","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d874540-dced-420d-81c0-46c185df10f1/wordpress","title":"WordPress Core < 2.0.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d874540-dced-420d-81c0-46c185df10f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d874540-dced-420d-81c0-46c185df10f1?source=api-prod","cve":"CVE-2006-1796","affectedVersions":"<=2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ddeaf57-df82-48f0-b53d-a35a6cd80aca/wordpress","title":"WordPress Core < 4.7.2 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ddeaf57-df82-48f0-b53d-a35a6cd80aca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ddeaf57-df82-48f0-b53d-a35a6cd80aca?source=api-prod","cve":"CVE-2017-5611","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"high"},{"advisoryId":"WPSECADV/WF/8f896e4a-565a-4545-9683-045cd08ccca0/wordpress","title":"WordPress Core <= 2.2.1 - Authenticated (Admin+) Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"8f896e4a-565a-4545-9683-045cd08ccca0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f896e4a-565a-4545-9683-045cd08ccca0?source=api-prod","cve":"CVE-2007-4153","affectedVersions":"<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/91531e13-5344-442c-99d3-8ccfd61b715d/wordpress","title":"WordPress Core < 2.0.5 - User Metadata Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-09-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"91531e13-5344-442c-99d3-8ccfd61b715d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91531e13-5344-442c-99d3-8ccfd61b715d?source=api-prod","cve":"CVE-2006-6016","affectedVersions":"<=2.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/91e61664-3b98-4a97-b35c-1ec88034d05b/wordpress","title":"WordPress Core < 4.7.1 - Cross-Site Request Forgery via Widget Editing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"91e61664-3b98-4a97-b35c-1ec88034d05b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91e61664-3b98-4a97-b35c-1ec88034d05b?source=api-prod","cve":"CVE-2017-5492","affectedVersions":"<3.7|=4.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/92895f8e-59c9-4988-9d7a-2601880d71a2/wordpress","title":"WordPress Core < 5.4.2 - Self-Cross Site Scripting via Theme Folder Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"92895f8e-59c9-4988-9d7a-2601880d71a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92895f8e-59c9-4988-9d7a-2601880d71a2?source=api-prod","cve":"CVE-2020-4049","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"low"},{"advisoryId":"WPSECADV/WF/92babbbf-74bd-474f-9057-c5022a7d64c7/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"92babbbf-74bd-474f-9057-c5022a7d64c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92babbbf-74bd-474f-9057-c5022a7d64c7?source=api-prod","cve":"CVE-2026-114570","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/940aabdc-e98e-45be-87dd-cafae45f2474/wordpress","title":"WordPress Core < 2.3.3 - Improper Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"940aabdc-e98e-45be-87dd-cafae45f2474"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/940aabdc-e98e-45be-87dd-cafae45f2474?source=api-prod","cve":"CVE-2008-0664","affectedVersions":"<=2.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/94332eb8-0961-4c8d-97bb-3d5d08e8119f/wordpress","title":"WordPress Core < 2.1 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"94332eb8-0961-4c8d-97bb-3d5d08e8119f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/94332eb8-0961-4c8d-97bb-3d5d08e8119f?source=api-prod","cve":"CVE-2007-0539","affectedVersions":"<2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/954b8064-f317-4af4-a55f-9a61ee945006/wordpress","title":"WordPress Core < 5.9.2 & Gutenberg < 12.7.2 - Prototype Pollution via Block Editor\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"954b8064-f317-4af4-a55f-9a61ee945006"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/954b8064-f317-4af4-a55f-9a61ee945006?source=api-prod","affectedVersions":"<3.7|>=3.7,<=3.7.37|>=3.8,<=3.8.37|>=3.9,<=3.9.35|>=4.0,<=4.0.34|>=4.1,<=4.1.34|>=4.2,<=4.2.31|>=4.3,<=4.3.27|>=4.4,<=4.4.26|>=4.5,<=4.5.25|>=4.6,<=4.6.22|>=4.7,<=4.7.22|>=4.8,<=4.8.18|>=4.9,<=4.9.19|>=5.0,<=5.0.15|>=5.1,<=5.1.12|>=5.2,<=5.2.14|>=5.3,<=5.3.11|>=5.4,<=5.4.9|>=5.5,<=5.5.8|>=5.6,<=5.6.7|>=5.7,<=5.7.5|>=5.8,<=5.8.3|>=5.9,<=5.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/97a3fc27-4b58-400a-b831-6423e3de5cb7/wordpress","title":"WordPress Core < 4.9 - Insecure Deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"97a3fc27-4b58-400a-b831-6423e3de5cb7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/97a3fc27-4b58-400a-b831-6423e3de5cb7?source=api-prod","cve":"CVE-2017-1000600","affectedVersions":"<4.9","severity":"high"},{"advisoryId":"WPSECADV/WF/97ab2585-4178-4a5b-923f-2ce9ca44a8d7/wordpress","title":"WordPress Core < 4.2.4 - Timing Side-Channel Attack\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"97ab2585-4178-4a5b-923f-2ce9ca44a8d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/97ab2585-4178-4a5b-923f-2ce9ca44a8d7?source=api-prod","cve":"CVE-2015-5730","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/98acac5c-65d7-4aaf-adcc-a58515c28fc3/wordpress","title":"WordPress Core < 4.7.3 - Cross-Site Scripting via Taxonomy names\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"98acac5c-65d7-4aaf-adcc-a58515c28fc3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98acac5c-65d7-4aaf-adcc-a58515c28fc3?source=api-prod","cve":"CVE-2017-6818","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/99e0a243-3e0e-4e2b-82fd-95c3cfde8a1b/wordpress","title":"WordPress Core < 3.9.2 - Deserialization via Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"99e0a243-3e0e-4e2b-82fd-95c3cfde8a1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/99e0a243-3e0e-4e2b-82fd-95c3cfde8a1b?source=api-prod","cve":"CVE-2014-5203","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"high"},{"advisoryId":"WPSECADV/WF/9ab55dea-84d5-4ed6-a693-8c8de9b7c7dd/wordpress","title":"WordPress Core < 2.8.3 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-08-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"9ab55dea-84d5-4ed6-a693-8c8de9b7c7dd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ab55dea-84d5-4ed6-a693-8c8de9b7c7dd?source=api-prod","cve":"CVE-2009-2853","affectedVersions":"<=2.8.2","severity":"high"},{"advisoryId":"WPSECADV/WF/9df45c8e-c040-4031-9c51-4c43d12f08b0/wordpress","title":"WordPress Core < 5.7.1 - XXE Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"9df45c8e-c040-4031-9c51-4c43d12f08b0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9df45c8e-c040-4031-9c51-4c43d12f08b0?source=api-prod","cve":"CVE-2021-29447","affectedVersions":">=4.7,<4.7.20|>=4.8,<4.8.16|>=4.9,<4.9.17|>=5.0,<5.0.12|>=5.1,<5.1.9|>=5.2,<5.2.10|>=5.3,<5.3.7|>=5.4,<5.4.5|>=5.5,<5.5.4|>=5.6,<5.6.3|>=5.7,<5.7.1","severity":"high"},{"advisoryId":"WPSECADV/WF/9f6b9a90-4fa8-4cd0-bec8-6fa69a1b4681/wordpress","title":"WordPress Core < 3.5.2 -  Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f6b9a90-4fa8-4cd0-bec8-6fa69a1b4681"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f6b9a90-4fa8-4cd0-bec8-6fa69a1b4681?source=api-prod","cve":"CVE-2013-2199","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f7469ec-cbd5-4f13-8455-b907f2542836/wordpress","title":"WordPress Core < 2.0.10 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f7469ec-cbd5-4f13-8455-b907f2542836"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f7469ec-cbd5-4f13-8455-b907f2542836?source=api-prod","cve":"CVE-2007-1599","affectedVersions":"<2.0.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f9bbe9a-faac-4f41-b2be-ddf6ff80d9c7/wordpress","title":"WordPress Core <= 2.8.5 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f9bbe9a-faac-4f41-b2be-ddf6ff80d9c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f9bbe9a-faac-4f41-b2be-ddf6ff80d9c7?source=api-prod","cve":"CVE-2009-3891","affectedVersions":"<=2.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/9fda5e15-fdf9-4b67-93d3-2dbfa94aefe9/wordpress","title":"WordPress Core - All Known Versions - Cleartext Storage of wp_signups.activation_key\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-10-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"9fda5e15-fdf9-4b67-93d3-2dbfa94aefe9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9fda5e15-fdf9-4b67-93d3-2dbfa94aefe9?source=api-prod","cve":"CVE-2017-14990","affectedVersions":"*","severity":"medium"},{"advisoryId":"WPSECADV/WF/9fe1178e-aca3-4f52-85e1-7d04b866a073/wordpress","title":"WordPress Core < 3.0.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"9fe1178e-aca3-4f52-85e1-7d04b866a073"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9fe1178e-aca3-4f52-85e1-7d04b866a073?source=api-prod","cve":"CVE-2010-5295","affectedVersions":"<3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a19ef0d7-fd44-45ea-8fb1-b99c270072c4/wordpress","title":"WordPress Core < 3.0.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-12-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"a19ef0d7-fd44-45ea-8fb1-b99c270072c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a19ef0d7-fd44-45ea-8fb1-b99c270072c4?source=api-prod","cve":"CVE-2010-5296","affectedVersions":"<3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2926c11-c6a2-4988-89ed-42d9e0791b95/wordpress","title":"WordPress <= 6.8.2 - Authenticated (Contributor+) Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2926c11-c6a2-4988-89ed-42d9e0791b95"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2926c11-c6a2-4988-89ed-42d9e0791b95?source=api-prod","cve":"CVE-2025-58246","affectedVersions":">=4.7,<=4.7.30|>=4.8,<=4.8.26|>=4.9,<=4.9.27|>=5.0,<=5.0.23|>=5.1,<=5.1.20|>=5.2,<=5.2.22|>=5.3,<=5.3.19|>=5.4,<=5.4.17|>=5.5,<=5.5.16|>=5.6,<=5.6.15|>=5.7,<=5.7.13|>=5.8,<=5.8.11|>=5.9,<=5.9.11|>=6.0,<=6.0.10|>=6.1,<=6.1.8|>=6.2,<=6.2.7|>=6.3,<=6.3.6|>=6.4,<=6.4.6|>=6.5,<=6.5.6|>=6.6,<=6.6.3|>=6.7,<=6.7.3|>=6.8,<=6.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3779501-4ac7-4b76-8b2b-9852c6467f16/wordpress","title":"WordPress Core < 4.7.3 - Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3779501-4ac7-4b76-8b2b-9852c6467f16"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3779501-4ac7-4b76-8b2b-9852c6467f16?source=api-prod","cve":"CVE-2017-6816","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a50531df-e876-463c-a06b-16b2f30aeefe/wordpress","title":"WordPress Core < 5.1.1 - Cross-Site Request Forgery to Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a50531df-e876-463c-a06b-16b2f30aeefe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a50531df-e876-463c-a06b-16b2f30aeefe?source=api-prod","cve":"CVE-2019-9787","affectedVersions":"<3.7|=5.1|>=3.7,<=3.7.28|>=3.8,<=3.8.28|>=3.9,<=3.9.26|>=4.0,<=4.0.25|>=4.1,<=4.1.25|>=4.2,<=4.2.22|>=4.3,<=4.3.18|>=4.4,<=4.4.17|>=4.5,<=4.5.16|>=4.6,<=4.6.13|>=4.7,<=4.7.12|>=4.8,<=4.8.8|>=4.9,<=4.9.9|>=5.0,<=5.0.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/a5368894-3277-47d0-8fad-adfb8df4fa93/wordpress","title":"WordPress Core 5.6 - 6.3.1 - Reflected Cross-Site Scripting via Application Password Requests\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a5368894-3277-47d0-8fad-adfb8df4fa93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a5368894-3277-47d0-8fad-adfb8df4fa93?source=api-prod","affectedVersions":">=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a57426d2-0ca4-405b-bfbf-0685e2c744a0/wordpress","title":"WordPress Core < 5.7.1 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"a57426d2-0ca4-405b-bfbf-0685e2c744a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a57426d2-0ca4-405b-bfbf-0685e2c744a0?source=api-prod","cve":"CVE-2021-29450","affectedVersions":">=4.7,<4.7.20|>=4.8,<4.8.16|>=4.9,<4.9.17|>=5.0,<5.0.12|>=5.1,<5.1.9|>=5.2,<5.2.10|>=5.3,<5.3.7|>=5.4,<5.4.5|>=5.5,<5.5.4|>=5.6,<5.6.3|>=5.7,<5.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a5c290a1-b58a-4b5c-8112-076d5b17d940/wordpress","title":"WordPress Core < 2.2.3 & WordPress MU < 1.2.5a - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"a5c290a1-b58a-4b5c-8112-076d5b17d940"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a5c290a1-b58a-4b5c-8112-076d5b17d940?source=api-prod","cve":"CVE-2007-4894","affectedVersions":"<2.2.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/a5ef4d74-aa5d-4d6d-af2c-bda506fb394d/wordpress","title":"WordPress Core < 2.2.3 - Restriction Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"a5ef4d74-aa5d-4d6d-af2c-bda506fb394d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a5ef4d74-aa5d-4d6d-af2c-bda506fb394d?source=api-prod","cve":"CVE-2008-2146","affectedVersions":"<=2.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a6074c97-619d-4f47-97c7-781c7a38019d/wordpress","title":"WordPress Core <= 2.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"a6074c97-619d-4f47-97c7-781c7a38019d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a6074c97-619d-4f47-97c7-781c7a38019d?source=api-prod","cve":"CVE-2007-1622","affectedVersions":"<=2.0.9|>=2.1,<=2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a69782f0-aa61-4049-8339-7f27f4b6c36b/wordpress","title":"WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"a69782f0-aa61-4049-8339-7f27f4b6c36b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a69782f0-aa61-4049-8339-7f27f4b6c36b?source=api-prod","cve":"CVE-2026-3906","affectedVersions":">=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a7e8eb75-ba48-4385-9ddd-800d9bb907f1/wordpress","title":"WordPress Core < 4.5.3 - Bypass sanitize_file_name Protection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a7e8eb75-ba48-4385-9ddd-800d9bb907f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a7e8eb75-ba48-4385-9ddd-800d9bb907f1?source=api-prod","cve":"CVE-2016-5839","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"high"},{"advisoryId":"WPSECADV/WF/a9162c2e-e765-4bda-b09f-982603b5797a/wordpress","title":"WordPress Core <= 2.1.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9162c2e-e765-4bda-b09f-982603b5797a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9162c2e-e765-4bda-b09f-982603b5797a?source=api-prod","cve":"CVE-2007-1230","affectedVersions":"<=2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9498085-87c7-47e7-aac8-c0397264a7eb/wordpress","title":"WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9498085-87c7-47e7-aac8-c0397264a7eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9498085-87c7-47e7-aac8-c0397264a7eb?source=api-prod","cve":"CVE-2016-5834","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a973dd0a-1a36-4ea2-a300-0f8bb277dfaa/wordpress","title":"WordPress Core < 3.8.2 - Authentication Cookie Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"a973dd0a-1a36-4ea2-a300-0f8bb277dfaa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a973dd0a-1a36-4ea2-a300-0f8bb277dfaa?source=api-prod","cve":"CVE-2014-0166","affectedVersions":"<3.7|>=3.7,<=3.7.1|>=3.8,<=3.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa7b7474-c170-42a2-be88-0fe410a2e71b/wordpress","title":"WordPress <= 6.9.1 - Authenticated (Author+) XML External Entity Injection via getID3 Library Media Upload\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa7b7474-c170-42a2-be88-0fe410a2e71b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa7b7474-c170-42a2-be88-0fe410a2e71b?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa8a095b-abda-4a12-a4b9-246cda41fb4e/wordpress","title":"WordPress Core < 4.9.1- Stored Cross-Site Scripting via Language\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa8a095b-abda-4a12-a4b9-246cda41fb4e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa8a095b-abda-4a12-a4b9-246cda41fb4e?source=api-prod","cve":"CVE-2017-17093","affectedVersions":"<3.7|=4.9|>=3.7,<=3.7.23|>=3.8,<=3.8.23|>=3.9,<=3.9.21|>=4.0,<=4.0.20|>=4.1,<=4.1.20|>=4.2,<=4.2.17|>=4.3,<=4.3.13|>=4.4,<=4.4.12|>=4.5,<=4.5.11|>=4.6,<=4.6.8|>=4.7,<=4.7.7|>=4.8,<=4.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ab66ac69-0617-4f9f-8ad3-4ab1502892bd/wordpress","title":"WordPress Core < 3.5.1 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ab66ac69-0617-4f9f-8ad3-4ab1502892bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ab66ac69-0617-4f9f-8ad3-4ab1502892bd?source=api-prod","cve":"CVE-2013-0236","affectedVersions":"<3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ab710963-64e2-476e-9a60-0a18b64b7550/wordpress","title":"WordPress Core < 4.7.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"ab710963-64e2-476e-9a60-0a18b64b7550"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ab710963-64e2-476e-9a60-0a18b64b7550?source=api-prod","cve":"CVE-2017-5612","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/aba33487-f6c5-41e9-9500-73bef37381e6/wordpress","title":"WordPress Core < 4.2.4 - Cross-Site Scripting via Widget Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"aba33487-f6c5-41e9-9500-73bef37381e6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aba33487-f6c5-41e9-9500-73bef37381e6?source=api-prod","cve":"CVE-2015-5732","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ac4c6bd8-179f-4553-b1b4-549300bae374/wordpress","title":"WordPress Core <= 2.2 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac4c6bd8-179f-4553-b1b4-549300bae374"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac4c6bd8-179f-4553-b1b4-549300bae374?source=api-prod","cve":"CVE-2007-3543","affectedVersions":"<=2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/ad943111-24c1-4ff9-b34a-aa4e1ee8ee75/wordpress","title":"WordPress Core < 3.9.2 - Brute Force of Cross-Site Request Forgery Tokens\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"ad943111-24c1-4ff9-b34a-aa4e1ee8ee75"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ad943111-24c1-4ff9-b34a-aa4e1ee8ee75?source=api-prod","cve":"CVE-2014-5205","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/adc90b32-f973-4c8e-b419-0614d4642b7f/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Post Overwrite\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"adc90b32-f973-4c8e-b419-0614d4642b7f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/adc90b32-f973-4c8e-b419-0614d4642b7f?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/adf3fb57-b080-4cda-b78b-14d94bad21a9/wordpress","title":"WordPress Core < 5.4.1 - Authenticated Cross-Site Scripting via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"adf3fb57-b080-4cda-b78b-14d94bad21a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/adf3fb57-b080-4cda-b78b-14d94bad21a9?source=api-prod","cve":"CVE-2020-11025","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae92bd0c-936c-4fae-8c0c-c94706568527/wordpress","title":"WordPress Core < 3.6.1 - .swf and .exe File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae92bd0c-936c-4fae-8c0c-c94706568527"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae92bd0c-936c-4fae-8c0c-c94706568527?source=api-prod","cve":"CVE-2013-5739","affectedVersions":"<3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/af420213-039b-41a4-b177-4035fc727867/wordpress","title":"WordPress Core < 3.6.1 - Spoof Post Authorship\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"af420213-039b-41a4-b177-4035fc727867"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af420213-039b-41a4-b177-4035fc727867?source=api-prod","cve":"CVE-2013-4340","affectedVersions":"<=3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/af77d642-d383-48f2-a59a-3a9c738cd47f/wordpress","title":"WordPress Core 6.3 - 6.3.1 - Authenticated(Contributor+) Cross-Site Scripting via Footnotes Block\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"af77d642-d383-48f2-a59a-3a9c738cd47f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af77d642-d383-48f2-a59a-3a9c738cd47f?source=api-prod","affectedVersions":">=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0382227-48eb-4a97-8f3c-5c8fc4bcc0b6/wordpress","title":"WordPress Core < 3.9.2 - Denial of Service via XML #2\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0382227-48eb-4a97-8f3c-5c8fc4bcc0b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0382227-48eb-4a97-8f3c-5c8fc4bcc0b6?source=api-prod","cve":"CVE-2014-5266","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0ef885f-fd62-4513-83cb-65381b99a172/wordpress","title":"WordPress Core < 5.8.3 - SQL Injection via WP_Query\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0ef885f-fd62-4513-83cb-65381b99a172"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0ef885f-fd62-4513-83cb-65381b99a172?source=api-prod","cve":"CVE-2022-21661","affectedVersions":">=3.7,<3.7.37|>=3.8,<3.8.37|>=3.9,<3.9.35|>=4.0,<4.0.34|>=4.1,<4.1.34|>=4.2,<4.2.31|>=4.3,<4.3.27|>=4.4,<4.4.26|>=4.5,<4.5.25|>=4.6,<4.6.22|>=4.7,<4.7.22|>=4.8,<4.8.18|>=4.9,<4.9.19|>=5.0,<5.0.15|>=5.1,<5.1.12|>=5.2,<5.2.14|>=5.3,<5.3.11|>=5.4,<5.4.9|>=5.5,<5.5.8|>=5.6,<5.6.7|>=5.7,<5.7.5|>=5.8,<5.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/b13f6a3f-cab6-4aff-a96e-58250fcf655a/wordpress","title":"WordPress Core < 5.5.2 - Misconfiguration That Allows Trigger of New Installation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b13f6a3f-cab6-4aff-a96e-58250fcf655a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b13f6a3f-cab6-4aff-a96e-58250fcf655a?source=api-prod","cve":"CVE-2020-28037","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b1446daf-662d-479c-8fc5-80b27b04d6c4/wordpress","title":"WordPress Core < 2.0.7 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"b1446daf-662d-479c-8fc5-80b27b04d6c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b1446daf-662d-479c-8fc5-80b27b04d6c4?source=api-prod","cve":"CVE-2007-0262","affectedVersions":"<=2.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/b16d675f-1b62-4e3e-b91b-7bdb1e70a221/wordpress","title":"WordPress Core < 2.09 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-02-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b16d675f-1b62-4e3e-b91b-7bdb1e70a221"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b16d675f-1b62-4e3e-b91b-7bdb1e70a221?source=api-prod","cve":"CVE-2007-1049","affectedVersions":"<2.0.9|=2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/b170ac00-5d5c-46ef-95f3-e98ef4528999/wordpress","title":"WordPress Core 6.4.0 - 6.4.1 - Remote Code Execution POP Chain\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b170ac00-5d5c-46ef-95f3-e98ef4528999"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b170ac00-5d5c-46ef-95f3-e98ef4528999?source=api-prod","cve":"CVE-2024-31211","affectedVersions":"=6.4.0|=6.4.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/b54af5b0-d79a-4fb2-965f-d3ff4956dc5a/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Author+) Information Exposure via attachment_submitbox_metadata()\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"b54af5b0-d79a-4fb2-965f-d3ff4956dc5a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b54af5b0-d79a-4fb2-965f-d3ff4956dc5a?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5541170-fd01-4d6d-934c-bfce446b3b55/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Authenticated (Author+) Unauthorized Sticky Post Modification via REST API\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5541170-fd01-4d6d-934c-bfce446b3b55"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5541170-fd01-4d6d-934c-bfce446b3b55?source=api-prod","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5582e89-83e6-4898-b9fe-09eddeb5f7ae/wordpress","title":"WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5582e89-83e6-4898-b9fe-09eddeb5f7ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5582e89-83e6-4898-b9fe-09eddeb5f7ae?source=api-prod","cve":"CVE-2022-4973","affectedVersions":"<=3.6.1|>=3.7,<=3.7.38|>=3.8,<=3.8.38|>=3.9,<=3.9.36|>=4.0,<=4.0.35|>=4.1,<=4.1.35|>=4.2,<=4.2.32|>=4.3,<=4.3.28|>=4.4,<=4.4.27|>=4.5,<=4.5.26|>=4.6,<=4.6.23|>=4.7,<=4.7.23|>=4.8,<=4.8.19|>=4.9,<=4.9.20|>=5.0,<=5.0.16|>=5.1,<=5.1.13|>=5.2,<=5.2.15|>=5.3,<=5.3.12|>=5.4,<=5.4.10|>=5.5,<=5.5.9|>=5.6,<=5.6.8|>=5.7,<=5.7.6|>=5.8,<=5.8.4|>=5.9,<=5.9.3|>=6.0,<=6.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5e0b875-ba8c-438f-b2b1-6c713ef604e5/wordpress","title":"WordPress Core < 4.4 - Brute Force Password Recovery Tokens\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5e0b875-ba8c-438f-b2b1-6c713ef604e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5e0b875-ba8c-438f-b2b1-6c713ef604e5?source=api-prod","cve":"CVE-2014-6412","affectedVersions":"<4.4","severity":"high"},{"advisoryId":"WPSECADV/WF/b5ebc99d-b82a-452b-8f53-bd96135aeecb/wordpress","title":"WordPress Core < 5.8.3 - Super Admin Multi-Site Installation Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5ebc99d-b82a-452b-8f53-bd96135aeecb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5ebc99d-b82a-452b-8f53-bd96135aeecb?source=api-prod","cve":"CVE-2022-21663","affectedVersions":">=3.7,<3.7.37|>=3.8,<3.8.37|>=3.9,<3.9.35|>=4.0,<4.0.34|>=4.1,<4.1.34|>=4.2,<4.2.31|>=4.3,<4.3.27|>=4.4,<4.4.26|>=4.5,<4.5.25|>=4.6,<4.6.22|>=4.7,<4.7.22|>=4.8,<4.8.18|>=4.9,<4.9.19|>=5.0,<5.0.15|>=5.1,<5.1.12|>=5.2,<5.2.14|>=5.3,<5.3.11|>=5.4,<5.4.9|>=5.5,<5.5.8|>=5.6,<5.6.7|>=5.7,<5.7.5|>=5.8,<5.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/b6066883-20e0-440d-9a96-7f4b06c670d2/wordpress","title":"WordPress Core < 4.8.2 - Cross-Site Scripting via Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"b6066883-20e0-440d-9a96-7f4b06c670d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b6066883-20e0-440d-9a96-7f4b06c670d2?source=api-prod","cve":"CVE-2017-14726","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b6b6fb24-f70b-44b0-a1e8-12ebc0e0c105/wordpress","title":"WordPress Core < 5.4.1 - Private Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b6b6fb24-f70b-44b0-a1e8-12ebc0e0c105"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b6b6fb24-f70b-44b0-a1e8-12ebc0e0c105?source=api-prod","cve":"CVE-2020-11028","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b7c70db1-5058-45e5-bd12-3e2cab0338ad/wordpress","title":"WordPress Core < 3.3.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7c70db1-5058-45e5-bd12-3e2cab0338ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7c70db1-5058-45e5-bd12-3e2cab0338ad?source=api-prod","cve":"CVE-2012-2400","affectedVersions":"<=3.3.1","severity":"high"},{"advisoryId":"WPSECADV/WF/b7cc5b51-5fb4-470b-8d2d-581eceadde7b/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Request Forgery to Authentication Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7cc5b51-5fb4-470b-8d2d-581eceadde7b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7cc5b51-5fb4-470b-8d2d-581eceadde7b?source=api-prod","cve":"CVE-2014-9033","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"high"},{"advisoryId":"WPSECADV/WF/b801e7d9-0ca0-471e-a524-af19ea0d85be/wordpress","title":"WordPress Core 5.4 - 5.8 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"b801e7d9-0ca0-471e-a524-af19ea0d85be"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b801e7d9-0ca0-471e-a524-af19ea0d85be?source=api-prod","cve":"CVE-2021-39201","affectedVersions":">=5.4,<5.4.7|>=5.5,<5.5.6|>=5.6,<5.6.5|>=5.7,<5.7.3|>=5.8,<5.8.1","severity":"high"},{"advisoryId":"WPSECADV/WF/bb6182e8-ba5c-4873-aa18-45a79191c8c5/wordpress","title":"WordPress Core < 4.8.3 - SQL Injection due to Double Prepare approach\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb6182e8-ba5c-4873-aa18-45a79191c8c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb6182e8-ba5c-4873-aa18-45a79191c8c5?source=api-prod","cve":"CVE-2017-16510","affectedVersions":"<3.7|>=3.7,<=3.7.22|>=3.8,<=3.8.22|>=3.9,<=3.9.20|>=4.0,<=4.0.19|>=4.1,<=4.1.19|>=4.2,<=4.2.16|>=4.3,<=4.3.12|>=4.4,<=4.4.11|>=4.5,<=4.5.10|>=4.6,<=4.6.7|>=4.7,<=4.7.6|>=4.8,<=4.8.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/bba3eeeb-5e7e-4ec3-9db0-02c44585647a/wordpress","title":"WordPress Core < 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Embed Discovery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"bba3eeeb-5e7e-4ec3-9db0-02c44585647a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bba3eeeb-5e7e-4ec3-9db0-02c44585647a?source=api-prod","affectedVersions":"<4.1.38|>=4.2,<4.2.35|>=4.3,<4.3.31|>=4.4,<4.4.30|>=4.5,<4.5.29|>=4.6,<4.6.26|>=4.7,<4.7.26|>=4.8,<4.8.22|>=4.9,<4.9.23|>=5.0,<5.0.19|>=5.1,<5.1.16|>=5.2,<5.2.18|>=5.3,<5.3.15|>=5.4,<5.4.13|>=5.5,<5.5.12|>=5.6,<5.6.11|>=5.7,<5.7.9|>=5.8,<5.8.7|>=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bbe9eed9-9a96-47da-95fa-b942817a9d4f/wordpress","title":"WordPress Core < 4.8.2 - Directory Traversal via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"bbe9eed9-9a96-47da-95fa-b942817a9d4f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bbe9eed9-9a96-47da-95fa-b942817a9d4f?source=api-prod","cve":"CVE-2017-14722","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc0d36f8-6569-49a1-b722-5cf57c4bb32a/wordpress","title":"WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc0d36f8-6569-49a1-b722-5cf57c4bb32a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc0d36f8-6569-49a1-b722-5cf57c4bb32a?source=api-prod","cve":"CVE-2024-6307","affectedVersions":">=5.9,<=5.9.9|>=6.0,<=6.0.8|>=6.1,<=6.1.6|>=6.2,<=6.2.5|>=6.3,<=6.3.4|>=6.4,<=6.4.4|>=6.5,<=6.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc5886e8-a520-48e4-9976-2e92b37e4bdf/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Authenticated (Contributor+) Denial of Service via Block Editor URL Details\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc5886e8-a520-48e4-9976-2e92b37e4bdf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc5886e8-a520-48e4-9976-2e92b37e4bdf?source=api-prod","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc6a8c0e-1136-41ff-bfc2-450434aa6326/wordpress","title":"WordPress Core < 5.4.2 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc6a8c0e-1136-41ff-bfc2-450434aa6326"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc6a8c0e-1136-41ff-bfc2-450434aa6326?source=api-prod","cve":"CVE-2020-4048","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/bd087d06-5395-4dfd-a288-2c3271a62842/wordpress","title":"WordPress Core 6.8 -  7.0.1 - Unauthenticated SQL Injection via author__not_in Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd087d06-5395-4dfd-a288-2c3271a62842"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd087d06-5395-4dfd-a288-2c3271a62842?source=api-prod","cve":"CVE-2026-60137","affectedVersions":">=6.8,<6.8.5|>=6.9,<6.9.5|>=7.0,<7.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/bd715375-6bf8-4602-9554-b1f81aa5afa2/wordpress","title":"WordPress Core <= 2.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd715375-6bf8-4602-9554-b1f81aa5afa2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd715375-6bf8-4602-9554-b1f81aa5afa2?source=api-prod","cve":"CVE-2007-3140","affectedVersions":"<=2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/bdc84664-2a04-4cc6-ac3f-48bfd432691f/wordpress","title":"WordPress Core 4.7.0-6.3.1 - Denial of Service via Cache Poisoning\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"bdc84664-2a04-4cc6-ac3f-48bfd432691f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdc84664-2a04-4cc6-ac3f-48bfd432691f?source=api-prod","affectedVersions":">=4.7,<=4.7.26|>=4.8,<=4.8.22|>=4.9,<=4.9.23|>=5.0,<=5.0.19|>=5.1,<=5.1.16|>=5.2,<=5.2.18|>=5.3,<=5.3.15|>=5.4,<=5.4.13|>=5.5,<=5.5.12|>=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/be4515d8-0d5d-4925-a9a4-64ba9d51fe02/wordpress","title":"WordPress Core <= 2.0.4 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"be4515d8-0d5d-4925-a9a4-64ba9d51fe02"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be4515d8-0d5d-4925-a9a4-64ba9d51fe02?source=api-prod","cve":"CVE-2006-6017","affectedVersions":"<=2.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/beb70eb8-9a9c-4116-832c-337fc2a03329/wordpress","title":"WordPress Core < 5.5.2 - Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"beb70eb8-9a9c-4116-832c-337fc2a03329"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/beb70eb8-9a9c-4116-832c-337fc2a03329?source=api-prod","cve":"CVE-2020-28039","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bf48087a-f729-488a-8e40-f4e010ccd5a7/wordpress","title":"WordPress Core < 1.5.1.3 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"bf48087a-f729-488a-8e40-f4e010ccd5a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bf48087a-f729-488a-8e40-f4e010ccd5a7?source=api-prod","cve":"CVE-2005-2110","affectedVersions":"<=1.5.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/bfcbf652-6cb4-4f3e-9032-ad262e8c8480/wordpress","title":"WordPress Core < 5.2.3 - Stored Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"bfcbf652-6cb4-4f3e-9032-ad262e8c8480"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bfcbf652-6cb4-4f3e-9032-ad262e8c8480?source=api-prod","cve":"CVE-2019-16218","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.12|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/c0bba475-b498-4c2d-a3f2-f4766a2b8616/wordpress","title":"WordPress Core <= 3.5.1 - Denial of Service via wp-postpass cookie\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"c0bba475-b498-4c2d-a3f2-f4766a2b8616"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c0bba475-b498-4c2d-a3f2-f4766a2b8616?source=api-prod","cve":"CVE-2013-2173","affectedVersions":"<3.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c2385865-ff03-4daf-bf81-3ec3ea11c91f/wordpress","title":"WordPress Core < 4.2.4 - Cross-Site Scripting in Theme Preview\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2385865-ff03-4daf-bf81-3ec3ea11c91f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2385865-ff03-4daf-bf81-3ec3ea11c91f?source=api-prod","cve":"CVE-2015-5734","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/c248606f-2d79-46c1-8975-e111b9118ceb/wordpress","title":"WordPress Core < 3.1.2 - Incorrect Authorization for Contributor-level users\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"c248606f-2d79-46c1-8975-e111b9118ceb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c248606f-2d79-46c1-8975-e111b9118ceb?source=api-prod","cve":"CVE-2011-1762","affectedVersions":"<=3.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c272f769-65da-4963-aff0-8f68a277ea63/wordpress","title":"WordPress Core < 5.8.3 - Authenticated (Author+) Stored Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"c272f769-65da-4963-aff0-8f68a277ea63"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c272f769-65da-4963-aff0-8f68a277ea63?source=api-prod","cve":"CVE-2022-21662","affectedVersions":">=3.7,<3.7.37|>=3.8,<3.8.37|>=3.9,<3.9.35|>=4.0,<4.0.34|>=4.1,<4.1.34|>=4.2,<4.2.31|>=4.3,<4.3.27|>=4.4,<4.4.26|>=4.5,<4.5.25|>=4.6,<4.6.22|>=4.7,<4.7.22|>=4.8,<4.8.18|>=4.9,<4.9.19|>=5.0,<5.0.15|>=5.1,<5.1.12|>=5.2,<5.2.14|>=5.3,<5.3.11|>=5.4,<5.4.9|>=5.5,<5.5.8|>=5.6,<5.6.7|>=5.7,<5.7.5|>=5.8,<5.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/c34ef5e3-afcd-4686-861f-5e382812233a/wordpress","title":"WordPress Core <= 7.1 - Forced Theme Install/Preview and Selector Injection via Theme Installer Route\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c34ef5e3-afcd-4686-861f-5e382812233a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c34ef5e3-afcd-4686-861f-5e382812233a?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c38a5e59-3233-4b37-bd6f-baf5dc9f9a01/wordpress","title":"WordPress Core < 4.9.7 - Authenticated Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c38a5e59-3233-4b37-bd6f-baf5dc9f9a01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c38a5e59-3233-4b37-bd6f-baf5dc9f9a01?source=api-prod","cve":"CVE-2018-12895","affectedVersions":"<3.7|>=3.7,<=3.7.26|>=3.8,<=3.8.26|>=3.9,<=3.9.24|>=4.0,<=4.0.23|>=4.1,<=4.1.23|>=4.2,<=4.2.20|>=4.3,<=4.3.16|>=4.4,<=4.4.15|>=4.5,<=4.5.14|>=4.6,<=4.6.11|>=4.7,<=4.7.10|>=4.8,<=4.8.6|>=4.9,<=4.9.6","severity":"high"},{"advisoryId":"WPSECADV/WF/c399687c-bb00-4b72-a17f-e3bf04918259/wordpress","title":"WordPress Core < 5.0.1 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"c399687c-bb00-4b72-a17f-e3bf04918259"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c399687c-bb00-4b72-a17f-e3bf04918259?source=api-prod","cve":"CVE-2018-20152","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3b42bd3-f7d3-43d1-bdd8-4389fd82e1e9/wordpress","title":"WordPress Core < 2.0.7 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3b42bd3-f7d3-43d1-bdd8-4389fd82e1e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3b42bd3-f7d3-43d1-bdd8-4389fd82e1e9?source=api-prod","cve":"CVE-2007-0233","affectedVersions":"<=2.0.6","severity":"high"},{"advisoryId":"WPSECADV/WF/c3ecda09-ecee-4e97-ae6f-92d52b0589e5/wordpress","title":"WordPress <= 6.8.2 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3ecda09-ecee-4e97-ae6f-92d52b0589e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3ecda09-ecee-4e97-ae6f-92d52b0589e5?source=api-prod","cve":"CVE-2025-58674","affectedVersions":"<=4.7|>=4.7,<=4.7.30|>=4.8,<=4.8.26|>=4.9,<=4.9.27|>=5.0,<=5.0.23|>=5.1,<=5.1.20|>=5.2,<=5.2.22|>=5.3,<=5.3.19|>=5.4,<=5.4.17|>=5.5,<=5.5.16|>=5.6,<=5.6.15|>=5.7,<=5.7.13|>=5.8,<=5.8.11|>=5.9,<=5.9.11|>=6.0,<=6.0.10|>=6.1,<=6.1.8|>=6.2,<=6.2.7|>=6.3,<=6.3.6|>=6.4,<=6.4.6|>=6.5,<=6.5.6|>=6.6,<=6.6.3|>=6.7,<=6.7.3|>=6.8,<=6.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3f9898b-0aa0-4dd1-9298-96c853dbef5c/wordpress","title":"WordPress Core <= 7.0.2 - Unauthenticated Sensitive Information Exposure via Comment Feeds\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3f9898b-0aa0-4dd1-9298-96c853dbef5c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3f9898b-0aa0-4dd1-9298-96c853dbef5c?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c41aadb1-e1a6-4bda-ac94-c461c320e78f/wordpress","title":"WordPress Core <= 7.1 - HTML API set_modifiable_text() Comment Boundary Break\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c41aadb1-e1a6-4bda-ac94-c461c320e78f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c41aadb1-e1a6-4bda-ac94-c461c320e78f?source=api-prod","affectedVersions":"=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"low"},{"advisoryId":"WPSECADV/WF/c510063e-1c64-40fa-842a-e7efd3dc550a/wordpress","title":"WordPress Core < 5.2.3 - Reflected Cross-Site Scripting via Shortcode Previews\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c510063e-1c64-40fa-842a-e7efd3dc550a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c510063e-1c64-40fa-842a-e7efd3dc550a?source=api-prod","cve":"CVE-2019-16219","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.12|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c544c86d-e414-49c2-ae57-3293b1a6409d/wordpress","title":"WordPress Core < 3.5.1 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"c544c86d-e414-49c2-ae57-3293b1a6409d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c544c86d-e414-49c2-ae57-3293b1a6409d?source=api-prod","cve":"CVE-2013-0235","affectedVersions":"<=3.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/c5bfa818-65e4-4b36-8b61-6f47b42eb6c5/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Scripting via media-playlists\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5bfa818-65e4-4b36-8b61-6f47b42eb6c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5bfa818-65e4-4b36-8b61-6f47b42eb6c5?source=api-prod","cve":"CVE-2014-9032","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/c6670e56-ae81-4b1b-8274-bf355a411e92/wordpress","title":"WordPress Core <= 2.1.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"c6670e56-ae81-4b1b-8274-bf355a411e92"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c6670e56-ae81-4b1b-8274-bf355a411e92?source=api-prod","cve":"CVE-2007-1244","affectedVersions":"<=2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c674bb2a-8ecf-4aea-a729-c9bdf4ee35fd/wordpress","title":"WordPress Core < 4.5.3 - Authorization Bypass to Remove Category Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"c674bb2a-8ecf-4aea-a729-c9bdf4ee35fd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c674bb2a-8ecf-4aea-a729-c9bdf4ee35fd?source=api-prod","cve":"CVE-2016-5837","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c6ae2633-caf6-4319-ba81-e71a673c89ee/wordpress","title":"WordPress Core < 4.2.4 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"c6ae2633-caf6-4319-ba81-e71a673c89ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c6ae2633-caf6-4319-ba81-e71a673c89ee?source=api-prod","cve":"CVE-2015-2213","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/c77fce42-92e9-43bc-ab3b-599e036ed648/wordpress","title":"WordPress Core < 3.4.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"c77fce42-92e9-43bc-ab3b-599e036ed648"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c77fce42-92e9-43bc-ab3b-599e036ed648?source=api-prod","cve":"CVE-2012-3384","affectedVersions":"<=3.4","severity":"high"},{"advisoryId":"WPSECADV/WF/c7d04f7d-d114-4104-a7cb-298c148e2b6d/wordpress","title":"WordPress Core <= 2.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"c7d04f7d-d114-4104-a7cb-298c148e2b6d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c7d04f7d-d114-4104-a7cb-298c148e2b6d?source=api-prod","cve":"CVE-2007-1894","affectedVersions":"<=2.0.9|>=2.1,<=2.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8313827-f3ce-451d-869a-99684f58daff/wordpress","title":"WordPress Core < 2.0.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8313827-f3ce-451d-869a-99684f58daff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8313827-f3ce-451d-869a-99684f58daff?source=api-prod","cve":"CVE-2006-1263","affectedVersions":"<2.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c83a2c4d-a264-49ec-85f1-e3f48715d725/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Author+) CSS Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"c83a2c4d-a264-49ec-85f1-e3f48715d725"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c83a2c4d-a264-49ec-85f1-e3f48715d725?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c84e274e-292f-4d0f-b847-4a786b4cb15a/wordpress","title":"WordPress Core < 2.1 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"c84e274e-292f-4d0f-b847-4a786b4cb15a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c84e274e-292f-4d0f-b847-4a786b4cb15a?source=api-prod","cve":"CVE-2007-0541","affectedVersions":"<2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c90844e1-0502-4d08-888f-4835f63f8dd0/wordpress","title":"WordPress Core < 5.9.1 - jQuery Prototype Pollution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"c90844e1-0502-4d08-888f-4835f63f8dd0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c90844e1-0502-4d08-888f-4835f63f8dd0?source=api-prod","cve":"CVE-2021-20083","affectedVersions":"<3.7|>=3.7,<=3.7.37|>=3.8,<=3.8.37|>=3.9,<=3.9.35|>=4.0,<=4.0.34|>=4.1,<=4.1.34|>=4.2,<=4.2.31|>=4.3,<=4.3.27|>=4.4,<=4.4.26|>=4.5,<=4.5.25|>=4.6,<=4.6.22|>=4.7,<=4.7.22|>=4.8,<=4.8.18|>=4.9,<=4.9.19|>=5.0,<=5.0.15|>=5.1,<=5.1.12|>=5.2,<=5.2.14|>=5.3,<=5.3.11|>=5.4,<=5.4.9|>=5.5,<=5.5.8|>=5.6,<=5.6.7|>=5.7,<=5.7.5|>=5.8,<=5.8.3|>=5.9,<=5.9.1","severity":"high"},{"advisoryId":"WPSECADV/WF/c95505e3-6851-476e-af40-bb841eb01be7/wordpress","title":"WordPress Core < 5.2.4 - Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"c95505e3-6851-476e-af40-bb841eb01be7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c95505e3-6851-476e-af40-bb841eb01be7?source=api-prod","cve":"CVE-2019-17669","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.13|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ca4824fb-192a-499d-bf92-aa59410d8d4a/wordpress","title":"WordPress Core < 4.8.2 - Cross-Site Scripting via Template Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"ca4824fb-192a-499d-bf92-aa59410d8d4a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca4824fb-192a-499d-bf92-aa59410d8d4a?source=api-prod","cve":"CVE-2017-14720","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/caa66246-7ffa-4944-ae3a-9c872300b7d4/wordpress","title":"WordPress Core < 5.0.1 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"caa66246-7ffa-4944-ae3a-9c872300b7d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/caa66246-7ffa-4944-ae3a-9c872300b7d4?source=api-prod","cve":"CVE-2018-20151","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/cac1c1fa-7d6c-43c3-885e-9be320cb8f83/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Subscriber+) Email Change Confirmation Bypass\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"cac1c1fa-7d6c-43c3-885e-9be320cb8f83"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cac1c1fa-7d6c-43c3-885e-9be320cb8f83?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb072bfa-991a-4839-996d-fdc803427076/wordpress","title":"WordPress Core < 2.8.1 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-12-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb072bfa-991a-4839-996d-fdc803427076"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb072bfa-991a-4839-996d-fdc803427076?source=api-prod","cve":"CVE-2008-6762","affectedVersions":"<2.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc0d15ab-e0a4-4ac5-8558-23aeaf00b11a/wordpress","title":"WordPress Core < 2.0.3 - Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"cc0d15ab-e0a4-4ac5-8558-23aeaf00b11a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc0d15ab-e0a4-4ac5-8558-23aeaf00b11a?source=api-prod","cve":"CVE-2006-2667","affectedVersions":"<=2.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/cddbb0f8-fc73-46d7-80af-edb69227084f/wordpress","title":"WordPress Core <= 7.0.2 - Unauthenticated Blind Server-Side Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"cddbb0f8-fc73-46d7-80af-edb69227084f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cddbb0f8-fc73-46d7-80af-edb69227084f?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/cec5bfa6-96ed-4a5a-be19-63434af32c89/wordpress","title":"WordPress Core < 4.2.1 - Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"cec5bfa6-96ed-4a5a-be19-63434af32c89"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cec5bfa6-96ed-4a5a-be19-63434af32c89?source=api-prod","cve":"CVE-2015-3440","affectedVersions":"=4.2|>=4.0,<=4.0.3|>=4.1,<=4.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/cefb979e-2b5b-4820-a350-ee106131f0f9/wordpress","title":"WordPress Core < 3.1.1 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"cefb979e-2b5b-4820-a350-ee106131f0f9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cefb979e-2b5b-4820-a350-ee106131f0f9?source=api-prod","cve":"CVE-2011-4957","affectedVersions":"<3.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/cf803368-64ff-4dbe-85ae-af30e18bc833/wordpress","title":"WordPress Core < 2.6 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-07-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"cf803368-64ff-4dbe-85ae-af30e18bc833"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cf803368-64ff-4dbe-85ae-af30e18bc833?source=api-prod","cve":"CVE-2008-3233","affectedVersions":"<2.6","severity":"high"},{"advisoryId":"WPSECADV/WF/d0318ed9-a464-498b-a821-f7746740937c/wordpress","title":"WordPress Core <= 2.8.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-07-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"d0318ed9-a464-498b-a821-f7746740937c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d0318ed9-a464-498b-a821-f7746740937c?source=api-prod","cve":"CVE-2009-2851","affectedVersions":"<=2.8.1","severity":"high"},{"advisoryId":"WPSECADV/WF/d116e432-ded9-4fc1-9509-710269dba5e0/wordpress","title":"WordPress Core < 3.5.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"d116e432-ded9-4fc1-9509-710269dba5e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d116e432-ded9-4fc1-9509-710269dba5e0?source=api-prod","cve":"CVE-2013-2205","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2716f7e-ae73-482a-acf7-772884f0b3ab/wordpress","title":"WordPress Core < 4.8.2 - Cross-Site Scripting in oEmbed\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2716f7e-ae73-482a-acf7-772884f0b3ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2716f7e-ae73-482a-acf7-772884f0b3ab?source=api-prod","cve":"CVE-2017-14724","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d27c2393-64b2-4087-aa91-cbfaec644e13/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Conditional Action Hook Injection via Unregistered Post Status or Post Type\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"d27c2393-64b2-4087-aa91-cbfaec644e13"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d27c2393-64b2-4087-aa91-cbfaec644e13?source=api-prod","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"low"},{"advisoryId":"WPSECADV/WF/d3039831-6a29-48de-bdf3-66cac7655719/wordpress","title":"WordPress Core < 4.9.5 - Authenticated Stored Cross-Site Scripting via Generator Tag\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3039831-6a29-48de-bdf3-66cac7655719"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3039831-6a29-48de-bdf3-66cac7655719?source=api-prod","cve":"CVE-2018-10102","affectedVersions":"<3.7|>=3.7,<=3.7.25|>=3.8,<=3.8.25|>=3.9,<=3.9.23|>=4.0,<=4.0.22|>=4.1,<=4.1.22|>=4.2,<=4.2.19|>=4.3,<=4.3.15|>=4.4,<=4.4.14|>=4.5,<=4.5.13|>=4.6,<=4.6.10|>=4.7,<=4.7.9|>=4.8,<=4.8.5|>=4.9,<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/d311aab4-fca8-4e83-83cf-c4b8350d7dd1/wordpress","title":"SWFUpload <= 2.2.0.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-11-09 20:12:00","sources":[{"name":"Wordfence","remoteId":"d311aab4-fca8-4e83-83cf-c4b8350d7dd1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d311aab4-fca8-4e83-83cf-c4b8350d7dd1?source=api-prod","cve":"CVE-2012-3414","affectedVersions":"<3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d357f92a-3c20-4972-af4d-65053027d31c/wordpress","title":"WordPress Core < 4.7.5 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d357f92a-3c20-4972-af4d-65053027d31c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d357f92a-3c20-4972-af4d-65053027d31c?source=api-prod","cve":"CVE-2017-9066","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"high"},{"advisoryId":"WPSECADV/WF/d5f1ceb3-34b6-4d97-9787-d52a92f84662/wordpress","title":"WordPress Core < 3.5.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"d5f1ceb3-34b6-4d97-9787-d52a92f84662"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d5f1ceb3-34b6-4d97-9787-d52a92f84662?source=api-prod","cve":"CVE-2013-2203","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6a51962-fe99-4911-85c9-a75bd18e74c2/wordpress","title":"WordPress Core < 5.2.4 - Server Side Request Forgery #2\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6a51962-fe99-4911-85c9-a75bd18e74c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6a51962-fe99-4911-85c9-a75bd18e74c2?source=api-prod","cve":"CVE-2019-17670","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.13|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6dfed14-bb6f-4418-bdd8-9c548e63dac0/wordpress","title":"WordPress Core < 4.6 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6dfed14-bb6f-4418-bdd8-9c548e63dac0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6dfed14-bb6f-4418-bdd8-9c548e63dac0?source=api-prod","cve":"CVE-2016-6897","affectedVersions":"<4.6","severity":"high"},{"advisoryId":"WPSECADV/WF/d7d94443-3ab2-4d89-a580-2e9697d28cd7/wordpress","title":"WordPress Core < 3.5.2 -  Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"d7d94443-3ab2-4d89-a580-2e9697d28cd7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7d94443-3ab2-4d89-a580-2e9697d28cd7?source=api-prod","cve":"CVE-2013-2200","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d84cf972-be7e-497c-b360-2ea491e44ad6/wordpress","title":"WordPress Core < 2.8 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-06-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"d84cf972-be7e-497c-b360-2ea491e44ad6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d84cf972-be7e-497c-b360-2ea491e44ad6?source=api-prod","cve":"CVE-2009-2431","affectedVersions":"<=2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d91ea0c9-ee41-4c8f-a16b-8b36c7f0a72e/wordpress","title":"WordPress Core < 3.6.1 - Deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"d91ea0c9-ee41-4c8f-a16b-8b36c7f0a72e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d91ea0c9-ee41-4c8f-a16b-8b36c7f0a72e?source=api-prod","cve":"CVE-2013-4338","affectedVersions":"<=3.6","severity":"high"},{"advisoryId":"WPSECADV/WF/d928b738-d8ed-447a-b604-e71e90d4d23d/wordpress","title":"WordPress Core < 2.8.4 - Forced Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"d928b738-d8ed-447a-b604-e71e90d4d23d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d928b738-d8ed-447a-b604-e71e90d4d23d?source=api-prod","cve":"CVE-2009-2762","affectedVersions":"<=2.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/da760bcf-b252-4b88-9f54-af0a097e3295/wordpress","title":"WordPress Core <= 0.70 - Remote File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2003-06-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"da760bcf-b252-4b88-9f54-af0a097e3295"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da760bcf-b252-4b88-9f54-af0a097e3295?source=api-prod","cve":"CVE-2003-1599","affectedVersions":"<=0.70","severity":"critical"},{"advisoryId":"WPSECADV/WF/da8d1659-c532-4020-be16-527c1437952a/wordpress","title":"WordPress Core < 4.6 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"da8d1659-c532-4020-be16-527c1437952a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da8d1659-c532-4020-be16-527c1437952a?source=api-prod","cve":"CVE-2016-10148","affectedVersions":"<4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/dab0ddfb-6e30-4bde-95fb-90570579ff04/wordpress","title":"WordPress Core <= 2.0.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"dab0ddfb-6e30-4bde-95fb-90570579ff04"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dab0ddfb-6e30-4bde-95fb-90570579ff04?source=api-prod","cve":"CVE-2006-0985","affectedVersions":"<=2.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/dbcdeda4-85b7-48d6-b89d-1d1756d183d2/wordpress","title":"WordPress Core < 3.5.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"dbcdeda4-85b7-48d6-b89d-1d1756d183d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dbcdeda4-85b7-48d6-b89d-1d1756d183d2?source=api-prod","cve":"CVE-2013-0237","affectedVersions":"<=3.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/dc1ae2c7-1eff-4976-8f88-f0b97a5cf323/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Administrator+) Missing Authorization to Network Plugin Activation (Multisite)\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"dc1ae2c7-1eff-4976-8f88-f0b97a5cf323"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc1ae2c7-1eff-4976-8f88-f0b97a5cf323?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"low"},{"advisoryId":"WPSECADV/WF/ddd06190-d0c1-445d-8c6f-4c7df3248db4/wordpress","title":"WordPress Core < 6.0.3 - Cross-Site Request Forgery via wp-trackback.php\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ddd06190-d0c1-445d-8c6f-4c7df3248db4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ddd06190-d0c1-445d-8c6f-4c7df3248db4?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/e1e973e3-f2a2-465c-aec7-5a7d4290c00b/wordpress","title":"WordPress Core <= 3.5.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1e973e3-f2a2-465c-aec7-5a7d4290c00b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1e973e3-f2a2-465c-aec7-5a7d4290c00b?source=api-prod","cve":"CVE-2012-2399","affectedVersions":"<=3.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/e363c09a-4381-4b3a-951c-9a0ff5669016/wordpress","title":"WordPress Core < 6.5.2 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e363c09a-4381-4b3a-951c-9a0ff5669016"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e363c09a-4381-4b3a-951c-9a0ff5669016?source=api-prod","cve":"CVE-2024-4439","affectedVersions":">=6.0,<=6.0.7|>=6.1,<=6.1.5|>=6.2,<=6.2.4|>=6.3,<=6.3.3|>=6.4,<=6.4.3|>=6.5,<=6.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/e5252b2f-c1a1-4fec-abaf-ad234affdcfb/wordpress","title":"WordPress Core < 4.9.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5252b2f-c1a1-4fec-abaf-ad234affdcfb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5252b2f-c1a1-4fec-abaf-ad234affdcfb?source=api-prod","cve":"CVE-2017-17092","affectedVersions":"<3.7|=4.9|>=3.7,<=3.7.23|>=3.8,<=3.8.23|>=3.9,<=3.9.21|>=4.0,<=4.0.20|>=4.1,<=4.1.20|>=4.2,<=4.2.17|>=4.3,<=4.3.13|>=4.4,<=4.4.12|>=4.5,<=4.5.11|>=4.6,<=4.6.8|>=4.7,<=4.7.7|>=4.8,<=4.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e5539ad8-4203-4d22-9a40-0ed6e0471e19/wordpress","title":"WordPress Core 2.2.1 - Backdoor\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-03-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5539ad8-4203-4d22-9a40-0ed6e0471e19"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5539ad8-4203-4d22-9a40-0ed6e0471e19?source=api-prod","cve":"CVE-2007-1277","affectedVersions":"=2.2.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/e5dc87cd-4f45-4faf-b1e2-64e94eacb180/wordpress","title":"WordPress Core - Informational < 6.8 - Weak Hashing Algorithm\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5dc87cd-4f45-4faf-b1e2-64e94eacb180"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5dc87cd-4f45-4faf-b1e2-64e94eacb180?source=api-prod","cve":"CVE-2012-6707","affectedVersions":"<6.8","severity":"low"},{"advisoryId":"WPSECADV/WF/e620328e-f4f4-4f3a-8767-efbc676f72a4/wordpress","title":"WordPress Core < 4.7.1 - Cross-Site Request Forgery via Uploading Flash File\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"e620328e-f4f4-4f3a-8767-efbc676f72a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e620328e-f4f4-4f3a-8767-efbc676f72a4?source=api-prod","cve":"CVE-2017-5489","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"high"},{"advisoryId":"WPSECADV/WF/e669ae60-c015-4b84-86a8-56aab9fe23bd/wordpress","title":"WordPress Core < 2.6.5 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-12-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"e669ae60-c015-4b84-86a8-56aab9fe23bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e669ae60-c015-4b84-86a8-56aab9fe23bd?source=api-prod","cve":"CVE-2008-5278","affectedVersions":"<=2.6.4","severity":"high"},{"advisoryId":"WPSECADV/WF/e72e87ae-f5c0-4582-a644-b90e93d98e74/wordpress","title":"WordPress Core < 4.4.2 - Open Redirect via wp_validate_redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"e72e87ae-f5c0-4582-a644-b90e93d98e74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e72e87ae-f5c0-4582-a644-b90e93d98e74?source=api-prod","cve":"CVE-2016-2221","affectedVersions":"<3.7|>=3.7,<=3.7.12|>=3.8,<=3.8.12|>=3.9,<=3.9.10|>=4.0,<=4.0.9|>=4.1,<=4.1.9|>=4.2,<=4.2.6|>=4.3,<=4.3.2|>=4.4,<=4.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8687bf7-4172-4cc3-bd6e-830fc5fc28e9/wordpress","title":"WordPress Core < 1.2.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2004-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8687bf7-4172-4cc3-bd6e-830fc5fc28e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8687bf7-4172-4cc3-bd6e-830fc5fc28e9?source=api-prod","cve":"CVE-2004-1559","affectedVersions":"<1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8fcc105-0b37-47a7-a726-fee33b86790e/wordpress","title":"WordPress Core <= 2.0.9 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8fcc105-0b37-47a7-a726-fee33b86790e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8fcc105-0b37-47a7-a726-fee33b86790e?source=api-prod","cve":"CVE-2008-0192","affectedVersions":"<=2.0.9","severity":"high"},{"advisoryId":"WPSECADV/WF/e9ec79e5-9f02-4a73-9437-58821ca855ef/wordpress","title":"WordPress Core 1.5 - 2.3.1 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-12-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"e9ec79e5-9f02-4a73-9437-58821ca855ef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e9ec79e5-9f02-4a73-9437-58821ca855ef?source=api-prod","cve":"CVE-2007-6013","affectedVersions":">=1.5,<=2.3.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/ea26eb81-e6d1-4c6d-95f4-fd1b2d919632/wordpress","title":"WordPress Core < 4.5 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea26eb81-e6d1-4c6d-95f4-fd1b2d919632"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea26eb81-e6d1-4c6d-95f4-fd1b2d919632?source=api-prod","cve":"CVE-2016-4029","affectedVersions":"<4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/eadbfb77-fb9a-4363-acc8-8dd9b87820eb/wordpress","title":"WordPress Core < 6.0.3 - Stored Cross-Site Scripting via wp-mail.php\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"eadbfb77-fb9a-4363-acc8-8dd9b87820eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eadbfb77-fb9a-4363-acc8-8dd9b87820eb?source=api-prod","cve":"CVE-2022-43504","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/eaea07ad-e6f1-4f23-a508-94203967af7f/wordpress","title":"WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"eaea07ad-e6f1-4f23-a508-94203967af7f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eaea07ad-e6f1-4f23-a508-94203967af7f?source=api-prod","cve":"CVE-2019-17672","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.13|>=4.7,<=4.7.14|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/eb56da48-c928-42d4-8c71-de72f879d430/wordpress","title":"WordPress Core < 4.5.3 - Password Change via Stolen Cookie\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb56da48-c928-42d4-8c71-de72f879d430"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb56da48-c928-42d4-8c71-de72f879d430?source=api-prod","cve":"CVE-2016-5838","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ec8ad817-9716-4d29-a02a-57eb9aa58a13/wordpress","title":"WordPress Core <= 1.2 - HTTP Response Splitting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2004-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec8ad817-9716-4d29-a02a-57eb9aa58a13"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec8ad817-9716-4d29-a02a-57eb9aa58a13?source=api-prod","cve":"CVE-2004-1584","affectedVersions":"<1.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ecdcad88-c926-490f-8e83-09d92ba080f8/wordpress","title":"WordPress Core < 5.0.1 Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"ecdcad88-c926-490f-8e83-09d92ba080f8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ecdcad88-c926-490f-8e83-09d92ba080f8?source=api-prod","cve":"CVE-2018-20150","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/edc0d90f-41a7-430a-a994-57be7fba8753/wordpress","title":"WordPress Core < 2.6.2 - Cryptographic Weakness\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"edc0d90f-41a7-430a-a994-57be7fba8753"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/edc0d90f-41a7-430a-a994-57be7fba8753?source=api-prod","cve":"CVE-2008-4107","affectedVersions":"<=2.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/edcf46b6-368e-49c0-b2c3-99bf6e2d358f/wordpress","title":"WordPress Core < 6.2.1 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"edcf46b6-368e-49c0-b2c3-99bf6e2d358f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/edcf46b6-368e-49c0-b2c3-99bf6e2d358f?source=api-prod","cve":"CVE-2023-2745","affectedVersions":"<4.1.38|>=4.2,<4.2.35|>=4.3,<4.3.31|>=4.4,<4.4.30|>=4.5,<4.5.29|>=4.6,<4.6.26|>=4.7,<4.7.26|>=4.8,<4.8.22|>=4.9,<4.9.23|>=5.0,<5.0.19|>=5.1,<5.1.16|>=5.2,<5.2.18|>=5.3,<5.3.15|>=5.4,<5.4.13|>=5.5,<5.5.12|>=5.6,<5.6.11|>=5.7,<5.7.9|>=5.8,<5.8.7|>=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee01dab6-8e10-43aa-bc20-1f389f1e7d07/wordpress","title":"WordPress Core < 3.1.3 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"ee01dab6-8e10-43aa-bc20-1f389f1e7d07"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee01dab6-8e10-43aa-bc20-1f389f1e7d07?source=api-prod","cve":"CVE-2011-3128","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee2c5df2-250a-4e35-9219-2630d8d9253a/wordpress","title":"WordPress Core < 3.1.3 - Clickjacking\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"ee2c5df2-250a-4e35-9219-2630d8d9253a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee2c5df2-250a-4e35-9219-2630d8d9253a?source=api-prod","cve":"CVE-2011-3127","affectedVersions":"<=3.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/f0691a2a-734e-4726-97a1-9e0c796c2fb5/wordpress","title":"WordPress Core < 6.0.3 - Information Disclosure (Email Address)\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"f0691a2a-734e-4726-97a1-9e0c796c2fb5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f0691a2a-734e-4726-97a1-9e0c796c2fb5?source=api-prod","cve":"CVE-2022-43504","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f10fdf31-6941-4d41-8c15-90ed61addc2f/wordpress","title":"WordPress Core < 4.7.1 - Stored Cross-Site Scripting via theme directory name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"f10fdf31-6941-4d41-8c15-90ed61addc2f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f10fdf31-6941-4d41-8c15-90ed61addc2f?source=api-prod","cve":"CVE-2017-5490","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f21c70aa-22be-456d-93bb-f478b70deaef/wordpress","title":"WordPress Core < 4.7.5 - Cross-Site Scripting via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"f21c70aa-22be-456d-93bb-f478b70deaef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f21c70aa-22be-456d-93bb-f478b70deaef?source=api-prod","cve":"CVE-2017-9063","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f25d0409-dbca-4c5a-9f43-fc03e5307d0f/wordpress","title":"WordPress Core < 1.5.1.3 - Arbitrary Email Content Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f25d0409-dbca-4c5a-9f43-fc03e5307d0f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f25d0409-dbca-4c5a-9f43-fc03e5307d0f?source=api-prod","cve":"CVE-2005-2109","affectedVersions":"<=1.5.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f29f9290-1f98-4019-997b-e33f2c151a5d/wordpress","title":"WordPress Core <= 3.3.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"f29f9290-1f98-4019-997b-e33f2c151a5d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f29f9290-1f98-4019-997b-e33f2c151a5d?source=api-prod","cve":"CVE-2012-6633","affectedVersions":"<3.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3ff473c-c629-487c-9b18-e074534c7b79/wordpress","title":"WordPress Core < 5.5.2 - Spam Embed on Multisite Installations\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3ff473c-c629-487c-9b18-e074534c7b79"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3ff473c-c629-487c-9b18-e074534c7b79?source=api-prod","cve":"CVE-2020-28033","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f419b83c-9253-4ca6-a02a-7daad1819581/wordpress","title":"WordPress Core < 3.3.2 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"f419b83c-9253-4ca6-a02a-7daad1819581"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f419b83c-9253-4ca6-a02a-7daad1819581?source=api-prod","cve":"CVE-2012-2402","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f4393526-6357-40ee-a024-f461d0430a62/wordpress","title":"WordPress Core <= 2.0.5 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f4393526-6357-40ee-a024-f461d0430a62"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f4393526-6357-40ee-a024-f461d0430a62?source=api-prod","cve":"CVE-2007-0107","affectedVersions":"<=2.0.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/f460d529-f15e-4c23-ad67-94d3f4bc0c2e/wordpress","title":"WordPress Core <= 2.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"f460d529-f15e-4c23-ad67-94d3f4bc0c2e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f460d529-f15e-4c23-ad67-94d3f4bc0c2e?source=api-prod","cve":"CVE-2007-2627","affectedVersions":"<=2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f4a4e3ef-ee88-4175-8628-c5511c20bf23/wordpress","title":"WordPress Core < 4.7.1 - Cross-Site Scripting via Name and Version Header of Plugin\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"f4a4e3ef-ee88-4175-8628-c5511c20bf23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f4a4e3ef-ee88-4175-8628-c5511c20bf23?source=api-prod","cve":"CVE-2017-5488","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f50bca0a-7089-4b4e-820f-d311fdb88cf1/wordpress","title":"WordPress Core 2.0.2 - 2.0.5 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f50bca0a-7089-4b4e-820f-d311fdb88cf1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f50bca0a-7089-4b4e-820f-d311fdb88cf1?source=api-prod","cve":"CVE-2006-4743","affectedVersions":">=2.0.2,<=2.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/f582eb1d-fcd0-4758-9922-969f8eb6efea/wordpress","title":"WordPress Core <= 2.2.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f582eb1d-fcd0-4758-9922-969f8eb6efea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f582eb1d-fcd0-4758-9922-969f8eb6efea?source=api-prod","cve":"CVE-2007-4154","affectedVersions":"<=2.0.10|>=2.2,<=2.2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f7d66176-73a8-4076-8ae0-1f1fd8260f8e/wordpress","title":"WordPress Core < 4.7.5 - Mishandling Post Meta Values via XML-RPC\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"f7d66176-73a8-4076-8ae0-1f1fd8260f8e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7d66176-73a8-4076-8ae0-1f1fd8260f8e?source=api-prod","cve":"CVE-2017-9062","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f8758fd2-9f43-4e31-b496-50b77180bc07/wordpress","title":"WordPress Core < 2.1 - Cross-Site Request Forgery to Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"f8758fd2-9f43-4e31-b496-50b77180bc07"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f8758fd2-9f43-4e31-b496-50b77180bc07?source=api-prod","cve":"CVE-2013-7233","affectedVersions":"<=2.0.11","severity":"high"},{"advisoryId":"WPSECADV/WF/f9bfa726-40e1-4417-9d59-289dbb3a17ff/wordpress","title":"WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9bfa726-40e1-4417-9d59-289dbb3a17ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9bfa726-40e1-4417-9d59-289dbb3a17ff?source=api-prod","cve":"CVE-2020-28035","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f9ce0ae8-4729-4236-b4e8-e5726f4d3101/wordpress","title":"WordPress Core <= 2.8.5 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9ce0ae8-4729-4236-b4e8-e5726f4d3101"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9ce0ae8-4729-4236-b4e8-e5726f4d3101?source=api-prod","cve":"CVE-2009-3890","affectedVersions":"<=2.8.5","severity":"high"},{"advisoryId":"WPSECADV/WF/fa139703-e83e-4a19-a801-464b72a2acc4/wordpress","title":"WordPress Core < 6.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting via Comments\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"fa139703-e83e-4a19-a801-464b72a2acc4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fa139703-e83e-4a19-a801-464b72a2acc4?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/faf3fb76-847f-447f-b6c6-49bd0d30d3c7/wordpress","title":"WordPress Core < 1.5.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"faf3fb76-847f-447f-b6c6-49bd0d30d3c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/faf3fb76-847f-447f-b6c6-49bd0d30d3c7?source=api-prod","cve":"CVE-2005-1687","affectedVersions":"<1.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/fbe42214-0a01-4b9c-8149-68c47082d9d9/wordpress","title":"WordPress Core < 1.5.2 - Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"fbe42214-0a01-4b9c-8149-68c47082d9d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fbe42214-0a01-4b9c-8149-68c47082d9d9?source=api-prod","cve":"CVE-2005-2612","affectedVersions":"<=1.5.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/fceae728-ea72-4586-848f-3a45b6f9699a/wordpress","title":"WordPress Core < 3.4.1 - Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"fceae728-ea72-4586-848f-3a45b6f9699a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fceae728-ea72-4586-848f-3a45b6f9699a?source=api-prod","cve":"CVE-2012-3385","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd23b9cd-3492-4f6f-b90d-5215e175c1e3/wordpress","title":"WordPress Core < 4.9.5 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd23b9cd-3492-4f6f-b90d-5215e175c1e3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd23b9cd-3492-4f6f-b90d-5215e175c1e3?source=api-prod","cve":"CVE-2018-10100","affectedVersions":"<3.7|>=3.7,<=3.7.25|>=3.8,<=3.8.25|>=3.9,<=3.9.23|>=4.0,<=4.0.22|>=4.1,<=4.1.22|>=4.2,<=4.2.19|>=4.3,<=4.3.15|>=4.4,<=4.4.14|>=4.5,<=4.5.13|>=4.6,<=4.6.10|>=4.7,<=4.7.9|>=4.8,<=4.8.5|>=4.9,<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd4ac2b0-120a-4e68-bf8d-e039336fe9dc/wordpress","title":"WordPress Core < 4.7.1 -  Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd4ac2b0-120a-4e68-bf8d-e039336fe9dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd4ac2b0-120a-4e68-bf8d-e039336fe9dc?source=api-prod","cve":"CVE-2017-5491","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"high"},{"advisoryId":"WPSECADV/WF/fe1301d9-738b-485f-b8db-c23c16e4f99d/wordpress","title":"WordPress Core < 4.8.2 - Cross-Site Scripting via Javascript: and Data: URLs\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"fe1301d9-738b-485f-b8db-c23c16e4f99d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe1301d9-738b-485f-b8db-c23c16e4f99d?source=api-prod","cve":"CVE-2017-14718","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ff4b47d8-28c1-4706-91d9-0285f419147e/wordpress","title":"WordPress Core < 6.0.3 - SQL Injection via WP_Date_Query\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ff4b47d8-28c1-4706-91d9-0285f419147e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ff4b47d8-28c1-4706-91d9-0285f419147e?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/ffa252d6-0fe2-4d1f-802f-b902084822a7/wordpress","title":"WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name #2\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ffa252d6-0fe2-4d1f-802f-b902084822a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ffa252d6-0fe2-4d1f-802f-b902084822a7?source=api-prod","cve":"CVE-2016-5833","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/00376356-4a85-4898-a101-710e1cb5c6bb/wordpress","title":"WordPress Core <= 3.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-01-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"00376356-4a85-4898-a101-710e1cb5c6bb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/00376356-4a85-4898-a101-710e1cb5c6bb?source=api-prod","cve":"CVE-2012-0287","affectedVersions":"<=3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0114f098-713d-4eef-8643-901f607375de/wordpress","title":"WordPress Core < 5.8.3 - SQL Injection via WP_Meta_Query\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"0114f098-713d-4eef-8643-901f607375de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0114f098-713d-4eef-8643-901f607375de?source=api-prod","cve":"CVE-2022-21664","affectedVersions":">=4.1,<4.1.34|>=4.2,<4.2.31|>=4.3,<4.3.27|>=4.4,<4.4.26|>=4.5,<4.5.25|>=4.6,<4.6.22|>=4.7,<4.7.22|>=4.8,<4.8.18|>=4.9,<4.9.19|>=5.0,<5.0.15|>=5.1,<5.1.12|>=5.2,<5.2.14|>=5.3,<5.3.11|>=5.4,<5.4.9|>=5.5,<5.5.8|>=5.6,<5.6.7|>=5.7,<5.7.5|>=5.8,<5.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/01ebc1b1-2dd3-4e91-93b2-fc8e5e93e925/wordpress","title":"WordPress Core < 4.9.2 - Authenticated Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-01-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"01ebc1b1-2dd3-4e91-93b2-fc8e5e93e925"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01ebc1b1-2dd3-4e91-93b2-fc8e5e93e925?source=api-prod","cve":"CVE-2018-5776","affectedVersions":"<=3.6.1|>=3.7,<=3.7.24|>=3.8,<=3.8.24|>=3.9,<=3.9.22|>=4.0,<=4.0.21|>=4.1,<=4.1.21|>=4.2,<=4.2.18|>=4.3,<=4.3.14|>=4.4,<=4.4.13|>=4.5,<=4.5.12|>=4.6,<=4.6.9|>=4.7,<=4.7.8|>=4.8,<=4.8.4|>=4.9,<=4.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0248f829-84de-40b9-bb63-354fbf06472d/wordpress","title":"WordPress Core < 6.0.2 - Authenticated SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"0248f829-84de-40b9-bb63-354fbf06472d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0248f829-84de-40b9-bb63-354fbf06472d?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.38|>=3.8,<=3.8.38|>=3.9,<=3.9.36|>=4.0,<=4.0.35|>=4.1,<=4.1.35|>=4.2,<=4.2.32|>=4.3,<=4.3.28|>=4.4,<=4.4.27|>=4.5,<=4.5.26|>=4.6,<=4.6.23|>=4.7,<=4.7.23|>=4.8,<=4.8.19|>=4.9,<=4.9.20|>=5.0,<=5.0.16|>=5.1,<=5.1.13|>=5.2,<=5.2.15|>=5.3,<=5.3.12|>=5.4,<=5.4.10|>=5.5,<=5.5.9|>=5.6,<=5.6.8|>=5.7,<=5.7.6|>=5.8,<=5.8.4|>=5.9,<=5.9.3|>=6.0,<=6.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/043d64ed-78dd-442e-87c9-92b5b64260b8/wordpress","title":"WordPress Core < 4.7.5 - Stored Cross-Site Scripting via filenames\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"043d64ed-78dd-442e-87c9-92b5b64260b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/043d64ed-78dd-442e-87c9-92b5b64260b8?source=api-prod","cve":"CVE-2017-9061","affectedVersions":"<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/044babea-8c04-4461-be53-80f2171da619/wordpress","title":"WordPress Core <= 2.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"044babea-8c04-4461-be53-80f2171da619"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/044babea-8c04-4461-be53-80f2171da619?source=api-prod","cve":"CVE-2007-5710","affectedVersions":"<=2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/04516d92-7f66-47b3-aeae-6752e03c1f95/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Scripting via CSS\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"04516d92-7f66-47b3-aeae-6752e03c1f95"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/04516d92-7f66-47b3-aeae-6752e03c1f95?source=api-prod","cve":"CVE-2014-9036","affectedVersions":"<=3.6.1|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/04e0b17e-efab-4b08-8c8a-93e3e4baffaa/wordpress","title":"WordPress Core < 5.2.4 - Type Confusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"04e0b17e-efab-4b08-8c8a-93e3e4baffaa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/04e0b17e-efab-4b08-8c8a-93e3e4baffaa?source=api-prod","cve":"CVE-2019-17675","affectedVersions":"<=3.6.1|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.13|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0534bc03-5d7d-47fe-9c07-c9a61af38df2/wordpress","title":"WordPress Core < 0.72 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2003-10-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"0534bc03-5d7d-47fe-9c07-c9a61af38df2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0534bc03-5d7d-47fe-9c07-c9a61af38df2?source=api-prod","cve":"CVE-2003-1598","affectedVersions":"<0.72","severity":"high"},{"advisoryId":"WPSECADV/WF/05873114-ceed-404c-9cc2-d85aa92ef6f3/wordpress","title":"Wordpress Core < 4.0.1 - Hash Collision\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"05873114-ceed-404c-9cc2-d85aa92ef6f3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05873114-ceed-404c-9cc2-d85aa92ef6f3?source=api-prod","cve":"CVE-2014-9037","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/06e4d7e3-c800-4b3d-9504-c69aa9a918fb/wordpress","title":"WordPress Core < 2.0.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"06e4d7e3-c800-4b3d-9504-c69aa9a918fb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06e4d7e3-c800-4b3d-9504-c69aa9a918fb?source=api-prod","cve":"CVE-2006-0986","affectedVersions":"<=2.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/0788659e-be5b-413d-b4fb-d60df07075e1/wordpress","title":"WordPress Core < 4.7.3 - Authenticated Cross-Site Scripting in Youtube URL Embeds\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"0788659e-be5b-413d-b4fb-d60df07075e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0788659e-be5b-413d-b4fb-d60df07075e1?source=api-prod","cve":"CVE-2017-6817","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0848d526-9530-40f3-8430-499d96b9a1b1/wordpress","title":"WordPress Core <= 2.2.1 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"0848d526-9530-40f3-8430-499d96b9a1b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0848d526-9530-40f3-8430-499d96b9a1b1?source=api-prod","cve":"CVE-2007-3544","affectedVersions":"<=2.2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/08f83fd1-5e8c-472f-819a-6078a5d2a56b/wordpress","title":"WordPress Core & WordPress MU < 2.8.1 - Username Enumeration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-07-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"08f83fd1-5e8c-472f-819a-6078a5d2a56b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/08f83fd1-5e8c-472f-819a-6078a5d2a56b?source=api-prod","cve":"CVE-2009-2336","affectedVersions":"<=2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/0987285b-4daf-4979-934b-7fa4a0ded99f/wordpress","title":"WordPress Core < 4.5.2 - Cross-Site Scripting via MediaElement.js\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-05-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"0987285b-4daf-4979-934b-7fa4a0ded99f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0987285b-4daf-4979-934b-7fa4a0ded99f?source=api-prod","cve":"CVE-2016-4567","affectedVersions":"<3.7|>=3.7,<=3.7.13|>=3.8,<=3.8.13|>=3.9,<=3.9.11|>=4.0,<=4.0.10|>=4.1,<=4.1.10|>=4.2,<=4.2.7|>=4.3,<=4.3.3|>=4.4,<=4.4.2|>=4.5,<=4.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/09935fd1-5a95-411a-a820-60888be7b059/wordpress","title":"WordPress Core < 3.8.2 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-04-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"09935fd1-5a95-411a-a820-60888be7b059"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09935fd1-5a95-411a-a820-60888be7b059?source=api-prod","affectedVersions":"=3.8.1","severity":"high"},{"advisoryId":"WPSECADV/WF/0a16651c-613b-462b-9d73-10a74892ecdc/wordpress","title":"WordPress Core < 2.5.1 - Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a16651c-613b-462b-9d73-10a74892ecdc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a16651c-613b-462b-9d73-10a74892ecdc?source=api-prod","cve":"CVE-2008-1930","affectedVersions":"<=2.5","severity":"high"},{"advisoryId":"WPSECADV/WF/0a6707ef-aab7-449c-8160-034bc188a998/wordpress","title":"WordPress Core < 6.4.3 - Authenticated(Administrator+) PHP File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a6707ef-aab7-449c-8160-034bc188a998"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a6707ef-aab7-449c-8160-034bc188a998?source=api-prod","cve":"CVE-2018-14028","affectedVersions":"<4.1|>=4.1,<=4.1.39|>=4.2,<=4.2.36|>=4.3,<=4.3.32|>=4.4,<=4.4.31|>=4.5,<=4.5.30|>=4.6,<=4.6.27|>=4.7,<=4.7.27|>=4.8,<=4.8.23|>=4.9,<=4.9.24|>=5.0,<=5.0.20|>=5.1,<=5.1.17|>=5.2,<=5.2.19|>=5.3,<=5.3.16|>=5.4,<=5.4.14|>=5.5,<=5.5.13|>=5.6,<=5.6.12|>=5.7,<=5.7.10|>=5.8,<=5.8.8|>=5.9,<=5.9.8|>=6.0,<=6.0.6|>=6.1,<=6.1.4|>=6.2,<=6.2.3|>=6.3,<=6.3.2|>=6.4,<=6.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ac7a936-70fa-41ce-89f7-ec6a77964c96/wordpress","title":"WordPress Core <= 3.3.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ac7a936-70fa-41ce-89f7-ec6a77964c96"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ac7a936-70fa-41ce-89f7-ec6a77964c96?source=api-prod","cve":"CVE-2012-6635","affectedVersions":"<3.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0b4ec57a-c52a-40c1-897a-db67efbd7177/wordpress","title":"WordPress Core < 4.9.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b4ec57a-c52a-40c1-897a-db67efbd7177"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b4ec57a-c52a-40c1-897a-db67efbd7177?source=api-prod","cve":"CVE-2017-17094","affectedVersions":"<3.7|=4.9|>=3.7,<=3.7.23|>=3.8,<=3.8.23|>=3.9,<=3.9.21|>=4.0,<=4.0.20|>=4.1,<=4.1.20|>=4.2,<=4.2.17|>=4.3,<=4.3.13|>=4.4,<=4.4.12|>=4.5,<=4.5.11|>=4.6,<=4.6.8|>=4.7,<=4.7.7|>=4.8,<=4.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ba551a4-109d-4e28-b497-539264095134/wordpress","title":"WordPress Core < 5.8.2 - ca-bundle.crt contains expired certificate DST Root CA X3\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ba551a4-109d-4e28-b497-539264095134"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ba551a4-109d-4e28-b497-539264095134?source=api-prod","affectedVersions":"<5.2|>=5.2,<=5.2.12|>=5.3,<=5.3.9|>=5.4,<=5.4.7|>=5.5,<=5.5.6|>=5.6,<=5.6.5|>=5.7,<=5.7.3|>=5.8,<=5.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0da1cc3b-5d6b-4ca0-9d8a-31c63ab5b9c9/wordpress","title":"WordPress Core < 6.2.1 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"0da1cc3b-5d6b-4ca0-9d8a-31c63ab5b9c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0da1cc3b-5d6b-4ca0-9d8a-31c63ab5b9c9?source=api-prod","affectedVersions":"<4.1|>=4.1,<4.1.38|>=4.2,<4.2.35|>=4.3,<4.3.31|>=4.4,<4.4.30|>=4.5,<4.5.29|>=4.6,<4.6.26|>=4.7,<4.7.26|>=4.8,<4.8.22|>=4.9,<4.9.23|>=5.0,<5.0.19|>=5.1,<5.1.16|>=5.2,<5.2.18|>=5.3,<5.3.15|>=5.4,<5.4.13|>=5.5,<5.5.12|>=5.6,<5.6.11|>=5.7,<5.7.9|>=5.8,<5.8.7|>=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ddb582a-e966-4c0b-a743-29d8943f846b/wordpress","title":"WordPress Core 5.9 - 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ddb582a-e966-4c0b-a743-29d8943f846b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ddb582a-e966-4c0b-a743-29d8943f846b?source=api-prod","affectedVersions":">=5.9,<5.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ed8ee65-d910-42a4-b6de-3229346dc59e/wordpress","title":"WordPress Core < 4.7.3 - Bypass URL Validation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ed8ee65-d910-42a4-b6de-3229346dc59e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ed8ee65-d910-42a4-b6de-3229346dc59e?source=api-prod","cve":"CVE-2017-6815","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0eff89a8-07b7-49fc-b68d-9efd87fcac3c/wordpress","title":"WordPress Core < 3.0.3 - Access Control Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-12-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"0eff89a8-07b7-49fc-b68d-9efd87fcac3c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0eff89a8-07b7-49fc-b68d-9efd87fcac3c?source=api-prod","cve":"CVE-2010-5106","affectedVersions":"<=3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0f19194c-dbe8-455d-bee7-2f7d4ce9224f/wordpress","title":"WordPress Core < 4.6.1 - Authenticated Directory Traversal to Arbitrary File Access\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"0f19194c-dbe8-455d-bee7-2f7d4ce9224f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0f19194c-dbe8-455d-bee7-2f7d4ce9224f?source=api-prod","cve":"CVE-2016-7169","affectedVersions":"<3.7|=4.6|>=3.7,<=3.7.15|>=3.8,<=3.8.15|>=3.9,<=3.9.13|>=4.0,<=4.0.12|>=4.1,<=4.1.12|>=4.2,<=4.2.9|>=4.3,<=4.3.5|>=4.4,<=4.4.4|>=4.5,<=4.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0fbb1044-dd42-469d-9299-135ef2e609e0/wordpress","title":"WordPress Core < 4.5 - Cross-Site Request Forgery  via wp_ajax_wp_compression_test\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"0fbb1044-dd42-469d-9299-135ef2e609e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fbb1044-dd42-469d-9299-135ef2e609e0?source=api-prod","cve":"CVE-2016-6635","affectedVersions":"<4.5","severity":"high"},{"advisoryId":"WPSECADV/WF/0fcdfba2-aa19-4d0c-8880-5ee2c0680555/wordpress","title":"WordPress Core < 6.0.3 - Shared User Instance Weakness\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"0fcdfba2-aa19-4d0c-8880-5ee2c0680555"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fcdfba2-aa19-4d0c-8880-5ee2c0680555?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"low"},{"advisoryId":"WPSECADV/WF/10a811f3-0c5b-4e06-a9bb-338d36d0b5eb/wordpress","title":"WordPress Core < 4.5.3 - Revision History Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"10a811f3-0c5b-4e06-a9bb-338d36d0b5eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10a811f3-0c5b-4e06-a9bb-338d36d0b5eb?source=api-prod","cve":"CVE-2016-5835","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/112ed4f2-fe91-4d83-a3f7-eaf889870af4/wordpress","title":"WordPress Core - All known versions - Unauthenticated Blind Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"112ed4f2-fe91-4d83-a3f7-eaf889870af4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/112ed4f2-fe91-4d83-a3f7-eaf889870af4?source=api-prod","cve":"CVE-2022-3590","affectedVersions":">=4.1.30,<=6.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/11d53df8-f7b3-467c-8b3a-515974f1ea69/wordpress","title":"WordPress Core < 1.5.1.3 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"11d53df8-f7b3-467c-8b3a-515974f1ea69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/11d53df8-f7b3-467c-8b3a-515974f1ea69?source=api-prod","cve":"CVE-2005-2108","affectedVersions":"<1.5.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/12072b77-fe68-4304-8230-7c137a8d05ac/wordpress","title":"WordPress Core < 3.0.2 - Spam Protection Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"12072b77-fe68-4304-8230-7c137a8d05ac"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12072b77-fe68-4304-8230-7c137a8d05ac?source=api-prod","cve":"CVE-2010-5293","affectedVersions":"<3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/120fa415-81e3-4084-8943-df83cde334c5/wordpress","title":"WordPress Core < 2.8.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-08-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"120fa415-81e3-4084-8943-df83cde334c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/120fa415-81e3-4084-8943-df83cde334c5?source=api-prod","cve":"CVE-2009-2854","affectedVersions":"<=2.8.2","severity":"high"},{"advisoryId":"WPSECADV/WF/1351cd6b-ae22-4363-b36b-f892c504f5d9/wordpress","title":"WordPress Core < 4.4.2 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"1351cd6b-ae22-4363-b36b-f892c504f5d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1351cd6b-ae22-4363-b36b-f892c504f5d9?source=api-prod","cve":"CVE-2016-2222","affectedVersions":"<3.7|>=3.7,<=3.7.12|>=3.8,<=3.8.12|>=3.9,<=3.9.10|>=4.0,<=4.0.9|>=4.1,<=4.1.9|>=4.2,<=4.2.6|>=4.3,<=4.3.2|>=4.4,<=4.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/14689386-fca5-48a6-9494-4a79b920d5f8/wordpress","title":"WordPress Core < 3.4.2 - Missing Authorization Checks on create_post\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"14689386-fca5-48a6-9494-4a79b920d5f8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/14689386-fca5-48a6-9494-4a79b920d5f8?source=api-prod","cve":"CVE-2012-4421","affectedVersions":"<3.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/149eb7ef-be96-442e-925e-01d8d76e3a1a/wordpress","title":"WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"149eb7ef-be96-442e-925e-01d8d76e3a1a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/149eb7ef-be96-442e-925e-01d8d76e3a1a?source=api-prod","cve":"CVE-2019-16781","affectedVersions":"<3.7|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/14b7fd1e-6e2d-49bb-8492-b072afeebd88/wordpress","title":"WordPress Core < 4.7.1 - Weak Multi-Site Activation Key for User and Site Signup\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"14b7fd1e-6e2d-49bb-8492-b072afeebd88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/14b7fd1e-6e2d-49bb-8492-b072afeebd88?source=api-prod","cve":"CVE-2017-5493","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/159b5565-f4d8-4514-9397-20b6a0890475/wordpress","title":"WordPress Core < 2.0.4 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"159b5565-f4d8-4514-9397-20b6a0890475"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/159b5565-f4d8-4514-9397-20b6a0890475?source=api-prod","cve":"CVE-2006-3390","affectedVersions":"<=2.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/16102d4c-86d6-471e-b787-54e4bc14b5a2/wordpress","title":"WordPress Core < 4.5.3 - Cross-Site Scripting via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"16102d4c-86d6-471e-b787-54e4bc14b5a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16102d4c-86d6-471e-b787-54e4bc14b5a2?source=api-prod","cve":"CVE-2016-5832","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/17646179-47ad-4846-a581-3e713df43c32/wordpress","title":"WordPress Core < 4.5.3 - Denial of Service via oEmbed Protocol\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"17646179-47ad-4846-a581-3e713df43c32"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/17646179-47ad-4846-a581-3e713df43c32?source=api-prod","cve":"CVE-2016-5836","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/1984abee-a74c-48d7-874f-c4421243e5e5/wordpress","title":"WordPress Core <= 7.1 - Unauthenticated Stored Cross-Site Scripting via wpautop() Blockquote Handling\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"1984abee-a74c-48d7-874f-c4421243e5e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1984abee-a74c-48d7-874f-c4421243e5e5?source=api-prod","cve":"CVE-2026-93485","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"high"},{"advisoryId":"WPSECADV/WF/19c88a9a-1f97-4a46-b759-9ca030d577e7/wordpress","title":"WordPress Core < 6.0.3 - Open Redirect\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"19c88a9a-1f97-4a46-b759-9ca030d577e7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/19c88a9a-1f97-4a46-b759-9ca030d577e7?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/1ab4dc20-ce50-4ad0-aff4-9fc529d1911f/wordpress","title":"WordPress Core <= 3.3.1 - Same Origin Policy Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ab4dc20-ce50-4ad0-aff4-9fc529d1911f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ab4dc20-ce50-4ad0-aff4-9fc529d1911f?source=api-prod","cve":"CVE-2012-2401","affectedVersions":"<3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/1ac39498-3171-4d91-a911-381c8ed751dc/wordpress","title":"WordPress Core <= 3.9.1 - XML External Entity (XXE) Weakness\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ac39498-3171-4d91-a911-381c8ed751dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ac39498-3171-4d91-a911-381c8ed751dc?source=api-prod","cve":"CVE-2014-2053","affectedVersions":"<3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/1ba55302-b38f-4932-bbba-cdd517380ad7/wordpress","title":"WordPress Core 6.9 -  7.0.1 - Remote Code Execution via REST API Batch Request Route Confusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ba55302-b38f-4932-bbba-cdd517380ad7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ba55302-b38f-4932-bbba-cdd517380ad7?source=api-prod","cve":"CVE-2026-63030","affectedVersions":">=6.9,<6.9.5|>=7.0,<7.0.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/1bc0aa64-57a6-44ef-974a-70991cc3820f/wordpress","title":"WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"1bc0aa64-57a6-44ef-974a-70991cc3820f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1bc0aa64-57a6-44ef-974a-70991cc3820f?source=api-prod","cve":"CVE-2019-20041","affectedVersions":"<3.7|=5.3|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d2f973a-1fb3-4c75-8c33-6d1fadf9c906/wordpress","title":"WordPress Core <= 1.5 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d2f973a-1fb3-4c75-8c33-6d1fadf9c906"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d2f973a-1fb3-4c75-8c33-6d1fadf9c906?source=api-prod","cve":"CVE-2005-1102","affectedVersions":"<=1.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d305711-7a84-46c2-b333-02f5a745d76c/wordpress","title":"WordPress Core < 2.0.4 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d305711-7a84-46c2-b333-02f5a745d76c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d305711-7a84-46c2-b333-02f5a745d76c?source=api-prod","cve":"CVE-2007-5106","affectedVersions":"<=2.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d5987cd-1304-487c-8d1c-cab0510fbb84/wordpress","title":"WordPress Core < 5.0 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d5987cd-1304-487c-8d1c-cab0510fbb84"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d5987cd-1304-487c-8d1c-cab0510fbb84?source=api-prod","cve":"CVE-2018-6389","affectedVersions":"<5.0","severity":"high"},{"advisoryId":"WPSECADV/WF/1f2845a5-7572-4533-8949-08bee99fca20/wordpress","title":"WordPress < 2.0.6 -  Username Enumeration via Error Messages\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"1f2845a5-7572-4533-8949-08bee99fca20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f2845a5-7572-4533-8949-08bee99fca20?source=api-prod","cve":"CVE-2007-0109","affectedVersions":"<=2.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/1f846ffa-0dfa-4549-845a-7884a390462a/wordpress","title":"WordPress Core < 5.0.1 - PHAR Unserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"1f846ffa-0dfa-4549-845a-7884a390462a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f846ffa-0dfa-4549-845a-7884a390462a?source=api-prod","cve":"CVE-2018-1000773","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/1fc3f65e-5fbe-403b-b7cd-dde16a7e5778/wordpress","title":"WordPress Core < 6.3.2 – Authenticated (Subscriber+) Arbitrary Shortcode Execution via parse-media-shortcode\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"1fc3f65e-5fbe-403b-b7cd-dde16a7e5778"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1fc3f65e-5fbe-403b-b7cd-dde16a7e5778?source=api-prod","affectedVersions":"<=4.1.38|>=4.2,<=4.2.35|>=4.3,<=4.3.31|>=4.4,<=4.4.30|>=4.5,<=4.5.29|>=4.6,<=4.6.26|>=4.7,<=4.7.26|>=4.8,<=4.8.22|>=4.9,<=4.9.23|>=5.0,<=5.0.19|>=5.1,<=5.1.16|>=5.2,<=5.2.18|>=5.3,<=5.3.15|>=5.4,<=5.4.13|>=5.5,<=5.5.12|>=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2144ba9f-cb0a-4b54-a23f-3ecb2548a490/wordpress","title":"WordPress Core < 5.2.4 - Cache Poisoning\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"2144ba9f-cb0a-4b54-a23f-3ecb2548a490"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2144ba9f-cb0a-4b54-a23f-3ecb2548a490?source=api-prod","cve":"CVE-2019-17673","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.14|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/221872e2-7929-4fba-8a57-7d9fd73a76db/wordpress","title":"WordPress Core < 3.0.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"221872e2-7929-4fba-8a57-7d9fd73a76db"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/221872e2-7929-4fba-8a57-7d9fd73a76db?source=api-prod","cve":"CVE-2010-5297","affectedVersions":"<3.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/22b3ee70-7ba6-4f8a-add4-3c7f4765b3d1/wordpress","title":"WordPress Core < 4.2.4 - Stored Cross-Site Scripting via accessibility-helper Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"22b3ee70-7ba6-4f8a-add4-3c7f4765b3d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22b3ee70-7ba6-4f8a-add4-3c7f4765b3d1?source=api-prod","cve":"CVE-2015-5733","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/22bf2719-335d-4331-8c59-648f6f903ffa/wordpress","title":"WordPress Core <= 3.0.4 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-02-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"22bf2719-335d-4331-8c59-648f6f903ffa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22bf2719-335d-4331-8c59-648f6f903ffa?source=api-prod","cve":"CVE-2011-0700","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/23b2fc40-d8e3-4b84-ab8d-ff82a6f21842/wordpress","title":"WordPress Core < 4.5 - Cross-Site Scripting via Network Settings Page\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"23b2fc40-d8e3-4b84-ab8d-ff82a6f21842"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23b2fc40-d8e3-4b84-ab8d-ff82a6f21842?source=api-prod","cve":"CVE-2016-6634","affectedVersions":"<4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/2481f37b-a220-435d-9b43-6e7c5f42034f/wordpress","title":"WordPress Core < 4.7.2 -  Arbitrary Page Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"2481f37b-a220-435d-9b43-6e7c5f42034f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2481f37b-a220-435d-9b43-6e7c5f42034f?source=api-prod","cve":"CVE-2017-1001000","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"high"},{"advisoryId":"WPSECADV/WF/24b89ed2-9dfb-4068-8459-cb2e708c7778/wordpress","title":"WordPress Core < 4.3.1 - Authenticated Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"24b89ed2-9dfb-4068-8459-cb2e708c7778"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/24b89ed2-9dfb-4068-8459-cb2e708c7778?source=api-prod","cve":"CVE-2015-7989","affectedVersions":"<3.7|=4.3|>=3.7,<=3.7.10|>=3.8,<=3.8.10|>=3.9,<=3.9.8|>=4.0,<=4.0.7|>=4.1,<=4.1.7|>=4.2,<=4.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/254b5dd2-c3d9-45d9-8328-6cc8ef29c9db/wordpress","title":"Wordpress Core < 5.5 - Unauthorized Password Reset via Interception\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"254b5dd2-c3d9-45d9-8328-6cc8ef29c9db"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/254b5dd2-c3d9-45d9-8328-6cc8ef29c9db?source=api-prod","cve":"CVE-2017-8295","affectedVersions":"<5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/26753b92-3ec5-4b65-8fc7-2d6488f12974/wordpress","title":"WordPress Core < 4.5.2 - Cross-Site Scripting via plupload.flash.swf\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-05-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"26753b92-3ec5-4b65-8fc7-2d6488f12974"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26753b92-3ec5-4b65-8fc7-2d6488f12974?source=api-prod","cve":"CVE-2016-4566","affectedVersions":"<3.7|>=3.7,<=3.7.13|>=3.8,<=3.8.13|>=3.9,<=3.9.11|>=4.0,<=4.0.10|>=4.1,<=4.1.10|>=4.2,<=4.2.7|>=4.3,<=4.3.3|>=4.4,<=4.4.2|>=4.5,<=4.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/26daa367-ef73-4ae0-843e-6d5366cc4ecd/wordpress","title":"WordPress Core <= 2.2.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"26daa367-ef73-4ae0-843e-6d5366cc4ecd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26daa367-ef73-4ae0-843e-6d5366cc4ecd?source=api-prod","cve":"CVE-2007-4893","affectedVersions":"<=2.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2761c5e9-7c4c-4257-9b55-587c02d07153/wordpress","title":"WordPress Core < 3.0.5 - Improper Authorization to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2761c5e9-7c4c-4257-9b55-587c02d07153"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2761c5e9-7c4c-4257-9b55-587c02d07153?source=api-prod","cve":"CVE-2011-0701","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/278da117-fe04-45d6-86d4-e71fe6536032/wordpress","title":"WordPress Core <= 7.0.2 - Unauthenticated Reflected Cross-Site Scripting via log Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"278da117-fe04-45d6-86d4-e71fe6536032"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/278da117-fe04-45d6-86d4-e71fe6536032?source=api-prod","cve":"CVE-2026-64638","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2822114a-ffc2-43dd-bbf1-e4504aababfb/wordpress","title":"WordPress Core < 2.2.2 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2822114a-ffc2-43dd-bbf1-e4504aababfb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2822114a-ffc2-43dd-bbf1-e4504aababfb?source=api-prod","cve":"CVE-2007-3639","affectedVersions":"<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/28747e2e-9012-470c-a891-0fe97fd1ddba/wordpress","title":"WordPress Core <= 7.1 - Missing Authorization to customize_changeset Write via XML-RPC (Multisite/Custom Role edit_css Bypass)\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"28747e2e-9012-470c-a891-0fe97fd1ddba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28747e2e-9012-470c-a891-0fe97fd1ddba?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/28bcaf28-bb75-4d55-9e9b-afa760fc793e/wordpress","title":"WordPress Core < 2.7 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-12-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"28bcaf28-bb75-4d55-9e9b-afa760fc793e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28bcaf28-bb75-4d55-9e9b-afa760fc793e?source=api-prod","cve":"CVE-2008-6767","affectedVersions":"<=2.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/292be50c-6eab-4462-b46c-c7763e8aa223/wordpress","title":"WordPress Core < 2.1.3 -  Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"292be50c-6eab-4462-b46c-c7763e8aa223"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/292be50c-6eab-4462-b46c-c7763e8aa223?source=api-prod","cve":"CVE-2007-1893","affectedVersions":"<=2.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/29778d95-4859-4383-91c7-15e7907b825c/wordpress","title":"WordPress Core < 5.0.1 - PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"29778d95-4859-4383-91c7-15e7907b825c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/29778d95-4859-4383-91c7-15e7907b825c?source=api-prod","cve":"CVE-2018-20148","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/2a225ccb-a7dc-4437-bd97-b309d6ae6a47/wordpress","title":"WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a225ccb-a7dc-4437-bd97-b309d6ae6a47"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a225ccb-a7dc-4437-bd97-b309d6ae6a47?source=api-prod","cve":"CVE-2024-31111","affectedVersions":">=5.9,<=5.9.9|>=6.0,<=6.0.8|>=6.1,<=6.1.6|>=6.2,<=6.2.5|>=6.3,<=6.3.4|>=6.4,<=6.4.4|>=6.5,<=6.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a521be2-b3ce-47de-8a28-aeff94942d85/wordpress","title":"WordPress Core <= 3.0.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-12-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a521be2-b3ce-47de-8a28-aeff94942d85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a521be2-b3ce-47de-8a28-aeff94942d85?source=api-prod","cve":"CVE-2010-4536","affectedVersions":"<=3.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ab6e751-dc23-442f-b22e-ee41fd6651f6/wordpress","title":"WordPress Core < 2.0.4 - Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-07-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ab6e751-dc23-442f-b22e-ee41fd6651f6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ab6e751-dc23-442f-b22e-ee41fd6651f6?source=api-prod","cve":"CVE-2006-4028","affectedVersions":"<2.0.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/2ad674f7-aff6-432d-9c4c-95aebf8fcf6b/wordpress","title":"WordPress Core < 2.3.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ad674f7-aff6-432d-9c4c-95aebf8fcf6b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ad674f7-aff6-432d-9c4c-95aebf8fcf6b?source=api-prod","cve":"CVE-2007-6318","affectedVersions":"<=2.3.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/2b300f55-f1ee-4345-adc2-32cd3b081a30/wordpress","title":"WordPress Core < 4.7.1 - Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b300f55-f1ee-4345-adc2-32cd3b081a30"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b300f55-f1ee-4345-adc2-32cd3b081a30?source=api-prod","cve":"CVE-2017-5487","affectedVersions":"<3.7|=4.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2be089a0-d4d5-4d64-8fb7-8c42286ebbcd/wordpress","title":"WordPress Core < 5.2.3 - Cross-Site Scripting via Media Uploads\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"2be089a0-d4d5-4d64-8fb7-8c42286ebbcd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2be089a0-d4d5-4d64-8fb7-8c42286ebbcd?source=api-prod","cve":"CVE-2019-16217","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d0529df-70be-4559-a760-5537e0fd4d1e/wordpress","title":"WordPress Core < 3.1.3 - Media Related Security Issue\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"2d0529df-70be-4559-a760-5537e0fd4d1e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d0529df-70be-4559-a760-5537e0fd4d1e?source=api-prod","cve":"CVE-2011-3122","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d853bd5-4caa-4b90-a9a6-929fb18b9337/wordpress","title":"WordPress Core < 4.6.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2d853bd5-4caa-4b90-a9a6-929fb18b9337"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d853bd5-4caa-4b90-a9a6-929fb18b9337?source=api-prod","cve":"CVE-2016-7168","affectedVersions":"<3.7|=4.6|>=3.7,<=3.7.15|>=3.8,<=3.8.15|>=3.9,<=3.9.13|>=4.0,<=4.0.12|>=4.1,<=4.1.12|>=4.2,<=4.2.9|>=4.3,<=4.3.5|>=4.4,<=4.4.4|>=4.5,<=4.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/2dccdaa8-5095-42c4-9ca8-90fb444c0ae4/wordpress","title":"WordPress Core < 4.8.2 - Stored Cross-Site Scripting via Plugin Names\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"2dccdaa8-5095-42c4-9ca8-90fb444c0ae4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2dccdaa8-5095-42c4-9ca8-90fb444c0ae4?source=api-prod","cve":"CVE-2017-14721","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2e27cfff-6763-4e54-af5d-0f4cf23e72f7/wordpress","title":"WordPress Core < 4.0.1 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"2e27cfff-6763-4e54-af5d-0f4cf23e72f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2e27cfff-6763-4e54-af5d-0f4cf23e72f7?source=api-prod","cve":"CVE-2014-9038","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/2f0d4f48-a315-4308-a5b6-7d3f045b292f/wordpress","title":"WordPress Core < 6.0.3 - Information Disclosure (Multi-Part Email Leak)\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"2f0d4f48-a315-4308-a5b6-7d3f045b292f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f0d4f48-a315-4308-a5b6-7d3f045b292f?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"low"},{"advisoryId":"WPSECADV/WF/300c6ea4-4eed-4be5-abfd-ec4ad9b741d3/wordpress","title":"WordPress Core < 6.0.2 - Stored Cross-Site Scripting via Plugin Deactivation and Deletion Errors\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"300c6ea4-4eed-4be5-abfd-ec4ad9b741d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/300c6ea4-4eed-4be5-abfd-ec4ad9b741d3?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.38|>=3.8,<=3.8.38|>=3.9,<=3.9.36|>=4.0,<=4.0.35|>=4.1,<=4.1.35|>=4.2,<=4.2.32|>=4.3,<=4.3.28|>=4.4,<=4.4.27|>=4.5,<=4.5.26|>=4.6,<=4.6.23|>=4.7,<=4.7.23|>=4.8,<=4.8.19|>=4.9,<=4.9.20|>=5.0,<=5.0.16|>=5.1,<=5.1.13|>=5.2,<=5.2.15|>=5.3,<=5.3.12|>=5.4,<=5.4.10|>=5.5,<=5.5.9|>=5.6,<=5.6.8|>=5.7,<=5.7.6|>=5.8,<=5.8.4|>=5.9,<=5.9.3|>=6.0,<=6.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/303380f7-d043-48d5-8edb-9d45f13d0d82/wordpress","title":"WordPress Core <= 3.3.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"303380f7-d043-48d5-8edb-9d45f13d0d82"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/303380f7-d043-48d5-8edb-9d45f13d0d82?source=api-prod","cve":"CVE-2012-6634","affectedVersions":"<3.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/305ffc3b-5f1c-42fb-9fd5-0dfcbe1c661b/wordpress","title":"WordPress Core < 4.7.5 - Cross-Site Request Forgery Filesystem Credential Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"305ffc3b-5f1c-42fb-9fd5-0dfcbe1c661b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/305ffc3b-5f1c-42fb-9fd5-0dfcbe1c661b?source=api-prod","cve":"CVE-2017-9064","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"high"},{"advisoryId":"WPSECADV/WF/3379dde1-d1fb-4ec8-b834-de00fb6a38f2/wordpress","title":"WordPress Core < 5.4.1 - Authenticated (Author+) Cross-Site Scripting via File Uploads\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"3379dde1-d1fb-4ec8-b834-de00fb6a38f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3379dde1-d1fb-4ec8-b834-de00fb6a38f2?source=api-prod","cve":"CVE-2020-11026","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/33c666af-b51f-4d9e-9c32-ca0a124cd4b7/wordpress","title":"WordPress Core < 2.5 -  Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-12-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"33c666af-b51f-4d9e-9c32-ca0a124cd4b7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33c666af-b51f-4d9e-9c32-ca0a124cd4b7?source=api-prod","cve":"CVE-2008-0191","affectedVersions":"<=2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/33e8a48e-0ddb-4278-a023-818aebe92dab/wordpress","title":"WordPress Core < 2.6.1 - Cryptographic Weakness\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-08-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"33e8a48e-0ddb-4278-a023-818aebe92dab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33e8a48e-0ddb-4278-a023-818aebe92dab?source=api-prod","cve":"CVE-2008-3747","affectedVersions":"<=2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/342370a0-9364-40cd-9556-e53312e67548/wordpress","title":"WordPress Core < 3.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"342370a0-9364-40cd-9556-e53312e67548"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/342370a0-9364-40cd-9556-e53312e67548?source=api-prod","cve":"CVE-2012-4422","affectedVersions":"<=3.4.1","severity":"low"},{"advisoryId":"WPSECADV/WF/354a5b89-8845-4486-8cc5-7339a6a107c0/wordpress","title":"WordPress Core < 2.6.2 - Arbitrary User Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"354a5b89-8845-4486-8cc5-7339a6a107c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/354a5b89-8845-4486-8cc5-7339a6a107c0?source=api-prod","cve":"CVE-2008-4106","affectedVersions":"<=2.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/35ac717c-e299-4a56-bead-cb1d050da75c/wordpress","title":"WordPress Core <= 1.5.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"35ac717c-e299-4a56-bead-cb1d050da75c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/35ac717c-e299-4a56-bead-cb1d050da75c?source=api-prod","cve":"CVE-2005-2107","affectedVersions":"<=1.5.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/36e15052-0e04-4b72-b573-b736109517b8/wordpress","title":"WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"36e15052-0e04-4b72-b573-b736109517b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/36e15052-0e04-4b72-b573-b736109517b8?source=api-prod","cve":"CVE-2020-28036","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/371deb9d-707f-47e4-96d7-1a287926b536/wordpress","title":"WordPress Core < 5.4.2 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"371deb9d-707f-47e4-96d7-1a287926b536"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/371deb9d-707f-47e4-96d7-1a287926b536?source=api-prod","cve":"CVE-2020-4047","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/372632cb-8dfd-4d74-a765-c8fb9d0f1b78/wordpress","title":"WordPress Core <= 2.3.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"372632cb-8dfd-4d74-a765-c8fb9d0f1b78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/372632cb-8dfd-4d74-a765-c8fb9d0f1b78?source=api-prod","cve":"CVE-2008-1304","affectedVersions":"<=2.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/37f7f9ef-d57a-41e9-bd2c-2aa04a82b6c4/wordpress","title":"WordPress Core <= 2.0.5 - Cross-Site Request Forgery to Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"37f7f9ef-d57a-41e9-bd2c-2aa04a82b6c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/37f7f9ef-d57a-41e9-bd2c-2aa04a82b6c4?source=api-prod","cve":"CVE-2007-0106","affectedVersions":"<=2.0.5","severity":"high"},{"advisoryId":"WPSECADV/WF/3802cbf7-6725-4f93-a178-2af02bb022a1/wordpress","title":"WordPress Core < 5.2.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"3802cbf7-6725-4f93-a178-2af02bb022a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3802cbf7-6725-4f93-a178-2af02bb022a1?source=api-prod","cve":"CVE-2019-16221","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/38979e27-2023-4f84-a708-1732b4117066/wordpress","title":"WordPress Core < 6.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Customizer\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"38979e27-2023-4f84-a708-1732b4117066"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38979e27-2023-4f84-a708-1732b4117066?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/38b27ee7-0e92-47ad-89f8-1a3c8d5c9442/wordpress","title":"WordPress Core <= 2.3.3 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"38b27ee7-0e92-47ad-89f8-1a3c8d5c9442"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38b27ee7-0e92-47ad-89f8-1a3c8d5c9442?source=api-prod","cve":"CVE-2008-4769","affectedVersions":"<=2.3.3|=2.5","severity":"high"},{"advisoryId":"WPSECADV/WF/38b63167-e1a6-4279-97cf-900df0651f20/wordpress","title":"WordPress Core 4.7.0 - 6.3.1 - Sensitive Information Exposure via User Search REST Endpoint\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"38b63167-e1a6-4279-97cf-900df0651f20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38b63167-e1a6-4279-97cf-900df0651f20?source=api-prod","cve":"CVE-2023-5561","affectedVersions":">=4.7,<=4.7.26|>=4.8,<=4.8.22|>=4.9,<=4.9.23|>=5.0,<=5.0.19|>=5.1,<=5.1.16|>=5.2,<=5.2.18|>=5.3,<=5.3.15|>=5.4,<=5.4.13|>=5.5,<=5.5.12|>=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3a71b8da-73dd-488e-b553-77116731f13f/wordpress","title":"WordPress Core < 4.3.1 - Authorization Bypass to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"3a71b8da-73dd-488e-b553-77116731f13f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3a71b8da-73dd-488e-b553-77116731f13f?source=api-prod","cve":"CVE-2015-5715","affectedVersions":"<3.7|=4.3|>=3.7,<=3.7.10|>=3.8,<=3.8.10|>=3.9,<=3.9.8|>=4.0,<=4.0.7|>=4.1,<=4.1.7|>=4.2,<=4.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/3bdb73f9-d091-4de7-975c-10090ee1f749/wordpress","title":"WordPress Core < 3.9.2 - Cross-Site Request Forgery Protection Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"3bdb73f9-d091-4de7-975c-10090ee1f749"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3bdb73f9-d091-4de7-975c-10090ee1f749?source=api-prod","cve":"CVE-2014-5204","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"high"},{"advisoryId":"WPSECADV/WF/3cf00aef-427b-4256-9cbd-83c8e5059ecf/wordpress","title":"WordPress Core < 4.0 - Missing Session Cookie Expiration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"3cf00aef-427b-4256-9cbd-83c8e5059ecf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3cf00aef-427b-4256-9cbd-83c8e5059ecf?source=api-prod","cve":"CVE-2012-5868","affectedVersions":"<4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d3b090a-71a3-4430-871d-f19ee1033e01/wordpress","title":"WordPress Core < 1.5.1 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d3b090a-71a3-4430-871d-f19ee1033e01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d3b090a-71a3-4430-871d-f19ee1033e01?source=api-prod","cve":"CVE-2005-1688","affectedVersions":"<1.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d59700b-3540-464c-bd27-23bb71f9b082/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom Header Image Data\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d59700b-3540-464c-bd27-23bb71f9b082"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d59700b-3540-464c-bd27-23bb71f9b082?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d9f4fbe-6da6-4620-a071-00b7a462de45/wordpress","title":"WordPress Core < 4.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d9f4fbe-6da6-4620-a071-00b7a462de45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d9f4fbe-6da6-4620-a071-00b7a462de45?source=api-prod","cve":"CVE-2015-3438","affectedVersions":"<3.7|>=3.7,<=3.7.5|>=3.8,<=3.8.5|>=3.9,<=3.9.3|>=4.0,<=4.0.1|>=4.1,<=4.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/3e0b4faf-35cd-4f59-ae77-fb4f4819ad32/wordpress","title":"WordPress <= 6.9.1 - Missing Authorization to Authenticated (Author+) Sensitive Information Disclosure via query-attachments AJAX Endpoint\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e0b4faf-35cd-4f59-ae77-fb4f4819ad32"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e0b4faf-35cd-4f59-ae77-fb4f4819ad32?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3f389cbf-a327-46a1-9fb7-ed393212033a/wordpress","title":"WordPress Core 2.9.2 and 3.0.4 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-01-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f389cbf-a327-46a1-9fb7-ed393212033a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f389cbf-a327-46a1-9fb7-ed393212033a?source=api-prod","cve":"CVE-2011-3818","affectedVersions":"=2.9.2|=3.0.4","severity":"high"},{"advisoryId":"WPSECADV/WF/3f6b435b-d8b4-434b-8cac-cc3adbc437eb/wordpress","title":"WordPress Core <= 7.0.3 - Authenticated (Author+) Remote Code Execution via Malicious File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f6b435b-d8b4-434b-8cac-cc3adbc437eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f6b435b-d8b4-434b-8cac-cc3adbc437eb?source=api-prod","cve":"CVE-2026-65640","affectedVersions":">=4.7.0,<=4.7.34|>=4.8.0,<=4.8.29|>=4.9.0,<=4.9.30|>=5.0.0,<=5.0.26|>=5.1.0,<=5.1.23|>=5.2.0,<=5.2.25|>=5.3.0,<=5.3.22|>=5.4.0,<=5.4.20|>=5.5.0,<=5.5.19|>=5.6.0,<=5.6.18|>=5.7.0,<=5.7.16|>=5.8.0,<=5.8.14|>=5.9.0,<=5.9.15|>=6.0.0,<=6.0.13|>=6.1.0,<=6.1.11|>=6.2.0,<=6.2.10|>=6.3.0,<=6.3.9|>=6.4.0,<=6.4.9|>=6.5.0,<=6.5.9|>=6.6.0,<=6.6.6|>=6.7.0,<=6.7.6|>=6.8.0,<=6.8.7|>=6.9.0,<=6.9.6|>=7.0.0,<=7.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/40502842-8505-41fb-9d3a-a5d567040921/wordpress","title":"WordPress Core < 4.7.3 - Cross-Site Scripting via Media Metadata\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"40502842-8505-41fb-9d3a-a5d567040921"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40502842-8505-41fb-9d3a-a5d567040921?source=api-prod","cve":"CVE-2017-6814","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4290ee15-0362-48c5-a570-4a1b6719a948/wordpress","title":"WordPress Core < 5.5.2 - Reflected Cross-Site Scripting via Global Variables\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"4290ee15-0362-48c5-a570-4a1b6719a948"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4290ee15-0362-48c5-a570-4a1b6719a948?source=api-prod","cve":"CVE-2020-28034","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/42dd1eeb-10b4-48f1-b392-dfa3a9d4b9c4/wordpress","title":"WordPress Core < 5.2.3 - Stored Cross-Site Scripting via Comments via URLs\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"42dd1eeb-10b4-48f1-b392-dfa3a9d4b9c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/42dd1eeb-10b4-48f1-b392-dfa3a9d4b9c4?source=api-prod","cve":"CVE-2019-16222","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/43039c47-a34f-4020-9009-473e93468e21/wordpress","title":"WordPress Core < 3.0.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"43039c47-a34f-4020-9009-473e93468e21"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43039c47-a34f-4020-9009-473e93468e21?source=api-prod","cve":"CVE-2010-5294","affectedVersions":"<3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/431d352b-d79b-4a6b-91f9-95962be3049e/wordpress","title":"WordPress Core < 5.4.2 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"431d352b-d79b-4a6b-91f9-95962be3049e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/431d352b-d79b-4a6b-91f9-95962be3049e?source=api-prod","cve":"CVE-2020-4046","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/438fbd3f-052b-4a6d-acd2-233a93d56cbb/wordpress","title":"WordPress Core < 6.0.3 & Gutenberg < 14.3.1 - Authenticated Cross-Site Scripting in Various Blocks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"438fbd3f-052b-4a6d-acd2-233a93d56cbb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/438fbd3f-052b-4a6d-acd2-233a93d56cbb?source=api-prod","cve":"CVE-2022-43500","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4394f96a-ceb5-463f-b454-a6fa4a59fc45/wordpress","title":"WordPress Core < 6.0.3 - Authenticated Information Disclosure via REST-API\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"4394f96a-ceb5-463f-b454-a6fa4a59fc45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4394f96a-ceb5-463f-b454-a6fa4a59fc45?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/43c781c3-dc3e-4258-b594-689d0035cab0/wordpress","title":"WordPress Core < 4.0.1  - Denial of Service via Long Password\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"43c781c3-dc3e-4258-b594-689d0035cab0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43c781c3-dc3e-4258-b594-689d0035cab0?source=api-prod","cve":"CVE-2014-9034","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/43d46ada-4cbf-40e4-a0e5-685d8bf1a8a5/wordpress","title":"WordPress Core < 2.9.2 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-02-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"43d46ada-4cbf-40e4-a0e5-685d8bf1a8a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43d46ada-4cbf-40e4-a0e5-685d8bf1a8a5?source=api-prod","cve":"CVE-2010-0682","affectedVersions":"<2.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/45adeeba-22b0-4758-bc21-afc019653ce8/wordpress","title":"WordPress Core < 3.6.1 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"45adeeba-22b0-4758-bc21-afc019653ce8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/45adeeba-22b0-4758-bc21-afc019653ce8?source=api-prod","cve":"CVE-2013-4339","affectedVersions":"<=3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/4a1e77de-0207-412d-857d-ab6947116669/wordpress","title":"WordPress Core <= 2.5 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"4a1e77de-0207-412d-857d-ab6947116669"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a1e77de-0207-412d-857d-ab6947116669?source=api-prod","cve":"CVE-2008-2068","affectedVersions":"<=2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/4a3e3e6e-9c17-4ac5-9f83-1e01365436e9/wordpress","title":"WordPress Core 7.1 - 7.1.2 - Unauthenticated Stored Cross-Site Scripting via Pending Comments\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"4a3e3e6e-9c17-4ac5-9f83-1e01365436e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a3e3e6e-9c17-4ac5-9f83-1e01365436e9?source=api-prod","affectedVersions":">=7.1.0,<=7.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/4ac29d1c-0aae-4355-90df-24c99d23c411/wordpress","title":"WordPress Core <= 3.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"4ac29d1c-0aae-4355-90df-24c99d23c411"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ac29d1c-0aae-4355-90df-24c99d23c411?source=api-prod","cve":"CVE-2011-4956","affectedVersions":"<=3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/4af2b01b-2dcb-44ae-a764-8ecc5f8caa81/wordpress","title":"WordPress Core < 6.5.5 - Authenticated (Contributor+) Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"4af2b01b-2dcb-44ae-a764-8ecc5f8caa81"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4af2b01b-2dcb-44ae-a764-8ecc5f8caa81?source=api-prod","cve":"CVE-2024-32111","affectedVersions":"<4.1|>=4.1,<=4.1.40|>=4.2,<=4.2.37|>=4.3,<=4.3.33|>=4.4,<=4.4.32|>=4.5,<=4.5.31|>=4.6,<=4.6.28|>=4.7,<=4.7.28|>=4.8,<=4.8.24|>=4.9,<=4.9.25|>=5.0,<=5.0.21|>=5.1,<=5.1.18|>=5.2,<=5.2.20|>=5.3,<=5.3.17|>=5.4,<=5.4.15|>=5.5,<=5.5.14|>=5.6,<=5.6.13|>=5.7,<=5.7.11|>=5.8,<=5.8.9|>=5.9,<=5.9.9|>=6.0,<=6.0.8|>=6.1,<=6.1.6|>=6.2,<=6.2.5|>=6.3,<=6.3.4|>=6.4,<=6.4.4|>=6.5,<=6.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/4b389604-a999-45a1-a32f-7f8c951cb94c/wordpress","title":"WordPress Core < 3.9.2 - Denial of Service via XML\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b389604-a999-45a1-a32f-7f8c951cb94c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b389604-a999-45a1-a32f-7f8c951cb94c?source=api-prod","cve":"CVE-2014-5265","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"low"},{"advisoryId":"WPSECADV/WF/4b4da0cf-d9f4-47c4-a0e8-6c4dc5a6f250/wordpress","title":"WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b4da0cf-d9f4-47c4-a0e8-6c4dc5a6f250"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b4da0cf-d9f4-47c4-a0e8-6c4dc5a6f250?source=api-prod","affectedVersions":">=4.7.0,<=4.7.38|>=4.8.0,<=4.8.33|>=4.9.0,<=4.9.34|>=5.0.0,<=5.0.30|>=5.1.0,<=5.1.27|>=5.2.0,<=5.2.29|>=5.3.0,<=5.3.26|>=5.4.0,<=5.4.24|>=5.5.0,<=5.5.23|>=5.6.0,<=5.6.22|>=5.7.0,<=5.7.20|>=5.8.0,<=5.8.18|>=5.9.0,<=5.9.19|>=6.0.0,<=6.0.17|>=6.1.0,<=6.1.15|>=6.2.0,<=6.2.14|>=6.3.0,<=6.3.13|>=6.4.0,<=6.4.13|>=6.5.0,<=6.5.13|>=6.6.0,<=6.6.10|>=6.7.0,<=6.7.10|>=6.8.0,<=6.8.11|>=6.9.0,<=6.9.10|>=7.0.0,<=7.0.7|>=7.1.0,<=7.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/4b6f9700-eb29-4391-845c-58e1a2327b0b/wordpress","title":"WordPress Core < 5.2.3 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b6f9700-eb29-4391-845c-58e1a2327b0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b6f9700-eb29-4391-845c-58e1a2327b0b?source=api-prod","cve":"CVE-2019-16220","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4c1f4487-c684-4602-9b93-e547e2d38a64/wordpress","title":"WordPress Core < 4.3.1 - Cross-Site Scripting via Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"4c1f4487-c684-4602-9b93-e547e2d38a64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c1f4487-c684-4602-9b93-e547e2d38a64?source=api-prod","cve":"CVE-2015-5714","affectedVersions":"<3.7|=4.3|>=3.7,<=3.7.10|>=3.8,<=3.8.10|>=3.9,<=3.9.8|>=4.0,<=4.0.7|>=4.1,<=4.1.7|>=4.2,<=4.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/4d3191b0-829f-4d35-b8f6-323e7ea6f80b/wordpress","title":"WordPress Core < 4.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"4d3191b0-829f-4d35-b8f6-323e7ea6f80b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d3191b0-829f-4d35-b8f6-323e7ea6f80b?source=api-prod","cve":"CVE-2015-5622","affectedVersions":"<3.7|>=3.7,<=3.7.8|>=3.8,<=3.8.8|>=3.9,<=3.9.6|>=4.0,<=4.0.5|>=4.1,<=4.1.5|>=4.2,<=4.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4d4301ca-081b-4fa3-ac4f-aa8f0b37d32c/wordpress","title":"WordPress <= 6.9.1 - Unauthenticated Blind Server-Side Request Forgery via XML-RPC Pingback Discovery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"4d4301ca-081b-4fa3-ac4f-aa8f0b37d32c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d4301ca-081b-4fa3-ac4f-aa8f0b37d32c?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/4deae680-4829-4e24-b67b-4066ec9ce4da/wordpress","title":"WordPress Core <= 2.0.5 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"4deae680-4829-4e24-b67b-4066ec9ce4da"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4deae680-4829-4e24-b67b-4066ec9ce4da?source=api-prod","cve":"CVE-2006-6808","affectedVersions":"<=2.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/4df635b8-4c56-4b24-8446-8e39e6fe7441/wordpress","title":"WordPress Core < 5.0.1 - Stored Cross-Site Scripting via File Uploads\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"4df635b8-4c56-4b24-8446-8e39e6fe7441"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4df635b8-4c56-4b24-8446-8e39e6fe7441?source=api-prod","cve":"CVE-2018-20149","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e3a6fe2-6292-44ff-8925-a4aeb77c2a7f/wordpress","title":"WordPress Core < 6.2.2 - Shortcode Execution in User Generated Content\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e3a6fe2-6292-44ff-8925-a4aeb77c2a7f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e3a6fe2-6292-44ff-8925-a4aeb77c2a7f?source=api-prod","affectedVersions":">=5.9,<5.9.7|>=6.0,<6.0.5|>=6.1,<6.1.3|>=6.2,<6.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4fa453f3-d361-452c-940a-108252c9f302/wordpress","title":"WordPress Core <= 2.5.1 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"4fa453f3-d361-452c-940a-108252c9f302"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4fa453f3-d361-452c-940a-108252c9f302?source=api-prod","cve":"CVE-2008-2392","affectedVersions":"<=2.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/4fdf49e7-c89e-4b05-9236-ca28e715bc4a/wordpress","title":"WordPress Core <= 3.3.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"4fdf49e7-c89e-4b05-9236-ca28e715bc4a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4fdf49e7-c89e-4b05-9236-ca28e715bc4a?source=api-prod","cve":"CVE-2012-2404","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/501e3c8a-350e-4431-b6a2-012e837320bc/wordpress","title":"WordPress Core < 3.1.3 - Security Hardening\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"501e3c8a-350e-4431-b6a2-012e837320bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/501e3c8a-350e-4431-b6a2-012e837320bc?source=api-prod","cve":"CVE-2011-3125","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/506d1518-658f-4deb-9c30-d0bce5ef9df4/wordpress","title":"WordPress Core < 5.0.1 - Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"506d1518-658f-4deb-9c30-d0bce5ef9df4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/506d1518-658f-4deb-9c30-d0bce5ef9df4?source=api-prod","cve":"CVE-2019-8942","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/50f58944-1a12-4bac-9f90-8b0e1d109d11/wordpress","title":"WordPress Core <= 2.8 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-07-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"50f58944-1a12-4bac-9f90-8b0e1d109d11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50f58944-1a12-4bac-9f90-8b0e1d109d11?source=api-prod","cve":"CVE-2009-2334","affectedVersions":"<=2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/51cd834e-1b18-4702-9c6c-db7f34f2c687/wordpress","title":"WordPress Core < 5.8.1 - LoDash Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"51cd834e-1b18-4702-9c6c-db7f34f2c687"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51cd834e-1b18-4702-9c6c-db7f34f2c687?source=api-prod","cve":"CVE-2020-8203","affectedVersions":">=5.4,<5.4.7|>=5.5,<5.5.6|>=5.6,<5.6.5|>=5.7,<5.7.3|>=5.8,<5.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/54285c08-c9c8-4576-b1e8-e3b1c584c4bb/wordpress","title":"WordPress Core < 2.0.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"54285c08-c9c8-4576-b1e8-e3b1c584c4bb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54285c08-c9c8-4576-b1e8-e3b1c584c4bb?source=api-prod","cve":"CVE-2007-5105","affectedVersions":"<2.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/572fe891-5845-4a1c-ad3e-ddf5c54af5ba/wordpress","title":"WordPress <= 6.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Navigation Menu Items\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"572fe891-5845-4a1c-ad3e-ddf5c54af5ba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/572fe891-5845-4a1c-ad3e-ddf5c54af5ba?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/57666105-81e4-4ef4-8889-9ce9995d2629/wordpress","title":"Twenty Fifteen Theme <= 1.1 & WordPress Core < 4.2.2 - Cross-Site Scripting via example.html\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"57666105-81e4-4ef4-8889-9ce9995d2629"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57666105-81e4-4ef4-8889-9ce9995d2629?source=api-prod","cve":"CVE-2015-3429","affectedVersions":"<3.7|>=3.7,<=3.7.7|>=3.8,<=3.8.7|>=3.9,<=3.9.5|>=4.0,<=4.0.4|>=4.1,<=4.1.4|>=4.2,<=4.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/578a908a-d447-4b3e-b5d1-be86363c982a/wordpress","title":"WordPress Core < 4.7.3 - Cross-Site Request Forgery via Press This\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"578a908a-d447-4b3e-b5d1-be86363c982a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/578a908a-d447-4b3e-b5d1-be86363c982a?source=api-prod","cve":"CVE-2017-6819","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"high"},{"advisoryId":"WPSECADV/WF/5804b9da-11cd-4cb4-aa92-2c9e90aa527f/wordpress","title":"WordPress Core <= 3.0.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"5804b9da-11cd-4cb4-aa92-2c9e90aa527f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5804b9da-11cd-4cb4-aa92-2c9e90aa527f?source=api-prod","cve":"CVE-2010-4257","affectedVersions":"<=3.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/58300545-3e53-49be-bf55-eaf3e4cd82e9/wordpress","title":"WordPress Core < 5.5.2 - Deserialization Gadget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"58300545-3e53-49be-bf55-eaf3e4cd82e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/58300545-3e53-49be-bf55-eaf3e4cd82e9?source=api-prod","cve":"CVE-2020-28032","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/58e3b7f1-26f4-453a-ae1f-a1e6eed0348c/wordpress","title":"WordPress Core <= 5.0.3 - Path Traversal and Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"58e3b7f1-26f4-453a-ae1f-a1e6eed0348c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/58e3b7f1-26f4-453a-ae1f-a1e6eed0348c?source=api-prod","cve":"CVE-2019-8943","affectedVersions":"<=5.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5bfd1650-0cc1-4b1c-9fc2-c940d841a147/wordpress","title":"WordPress Core < 1.5.2 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"5bfd1650-0cc1-4b1c-9fc2-c940d841a147"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5bfd1650-0cc1-4b1c-9fc2-c940d841a147?source=api-prod","cve":"CVE-2005-4463","affectedVersions":"<1.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ceba1b2-2d39-4561-838b-b46e758517a3/wordpress","title":"WordPress Core < 5.3.1 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ceba1b2-2d39-4561-838b-b46e758517a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ceba1b2-2d39-4561-838b-b46e758517a3?source=api-prod","cve":"CVE-2019-20043","affectedVersions":"<3.7|=5.3|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d70b447-4f7f-4196-a37b-167679cef229/wordpress","title":"WordPress Core < 3.6.1 - HTML File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"5d70b447-4f7f-4196-a37b-167679cef229"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d70b447-4f7f-4196-a37b-167679cef229?source=api-prod","cve":"CVE-2013-5738","affectedVersions":"<=3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/5dee21da-dd92-41e7-8547-fb49eecec03c/wordpress","title":"WordPress Core < 3.3.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"5dee21da-dd92-41e7-8547-fb49eecec03c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5dee21da-dd92-41e7-8547-fb49eecec03c?source=api-prod","cve":"CVE-2012-2403","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/5faaf7d1-2012-42d5-affa-a5ff3388d25a/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Emoji Settings Element\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"5faaf7d1-2012-42d5-affa-a5ff3388d25a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5faaf7d1-2012-42d5-affa-a5ff3388d25a?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6300c8c2-f539-46b2-9ee0-80bebbe4cad3/wordpress","title":"WordPress Core < 6.2.1 - Shortcode Execution in User Generated Content\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"6300c8c2-f539-46b2-9ee0-80bebbe4cad3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6300c8c2-f539-46b2-9ee0-80bebbe4cad3?source=api-prod","affectedVersions":">=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6345d360-5f58-44d2-bc2d-1a20ee43e146/wordpress","title":"WordPress Core < 5.5.3 - PHP Object Injection Gadget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"6345d360-5f58-44d2-bc2d-1a20ee43e146"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6345d360-5f58-44d2-bc2d-1a20ee43e146?source=api-prod","cve":"CVE-2021-29476","affectedVersions":"<3.7|>=3.7,<3.7.35|>=3.8,<3.8.35|>=3.9,<3.9.33|>=4.0,<4.0.32|>=4.1,<4.1.32|>=4.2,<4.2.29|>=4.3,<4.3.25|>=4.4,<4.4.24|>=4.5,<4.5.23|>=4.6,<4.6.20|>=4.7,<4.7.19|>=4.8,<4.8.15|>=4.9,<4.9.16|>=5.0,<5.0.11|>=5.1,<5.1.8|>=5.2,<5.2.9|>=5.3,<5.3.6|>=5.4,<5.4.4|>=5.5,<5.5.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/6346024c-61d5-4f73-b7f2-3a8fd3fb838e/wordpress","title":"WordPress Core < 4.1.2 - Cross-Site Scripting via Ephox in Plupload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"6346024c-61d5-4f73-b7f2-3a8fd3fb838e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6346024c-61d5-4f73-b7f2-3a8fd3fb838e?source=api-prod","cve":"CVE-2015-3439","affectedVersions":"<3.7|>=3.7,<=3.7.5|>=3.8,<=3.8.5|>=3.9,<=3.9.3|>=4.0,<=4.0.1|>=4.1,<=4.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/63590140-9723-4e91-884c-f2b11b67eb8d/wordpress","title":"WordPress Core < 5.2.3 - Authenticated Cross-Site Scripting via Post Previews\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"63590140-9723-4e91-884c-f2b11b67eb8d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63590140-9723-4e91-884c-f2b11b67eb8d?source=api-prod","cve":"CVE-2019-16223","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.13|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/63fd62b2-455e-449b-b46a-78c5d2b86cde/wordpress","title":"WordPress Core < 2.1 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"63fd62b2-455e-449b-b46a-78c5d2b86cde"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63fd62b2-455e-449b-b46a-78c5d2b86cde?source=api-prod","cve":"CVE-2008-0195","affectedVersions":"<=2.0.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/64453a11-e0dd-40f8-99c3-f05ef640b42b/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Contributor+) Path Traversal via REST Templates Controller\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"64453a11-e0dd-40f8-99c3-f05ef640b42b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64453a11-e0dd-40f8-99c3-f05ef640b42b?source=api-prod","affectedVersions":"=7.1|>=5.8,<=6.6.7|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/64b4faf1-c2f2-43cd-900e-22edce3145a8/wordpress","title":"WordPress Core <= 2.2.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"64b4faf1-c2f2-43cd-900e-22edce3145a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64b4faf1-c2f2-43cd-900e-22edce3145a8?source=api-prod","cve":"CVE-2007-4139","affectedVersions":"<=2.0.10|>=2.2,<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/64f51991-f767-4f7b-94e7-68c0e2214849/wordpress","title":"WordPress Core < 3.0.6 - Incorrect Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"64f51991-f767-4f7b-94e7-68c0e2214849"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64f51991-f767-4f7b-94e7-68c0e2214849?source=api-prod","cve":"CVE-2011-5270","affectedVersions":"<3.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/65465de9-c527-4b18-8a52-c9cd2d594f72/wordpress","title":"WordPress Core < 3.5.2 - XXE Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"65465de9-c527-4b18-8a52-c9cd2d594f72"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65465de9-c527-4b18-8a52-c9cd2d594f72?source=api-prod","cve":"CVE-2013-2202","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/65c72e79-f0a9-4293-98be-956d8e4afb83/wordpress","title":"WordPress Core < 2.1.3 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"65c72e79-f0a9-4293-98be-956d8e4afb83"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65c72e79-f0a9-4293-98be-956d8e4afb83?source=api-prod","cve":"CVE-2007-1897","affectedVersions":"<2.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/66b1f597-f357-4525-8c67-e0be3a07bcfa/wordpress","title":"WordPress Core 5.9-6.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Navigation Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"66b1f597-f357-4525-8c67-e0be3a07bcfa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/66b1f597-f357-4525-8c67-e0be3a07bcfa?source=api-prod","cve":"CVE-2023-38000","affectedVersions":">=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6711f542-8b75-4968-86ac-9686ded775b7/wordpress","title":"WordPress Core 2.1.1 - Supply Chain Compromise\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"6711f542-8b75-4968-86ac-9686ded775b7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6711f542-8b75-4968-86ac-9686ded775b7?source=api-prod","affectedVersions":"=2.1.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/68f87cc7-fde5-4cd6-ab25-bf05cd3b5cde/wordpress","title":"WordPress Core < 5.4.1 - Cross-Site Scripting in the Block Editor\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"68f87cc7-fde5-4cd6-ab25-bf05cd3b5cde"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68f87cc7-fde5-4cd6-ab25-bf05cd3b5cde?source=api-prod","cve":"CVE-2020-11030","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/696f7c68-d19a-48ee-abc0-044f1734dfdb/wordpress","title":"WordPress Core < 3.8.2 - Contributor Users Can Publish Posts\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"696f7c68-d19a-48ee-abc0-044f1734dfdb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/696f7c68-d19a-48ee-abc0-044f1734dfdb?source=api-prod","cve":"CVE-2014-0165","affectedVersions":"<3.7|>=3.7,<=3.7.1|>=3.8,<=3.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6af83daa-ad8c-43ba-b77e-ad085889277c/wordpress","title":"WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"6af83daa-ad8c-43ba-b77e-ad085889277c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6af83daa-ad8c-43ba-b77e-ad085889277c?source=api-prod","cve":"CVE-2019-17674","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.14|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6b50656b-6cb4-4920-aa36-2634d4d41f5c/wordpress","title":"WordPress Core < 4.2.3 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b50656b-6cb4-4920-aa36-2634d4d41f5c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b50656b-6cb4-4920-aa36-2634d4d41f5c?source=api-prod","cve":"CVE-2015-5623","affectedVersions":"<3.7|>=3.7,<=3.7.8|>=3.8,<=3.8.8|>=3.9,<=3.9.6|>=4.0,<=4.0.5|>=4.1,<=4.1.5|>=4.2,<=4.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6b558818-f459-4bc1-893c-8c1c7bf9d6d2/wordpress","title":"WordPress Core < 4.8.2 - SQL Injection via Mishandled Placeholders\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b558818-f459-4bc1-893c-8c1c7bf9d6d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b558818-f459-4bc1-893c-8c1c7bf9d6d2?source=api-prod","cve":"CVE-2017-14723","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/6bea6a77-79e8-4d3a-bd3e-2bb3d20b6fe9/wordpress","title":"WordPress Core <= 6.3.1 - Authenticated(Contributor+) Sensitive Information Exposure via Comments on Protected Posts\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bea6a77-79e8-4d3a-bd3e-2bb3d20b6fe9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bea6a77-79e8-4d3a-bd3e-2bb3d20b6fe9?source=api-prod","cve":"CVE-2023-39999","affectedVersions":"<=4.1.38|>=4.2,<=4.2.35|>=4.3,<=4.3.31|>=4.4,<=4.4.30|>=4.5,<=4.5.29|>=4.6,<=4.6.26|>=4.7,<=4.7.26|>=4.8,<=4.8.22|>=4.9,<=4.9.23|>=5.0,<=5.0.19|>=5.1,<=5.1.16|>=5.2,<=5.2.18|>=5.3,<=5.3.15|>=5.4,<=5.4.13|>=5.5,<=5.5.12|>=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6cc6d71c-fb19-4142-a8be-4175afc1713c/wordpress","title":"WordPress Core < 5.2.4 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"6cc6d71c-fb19-4142-a8be-4175afc1713c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6cc6d71c-fb19-4142-a8be-4175afc1713c?source=api-prod","cve":"CVE-2019-17671","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.14|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e6f993b-ce09-4050-84a1-cbe9953f36b1/wordpress","title":"WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e6f993b-ce09-4050-84a1-cbe9953f36b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e6f993b-ce09-4050-84a1-cbe9953f36b1?source=api-prod","cve":"CVE-2023-5692","affectedVersions":"<=6.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6f6aa094-6bac-463f-b46d-c65f591abbb3/wordpress","title":"WordPress Core < 6.0.3 - Reflected Cross-Site Scripting via SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f6aa094-6bac-463f-b46d-c65f591abbb3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f6aa094-6bac-463f-b46d-c65f591abbb3?source=api-prod","cve":"CVE-2022-43497","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/6f998b76-9fa8-47c4-a95b-bdb5db5893e4/wordpress","title":"WordPress Core <= 2.0.3 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f998b76-9fa8-47c4-a95b-bdb5db5893e4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f998b76-9fa8-47c4-a95b-bdb5db5893e4?source=api-prod","cve":"CVE-2008-0194","affectedVersions":"<=2.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6ff76d9b-aa12-4391-90cd-f9df36d4a3a5/wordpress","title":"WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"6ff76d9b-aa12-4391-90cd-f9df36d4a3a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ff76d9b-aa12-4391-90cd-f9df36d4a3a5?source=api-prod","cve":"CVE-2026-87902","affectedVersions":">=4.7,<=4.7.36|>=4.8,<=4.8.31|>=4.9,<=4.9.32|>=5.0,<=5.0.28|>=5.1,<=5.1.25|>=5.2,<=5.2.27|>=5.3,<=5.3.24|>=5.4,<=5.4.22|>=5.5,<=5.5.21|>=5.6,<=5.6.20|>=5.7,<=5.7.18|>=5.8,<=5.8.16|>=5.9,<=5.9.17|>=6.0,<=6.0.15|>=6.1,<=6.1.13|>=6.2,<=6.2.12|>=6.3,<=6.3.11|>=6.4,<=6.4.11|>=6.5,<=6.5.11|>=6.6,<=6.6.8|>=6.7,<=6.7.8|>=6.8,<=6.8.9|>=6.9,<=6.9.8|>=7.0,<=7.0.5|>=7.1,<=7.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/70352973-5fa7-40b0-9e07-eab2e96520b7/wordpress","title":"WordPress Core < 4.9.5 - Security Misconfiguration with URL Hostnames\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"70352973-5fa7-40b0-9e07-eab2e96520b7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70352973-5fa7-40b0-9e07-eab2e96520b7?source=api-prod","cve":"CVE-2018-10101","affectedVersions":"<3.7|>=3.7,<=3.7.25|>=3.8,<=3.8.25|>=3.9,<=3.9.23|>=4.0,<=4.0.22|>=4.1,<=4.1.22|>=4.2,<=4.2.19|>=4.3,<=4.3.15|>=4.4,<=4.4.14|>=4.5,<=4.5.13|>=4.6,<=4.6.10|>=4.7,<=4.7.9|>=4.8,<=4.8.5|>=4.9,<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/705a0e1f-79c6-4c2a-8622-fb3df944cf22/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Scripting via Shortcode Brackets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"705a0e1f-79c6-4c2a-8622-fb3df944cf22"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/705a0e1f-79c6-4c2a-8622-fb3df944cf22?source=api-prod","cve":"CVE-2014-9031","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/719fe585-369b-47ef-b3c1-15729f88ae2d/wordpress","title":"WordPress Core < 5.8 - Dependency Confusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"719fe585-369b-47ef-b3c1-15729f88ae2d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/719fe585-369b-47ef-b3c1-15729f88ae2d?source=api-prod","cve":"CVE-2021-44223","affectedVersions":"<=5.7.5","severity":"high"},{"advisoryId":"WPSECADV/WF/71b521b5-acb5-4439-90f8-7d341291d583/wordpress","title":"WordPress Core < 2.0.3 -  IP Address Spoofing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"71b521b5-acb5-4439-90f8-7d341291d583"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71b521b5-acb5-4439-90f8-7d341291d583?source=api-prod","cve":"CVE-2006-2702","affectedVersions":"<=2.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/71f883d7-edf5-409e-92c1-f87f880602d3/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Imgur oEmbed\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"71f883d7-edf5-409e-92c1-f87f880602d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71f883d7-edf5-409e-92c1-f87f880602d3?source=api-prod","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/71fe2687-0dc9-4c56-91a4-447420818cca/wordpress","title":"WordPress Core < 5.4.1 - Password Reset Link Non-Expiration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"71fe2687-0dc9-4c56-91a4-447420818cca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71fe2687-0dc9-4c56-91a4-447420818cca?source=api-prod","cve":"CVE-2020-11027","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/72273368-042d-4ad4-9d1d-ca9c6db9cf3b/wordpress","title":"WordPress <= 6.9.1 - Cross-Site Scripting via Client-Side Template Override in Admin Area\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"72273368-042d-4ad4-9d1d-ca9c6db9cf3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72273368-042d-4ad4-9d1d-ca9c6db9cf3b?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/72b14197-560a-4dc2-9c23-a250f51dc51e/wordpress","title":"WordPress Core < 4.9.1 - Cross-domain Flash injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-10-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"72b14197-560a-4dc2-9c23-a250f51dc51e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72b14197-560a-4dc2-9c23-a250f51dc51e?source=api-prod","cve":"CVE-2016-9263","affectedVersions":"<3.7|>=3.7,<=3.7.24|>=3.8,<=3.8.24|>=3.9,<=3.9.23|>=4.0,<=4.0.21|>=4.1,<=4.1.21|>=4.2,<=4.2.18|>=4.3,<=4.3.14|>=4.4,<=4.4.13|>=4.5,<=4.5.12|>=4.6,<=4.6.9|>=4.7,<=4.7.8|>=4.8,<=4.8.4|>=4.9,<=4.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/73163743-2bff-459d-bed9-593f6ce837fa/wordpress","title":"WordPress Core < 3.1.3 - Username Enumeration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"73163743-2bff-459d-bed9-593f6ce837fa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/73163743-2bff-459d-bed9-593f6ce837fa?source=api-prod","cve":"CVE-2011-3126","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/76516f23-487f-48f6-82c0-88df651ddc65/wordpress","title":"WordPress Core < 4.9.1 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"76516f23-487f-48f6-82c0-88df651ddc65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76516f23-487f-48f6-82c0-88df651ddc65?source=api-prod","cve":"CVE-2017-17091","affectedVersions":"<3.7|=4.9|>=3.7,<=3.7.23|>=3.8,<=3.8.23|>=3.9,<=3.9.21|>=4.0,<=4.0.20|>=4.1,<=4.1.20|>=4.2,<=4.2.17|>=4.3,<=4.3.13|>=4.4,<=4.4.12|>=4.5,<=4.5.11|>=4.6,<=4.6.8|>=4.7,<=4.7.7|>=4.8,<=4.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/76af4656-547b-4daf-9078-8ed2b425d1ca/wordpress","title":"WordPress Core < 4.8.2 - Open Redirect in Admin Dashboard\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"76af4656-547b-4daf-9078-8ed2b425d1ca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76af4656-547b-4daf-9078-8ed2b425d1ca?source=api-prod","cve":"CVE-2017-14725","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"low"},{"advisoryId":"WPSECADV/WF/779ecd51-16d6-4799-aad7-372c5d5f2884/wordpress","title":"WordPress Core < 3.4.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"779ecd51-16d6-4799-aad7-372c5d5f2884"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/779ecd51-16d6-4799-aad7-372c5d5f2884?source=api-prod","cve":"CVE-2012-3383","affectedVersions":"<=3.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/78669d4f-3c1e-49e6-af8d-56f105f99d01/wordpress","title":"WordPress Core < 1.5.1.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"78669d4f-3c1e-49e6-af8d-56f105f99d01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78669d4f-3c1e-49e6-af8d-56f105f99d01?source=api-prod","cve":"CVE-2005-1810","affectedVersions":"<=1.5.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/78b98f21-ac0c-496b-8cb9-8d2f3bd751b1/wordpress","title":"WordPress Core < 5.3.1 - Stored Cross-Site Scripting via Block Editor\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"78b98f21-ac0c-496b-8cb9-8d2f3bd751b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78b98f21-ac0c-496b-8cb9-8d2f3bd751b1?source=api-prod","cve":"CVE-2019-16780","affectedVersions":"<3.7|=5.3|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/79ea853e-9d1d-4be0-8fd4-a80a924018ae/wordpress","title":"WordPress Core & WordPress MU < 2.8.1 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"79ea853e-9d1d-4be0-8fd4-a80a924018ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/79ea853e-9d1d-4be0-8fd4-a80a924018ae?source=api-prod","cve":"CVE-2009-2432","affectedVersions":"<=2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/7aa73c13-3f58-423a-ba5f-bebaae2b8371/wordpress","title":"WordPress Core < 4.0.1 Cross-Site Request Forgery to Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"7aa73c13-3f58-423a-ba5f-bebaae2b8371"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7aa73c13-3f58-423a-ba5f-bebaae2b8371?source=api-prod","cve":"CVE-2014-9039","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/7b23308d-7439-4dd2-9ec7-57b987909121/wordpress","title":"WordPress Core & WordPress MU < 2.8.1 - Username Enumeration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-07-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b23308d-7439-4dd2-9ec7-57b987909121"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b23308d-7439-4dd2-9ec7-57b987909121?source=api-prod","cve":"CVE-2009-2335","affectedVersions":"<=2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/7b851fd6-1477-4370-abf9-42ae2b6f8899/wordpress","title":"WordPress Core 5.4 - 5.8 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b851fd6-1477-4370-abf9-42ae2b6f8899"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b851fd6-1477-4370-abf9-42ae2b6f8899?source=api-prod","cve":"CVE-2021-39200","affectedVersions":">=5.4,<5.4.7|>=5.5,<5.5.6|>=5.6,<5.6.5|>=5.7,<5.7.3|>=5.8,<5.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7cef819e-71a3-4fe0-9d32-8d0e292bb904/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Unauthenticated Sensitive Information Exposure via Comment Feeds\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"7cef819e-71a3-4fe0-9d32-8d0e292bb904"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7cef819e-71a3-4fe0-9d32-8d0e292bb904?source=api-prod","cve":"CVE-2026-66666","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/7cfaf155-7766-4bb9-b89a-368d8adb889f/wordpress","title":"WordPress Core < 4.7.2 - Authorization Bypass to Term Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"7cfaf155-7766-4bb9-b89a-368d8adb889f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7cfaf155-7766-4bb9-b89a-368d8adb889f?source=api-prod","cve":"CVE-2017-5610","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7cfc1f42-c9dd-4dcb-8be5-c440a568a02e/wordpress","title":"WordPress Core < 5.4.1 - Reflected Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"7cfc1f42-c9dd-4dcb-8be5-c440a568a02e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7cfc1f42-c9dd-4dcb-8be5-c440a568a02e?source=api-prod","cve":"CVE-2020-11029","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/7d61b06b-6709-4f60-8324-53775dbb3c04/wordpress","title":"WordPress Core < 5.0.1 -  Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d61b06b-6709-4f60-8324-53775dbb3c04"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d61b06b-6709-4f60-8324-53775dbb3c04?source=api-prod","cve":"CVE-2018-20147","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/7d6a09f5-029a-4710-b2bd-974d0d8348b1/wordpress","title":"WordPress Core < 5.5.2 - Cross-Site Request Forgery to Theme Image Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d6a09f5-029a-4710-b2bd-974d0d8348b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d6a09f5-029a-4710-b2bd-974d0d8348b1?source=api-prod","cve":"CVE-2020-28040","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7dff5a77-a5d6-4aba-bf39-aa110a4f4996/wordpress","title":"WordPress Core < 4.2.2 - Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"7dff5a77-a5d6-4aba-bf39-aa110a4f4996"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7dff5a77-a5d6-4aba-bf39-aa110a4f4996?source=api-prod","cve":"CVE-2015-8834","affectedVersions":"<3.7|>=3.7,<=3.7.7|>=3.8,<=3.8.7|>=3.9,<=3.9.5|>=4.0,<=4.0.4|>=4.1,<=4.1.4|>=4.2,<=4.2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/7e42954c-1ae3-41ef-8dd3-16e5820aa36f/wordpress","title":"WordPress Core <= 3.5.1 - Content-Spoofing Attacks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"7e42954c-1ae3-41ef-8dd3-16e5820aa36f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e42954c-1ae3-41ef-8dd3-16e5820aa36f?source=api-prod","cve":"CVE-2013-2204","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/801d6f21-1f52-48d4-9f8e-5c971dd037f7/wordpress","title":"WordPress Core < 4.7.5 - Authorization Bypass Allowing Post Meta Updates\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"801d6f21-1f52-48d4-9f8e-5c971dd037f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/801d6f21-1f52-48d4-9f8e-5c971dd037f7?source=api-prod","cve":"CVE-2017-9065","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/8055886f-d0a9-4784-8430-41816db6c884/wordpress","title":"WordPress Core < 5.4.2 - Comment Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"8055886f-d0a9-4784-8430-41816db6c884"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8055886f-d0a9-4784-8430-41816db6c884?source=api-prod","cve":"CVE-2020-25286","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/80f92f7f-72e7-4d83-9ceb-ed0e11fb8003/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Site Creation on Multisite\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"80f92f7f-72e7-4d83-9ceb-ed0e11fb8003"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/80f92f7f-72e7-4d83-9ceb-ed0e11fb8003?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/81022d05-d1fc-4f27-9f89-b6f9c79cc084/wordpress","title":"WordPress Core < 3.5.2 - Cross-Site Scripting via Multiple Vectors\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"81022d05-d1fc-4f27-9f89-b6f9c79cc084"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81022d05-d1fc-4f27-9f89-b6f9c79cc084?source=api-prod","cve":"CVE-2013-2201","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/812d99bc-8d86-44a9-bafa-be8ce979229c/wordpress","title":"WordPress Core < 4.2.4 - Cross-Site Request Forgery to Post Lockage\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"812d99bc-8d86-44a9-bafa-be8ce979229c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/812d99bc-8d86-44a9-bafa-be8ce979229c?source=api-prod","cve":"CVE-2015-5731","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/81bf9a8d-fc70-45d9-a352-4a5bfb2c43f4/wordpress","title":"WordPress Core <= 2.8.4 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"81bf9a8d-fc70-45d9-a352-4a5bfb2c43f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81bf9a8d-fc70-45d9-a352-4a5bfb2c43f4?source=api-prod","cve":"CVE-2009-3622","affectedVersions":"<=2.8.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/834c92ba-8b48-4ae3-9073-085e8f559762/wordpress","title":"WordPress Core < 6.2.1 - Insufficient Sanitization of Block Attributes\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"834c92ba-8b48-4ae3-9073-085e8f559762"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/834c92ba-8b48-4ae3-9073-085e8f559762?source=api-prod","affectedVersions":"<4.1|>=4.1,<4.1.38|>=4.2,<4.2.35|>=4.3,<4.3.31|>=4.4,<4.4.30|>=4.5,<4.5.29|>=4.6,<4.6.26|>=4.7,<4.7.26|>=4.8,<4.8.22|>=4.9,<4.9.23|>=5.0,<5.0.19|>=5.1,<5.1.16|>=5.2,<5.2.18|>=5.3,<5.3.15|>=5.4,<5.4.13|>=5.5,<5.5.12|>=5.6,<5.6.11|>=5.7,<5.7.9|>=5.8,<5.8.7|>=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/83597e50-1992-4171-b24e-b14f55be6e4c/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Contributor+) Information Exposure via Sample Permalink AJAX Actions\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"83597e50-1992-4171-b24e-b14f55be6e4c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83597e50-1992-4171-b24e-b14f55be6e4c?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/83ec5fa5-2fd9-4c7d-a2f1-de885746d2d3/wordpress","title":"WordPress Core <= 2.0.4 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"83ec5fa5-2fd9-4c7d-a2f1-de885746d2d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83ec5fa5-2fd9-4c7d-a2f1-de885746d2d3?source=api-prod","cve":"CVE-2006-5705","affectedVersions":"<=2.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/83f8adea-4735-4c72-b274-58e813cab6ab/wordpress","title":"WordPress Core <= 4.5.3 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"83f8adea-4735-4c72-b274-58e813cab6ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83f8adea-4735-4c72-b274-58e813cab6ab?source=api-prod","cve":"CVE-2016-6896","affectedVersions":"<4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/855f5cca-b0cc-4a1b-be33-d11776ad7c08/wordpress","title":"WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"855f5cca-b0cc-4a1b-be33-d11776ad7c08"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/855f5cca-b0cc-4a1b-be33-d11776ad7c08?source=api-prod","cve":"CVE-2014-5240","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"low"},{"advisoryId":"WPSECADV/WF/856a6b88-f5fc-4b87-8a94-81e233f02e2f/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"856a6b88-f5fc-4b87-8a94-81e233f02e2f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/856a6b88-f5fc-4b87-8a94-81e233f02e2f?source=api-prod","cve":"CVE-2014-9035","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/861da9ac-fd73-4bb5-bc39-baf9efe71899/wordpress","title":"WordPress Core <= 3.1.2 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"861da9ac-fd73-4bb5-bc39-baf9efe71899"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/861da9ac-fd73-4bb5-bc39-baf9efe71899?source=api-prod","cve":"CVE-2011-3129","affectedVersions":"<=3.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/866f5121-81be-409e-b6d5-81b72bfb5539/wordpress","title":"WordPress Core 6.5.0 - 7.1.2 - Authenticated (Author+) Second-Order SQL Injection via WXR Export\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"866f5121-81be-409e-b6d5-81b72bfb5539"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/866f5121-81be-409e-b6d5-81b72bfb5539?source=api-prod","affectedVersions":">=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/86b2123f-9616-4dcc-904f-c7be802a8f8c/wordpress","title":"WordPress Core <= 3.1.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"86b2123f-9616-4dcc-904f-c7be802a8f8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86b2123f-9616-4dcc-904f-c7be802a8f8c?source=api-prod","cve":"CVE-2011-3130","affectedVersions":"<=3.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/87333eee-36ae-4272-b300-7352eb133745/wordpress","title":"WordPress Core <= 3.3.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"87333eee-36ae-4272-b300-7352eb133745"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/87333eee-36ae-4272-b300-7352eb133745?source=api-prod","cve":"CVE-2012-3414","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8746bd3a-6e2b-4ed2-9b21-4ed5a0e58de8/wordpress","title":"WordPress Core < 5.4.2 - Arbitrary User Meta Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"8746bd3a-6e2b-4ed2-9b21-4ed5a0e58de8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8746bd3a-6e2b-4ed2-9b21-4ed5a0e58de8?source=api-prod","cve":"CVE-2020-4050","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"low"},{"advisoryId":"WPSECADV/WF/88a3b4ad-7b8c-40ae-b81f-ccb979b49a47/wordpress","title":"WordPress Core < 5.0.1 - Authenticated Stored Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"88a3b4ad-7b8c-40ae-b81f-ccb979b49a47"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88a3b4ad-7b8c-40ae-b81f-ccb979b49a47?source=api-prod","cve":"CVE-2018-20153","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/8acf7327-2cdc-44ad-a04c-01cb0337d510/wordpress","title":"WordPress Core < 4.4.1 - Cross-Site Scripting via Theme Names\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-01-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"8acf7327-2cdc-44ad-a04c-01cb0337d510"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8acf7327-2cdc-44ad-a04c-01cb0337d510?source=api-prod","cve":"CVE-2016-1564","affectedVersions":"<3.7|=4.4|>=3.7,<=3.7.11|>=3.8,<=3.8.11|>=3.9,<=3.9.9|>=4.0,<=4.0.8|>=4.1,<=4.1.8|>=4.2,<=4.2.5|>=4.3,<=4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8afcb18c-71e6-4c77-b0f9-0700ee05966e/wordpress","title":"WordPress Core < 2.3.3 & WordPress MU < 1.3.2 - Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"8afcb18c-71e6-4c77-b0f9-0700ee05966e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8afcb18c-71e6-4c77-b0f9-0700ee05966e?source=api-prod","cve":"CVE-2008-5695","affectedVersions":"<=2.3.2","severity":"high"},{"advisoryId":"WPSECADV/WF/8b8d4431-ac72-45a2-b4a1-19690946d0ee/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Author+) Missing Authorization to Comment/Note Reparenting via REST API\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"8b8d4431-ac72-45a2-b4a1-19690946d0ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8b8d4431-ac72-45a2-b4a1-19690946d0ee?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ba30cbb-7a20-47aa-bbd6-82fdb27d4705/wordpress","title":"WordPress Core <= 1.5.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-12-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ba30cbb-7a20-47aa-bbd6-82fdb27d4705"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ba30cbb-7a20-47aa-bbd6-82fdb27d4705?source=api-prod","cve":"CVE-2006-1012","affectedVersions":"<=1.5.2","severity":"high"},{"advisoryId":"WPSECADV/WF/8be739cd-e594-41a5-85a4-9cf7d3436953/wordpress","title":"WordPress Core < 4.8.2 - Directory Traversal during unzip\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"8be739cd-e594-41a5-85a4-9cf7d3436953"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8be739cd-e594-41a5-85a4-9cf7d3436953?source=api-prod","cve":"CVE-2017-14719","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8bed0637-6d1b-4c30-b87c-01c88d573ae6/wordpress","title":"WordPress Core < 4.7.2 - Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"8bed0637-6d1b-4c30-b87c-01c88d573ae6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8bed0637-6d1b-4c30-b87c-01c88d573ae6?source=api-prod","cve":"CVE-2017-6514","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c483cf9-fb63-4c43-ad42-1404448540c2/wordpress","title":"WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c483cf9-fb63-4c43-ad42-1404448540c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c483cf9-fb63-4c43-ad42-1404448540c2?source=api-prod","cve":"CVE-2019-20042","affectedVersions":"<3.7|=5.3|>=3.7,<=3.7.31|>=3.8,<=3.8.31|>=3.9,<=3.9.29|>=4.0,<=4.0.28|>=4.1,<=4.1.28|>=4.2,<=4.2.25|>=4.3,<=4.3.21|>=4.4,<=4.4.20|>=4.5,<=4.5.19|>=4.6,<=4.6.16|>=4.7,<=4.7.15|>=4.8,<=4.8.11|>=4.9,<=4.9.12|>=5.0,<=5.0.7|>=5.1,<=5.1.3|>=5.2,<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/8cf1ac25-2e55-4e27-af01-9b5b1997f339/wordpress","title":"WordPress Core < 5.5.2 - Stored Cross-Site Scripting via post slugs\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8cf1ac25-2e55-4e27-af01-9b5b1997f339"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8cf1ac25-2e55-4e27-af01-9b5b1997f339?source=api-prod","cve":"CVE-2020-28038","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d874540-dced-420d-81c0-46c185df10f1/wordpress","title":"WordPress Core < 2.0.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d874540-dced-420d-81c0-46c185df10f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d874540-dced-420d-81c0-46c185df10f1?source=api-prod","cve":"CVE-2006-1796","affectedVersions":"<=2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ddeaf57-df82-48f0-b53d-a35a6cd80aca/wordpress","title":"WordPress Core < 4.7.2 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ddeaf57-df82-48f0-b53d-a35a6cd80aca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ddeaf57-df82-48f0-b53d-a35a6cd80aca?source=api-prod","cve":"CVE-2017-5611","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"high"},{"advisoryId":"WPSECADV/WF/8f896e4a-565a-4545-9683-045cd08ccca0/wordpress","title":"WordPress Core <= 2.2.1 - Authenticated (Admin+) Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"8f896e4a-565a-4545-9683-045cd08ccca0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f896e4a-565a-4545-9683-045cd08ccca0?source=api-prod","cve":"CVE-2007-4153","affectedVersions":"<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/91531e13-5344-442c-99d3-8ccfd61b715d/wordpress","title":"WordPress Core < 2.0.5 - User Metadata Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-09-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"91531e13-5344-442c-99d3-8ccfd61b715d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91531e13-5344-442c-99d3-8ccfd61b715d?source=api-prod","cve":"CVE-2006-6016","affectedVersions":"<=2.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/91e61664-3b98-4a97-b35c-1ec88034d05b/wordpress","title":"WordPress Core < 4.7.1 - Cross-Site Request Forgery via Widget Editing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"91e61664-3b98-4a97-b35c-1ec88034d05b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91e61664-3b98-4a97-b35c-1ec88034d05b?source=api-prod","cve":"CVE-2017-5492","affectedVersions":"<3.7|=4.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/92895f8e-59c9-4988-9d7a-2601880d71a2/wordpress","title":"WordPress Core < 5.4.2 - Self-Cross Site Scripting via Theme Folder Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"92895f8e-59c9-4988-9d7a-2601880d71a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92895f8e-59c9-4988-9d7a-2601880d71a2?source=api-prod","cve":"CVE-2020-4049","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"low"},{"advisoryId":"WPSECADV/WF/92babbbf-74bd-474f-9057-c5022a7d64c7/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"92babbbf-74bd-474f-9057-c5022a7d64c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92babbbf-74bd-474f-9057-c5022a7d64c7?source=api-prod","cve":"CVE-2026-114570","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/940aabdc-e98e-45be-87dd-cafae45f2474/wordpress","title":"WordPress Core < 2.3.3 - Improper Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"940aabdc-e98e-45be-87dd-cafae45f2474"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/940aabdc-e98e-45be-87dd-cafae45f2474?source=api-prod","cve":"CVE-2008-0664","affectedVersions":"<=2.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/94332eb8-0961-4c8d-97bb-3d5d08e8119f/wordpress","title":"WordPress Core < 2.1 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"94332eb8-0961-4c8d-97bb-3d5d08e8119f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/94332eb8-0961-4c8d-97bb-3d5d08e8119f?source=api-prod","cve":"CVE-2007-0539","affectedVersions":"<2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/954b8064-f317-4af4-a55f-9a61ee945006/wordpress","title":"WordPress Core < 5.9.2 & Gutenberg < 12.7.2 - Prototype Pollution via Block Editor\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"954b8064-f317-4af4-a55f-9a61ee945006"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/954b8064-f317-4af4-a55f-9a61ee945006?source=api-prod","affectedVersions":"<3.7|>=3.7,<=3.7.37|>=3.8,<=3.8.37|>=3.9,<=3.9.35|>=4.0,<=4.0.34|>=4.1,<=4.1.34|>=4.2,<=4.2.31|>=4.3,<=4.3.27|>=4.4,<=4.4.26|>=4.5,<=4.5.25|>=4.6,<=4.6.22|>=4.7,<=4.7.22|>=4.8,<=4.8.18|>=4.9,<=4.9.19|>=5.0,<=5.0.15|>=5.1,<=5.1.12|>=5.2,<=5.2.14|>=5.3,<=5.3.11|>=5.4,<=5.4.9|>=5.5,<=5.5.8|>=5.6,<=5.6.7|>=5.7,<=5.7.5|>=5.8,<=5.8.3|>=5.9,<=5.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/97a3fc27-4b58-400a-b831-6423e3de5cb7/wordpress","title":"WordPress Core < 4.9 - Insecure Deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"97a3fc27-4b58-400a-b831-6423e3de5cb7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/97a3fc27-4b58-400a-b831-6423e3de5cb7?source=api-prod","cve":"CVE-2017-1000600","affectedVersions":"<4.9","severity":"high"},{"advisoryId":"WPSECADV/WF/97ab2585-4178-4a5b-923f-2ce9ca44a8d7/wordpress","title":"WordPress Core < 4.2.4 - Timing Side-Channel Attack\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"97ab2585-4178-4a5b-923f-2ce9ca44a8d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/97ab2585-4178-4a5b-923f-2ce9ca44a8d7?source=api-prod","cve":"CVE-2015-5730","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/98acac5c-65d7-4aaf-adcc-a58515c28fc3/wordpress","title":"WordPress Core < 4.7.3 - Cross-Site Scripting via Taxonomy names\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"98acac5c-65d7-4aaf-adcc-a58515c28fc3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98acac5c-65d7-4aaf-adcc-a58515c28fc3?source=api-prod","cve":"CVE-2017-6818","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/99e0a243-3e0e-4e2b-82fd-95c3cfde8a1b/wordpress","title":"WordPress Core < 3.9.2 - Deserialization via Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"99e0a243-3e0e-4e2b-82fd-95c3cfde8a1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/99e0a243-3e0e-4e2b-82fd-95c3cfde8a1b?source=api-prod","cve":"CVE-2014-5203","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"high"},{"advisoryId":"WPSECADV/WF/9ab55dea-84d5-4ed6-a693-8c8de9b7c7dd/wordpress","title":"WordPress Core < 2.8.3 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-08-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"9ab55dea-84d5-4ed6-a693-8c8de9b7c7dd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ab55dea-84d5-4ed6-a693-8c8de9b7c7dd?source=api-prod","cve":"CVE-2009-2853","affectedVersions":"<=2.8.2","severity":"high"},{"advisoryId":"WPSECADV/WF/9df45c8e-c040-4031-9c51-4c43d12f08b0/wordpress","title":"WordPress Core < 5.7.1 - XXE Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"9df45c8e-c040-4031-9c51-4c43d12f08b0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9df45c8e-c040-4031-9c51-4c43d12f08b0?source=api-prod","cve":"CVE-2021-29447","affectedVersions":">=4.7,<4.7.20|>=4.8,<4.8.16|>=4.9,<4.9.17|>=5.0,<5.0.12|>=5.1,<5.1.9|>=5.2,<5.2.10|>=5.3,<5.3.7|>=5.4,<5.4.5|>=5.5,<5.5.4|>=5.6,<5.6.3|>=5.7,<5.7.1","severity":"high"},{"advisoryId":"WPSECADV/WF/9f6b9a90-4fa8-4cd0-bec8-6fa69a1b4681/wordpress","title":"WordPress Core < 3.5.2 -  Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f6b9a90-4fa8-4cd0-bec8-6fa69a1b4681"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f6b9a90-4fa8-4cd0-bec8-6fa69a1b4681?source=api-prod","cve":"CVE-2013-2199","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f7469ec-cbd5-4f13-8455-b907f2542836/wordpress","title":"WordPress Core < 2.0.10 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f7469ec-cbd5-4f13-8455-b907f2542836"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f7469ec-cbd5-4f13-8455-b907f2542836?source=api-prod","cve":"CVE-2007-1599","affectedVersions":"<2.0.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f9bbe9a-faac-4f41-b2be-ddf6ff80d9c7/wordpress","title":"WordPress Core <= 2.8.5 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f9bbe9a-faac-4f41-b2be-ddf6ff80d9c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f9bbe9a-faac-4f41-b2be-ddf6ff80d9c7?source=api-prod","cve":"CVE-2009-3891","affectedVersions":"<=2.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/9fda5e15-fdf9-4b67-93d3-2dbfa94aefe9/wordpress","title":"WordPress Core - All Known Versions - Cleartext Storage of wp_signups.activation_key\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-10-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"9fda5e15-fdf9-4b67-93d3-2dbfa94aefe9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9fda5e15-fdf9-4b67-93d3-2dbfa94aefe9?source=api-prod","cve":"CVE-2017-14990","affectedVersions":"*","severity":"medium"},{"advisoryId":"WPSECADV/WF/9fe1178e-aca3-4f52-85e1-7d04b866a073/wordpress","title":"WordPress Core < 3.0.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"9fe1178e-aca3-4f52-85e1-7d04b866a073"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9fe1178e-aca3-4f52-85e1-7d04b866a073?source=api-prod","cve":"CVE-2010-5295","affectedVersions":"<3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a19ef0d7-fd44-45ea-8fb1-b99c270072c4/wordpress","title":"WordPress Core < 3.0.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2010-12-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"a19ef0d7-fd44-45ea-8fb1-b99c270072c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a19ef0d7-fd44-45ea-8fb1-b99c270072c4?source=api-prod","cve":"CVE-2010-5296","affectedVersions":"<3.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2926c11-c6a2-4988-89ed-42d9e0791b95/wordpress","title":"WordPress <= 6.8.2 - Authenticated (Contributor+) Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2926c11-c6a2-4988-89ed-42d9e0791b95"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2926c11-c6a2-4988-89ed-42d9e0791b95?source=api-prod","cve":"CVE-2025-58246","affectedVersions":">=4.7,<=4.7.30|>=4.8,<=4.8.26|>=4.9,<=4.9.27|>=5.0,<=5.0.23|>=5.1,<=5.1.20|>=5.2,<=5.2.22|>=5.3,<=5.3.19|>=5.4,<=5.4.17|>=5.5,<=5.5.16|>=5.6,<=5.6.15|>=5.7,<=5.7.13|>=5.8,<=5.8.11|>=5.9,<=5.9.11|>=6.0,<=6.0.10|>=6.1,<=6.1.8|>=6.2,<=6.2.7|>=6.3,<=6.3.6|>=6.4,<=6.4.6|>=6.5,<=6.5.6|>=6.6,<=6.6.3|>=6.7,<=6.7.3|>=6.8,<=6.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3779501-4ac7-4b76-8b2b-9852c6467f16/wordpress","title":"WordPress Core < 4.7.3 - Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3779501-4ac7-4b76-8b2b-9852c6467f16"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3779501-4ac7-4b76-8b2b-9852c6467f16?source=api-prod","cve":"CVE-2017-6816","affectedVersions":"<3.7|>=3.7,<=3.7.18|>=3.8,<=3.8.18|>=3.9,<=3.9.16|>=4.0,<=4.0.15|>=4.1,<=4.1.15|>=4.2,<=4.2.12|>=4.3,<=4.3.8|>=4.4,<=4.4.7|>=4.5,<=4.5.6|>=4.6,<=4.6.3|>=4.7,<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a50531df-e876-463c-a06b-16b2f30aeefe/wordpress","title":"WordPress Core < 5.1.1 - Cross-Site Request Forgery to Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a50531df-e876-463c-a06b-16b2f30aeefe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a50531df-e876-463c-a06b-16b2f30aeefe?source=api-prod","cve":"CVE-2019-9787","affectedVersions":"<3.7|=5.1|>=3.7,<=3.7.28|>=3.8,<=3.8.28|>=3.9,<=3.9.26|>=4.0,<=4.0.25|>=4.1,<=4.1.25|>=4.2,<=4.2.22|>=4.3,<=4.3.18|>=4.4,<=4.4.17|>=4.5,<=4.5.16|>=4.6,<=4.6.13|>=4.7,<=4.7.12|>=4.8,<=4.8.8|>=4.9,<=4.9.9|>=5.0,<=5.0.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/a5368894-3277-47d0-8fad-adfb8df4fa93/wordpress","title":"WordPress Core 5.6 - 6.3.1 - Reflected Cross-Site Scripting via Application Password Requests\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a5368894-3277-47d0-8fad-adfb8df4fa93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a5368894-3277-47d0-8fad-adfb8df4fa93?source=api-prod","affectedVersions":">=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a57426d2-0ca4-405b-bfbf-0685e2c744a0/wordpress","title":"WordPress Core < 5.7.1 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"a57426d2-0ca4-405b-bfbf-0685e2c744a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a57426d2-0ca4-405b-bfbf-0685e2c744a0?source=api-prod","cve":"CVE-2021-29450","affectedVersions":">=4.7,<4.7.20|>=4.8,<4.8.16|>=4.9,<4.9.17|>=5.0,<5.0.12|>=5.1,<5.1.9|>=5.2,<5.2.10|>=5.3,<5.3.7|>=5.4,<5.4.5|>=5.5,<5.5.4|>=5.6,<5.6.3|>=5.7,<5.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a5c290a1-b58a-4b5c-8112-076d5b17d940/wordpress","title":"WordPress Core < 2.2.3 & WordPress MU < 1.2.5a - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"a5c290a1-b58a-4b5c-8112-076d5b17d940"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a5c290a1-b58a-4b5c-8112-076d5b17d940?source=api-prod","cve":"CVE-2007-4894","affectedVersions":"<2.2.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/a5ef4d74-aa5d-4d6d-af2c-bda506fb394d/wordpress","title":"WordPress Core < 2.2.3 - Restriction Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"a5ef4d74-aa5d-4d6d-af2c-bda506fb394d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a5ef4d74-aa5d-4d6d-af2c-bda506fb394d?source=api-prod","cve":"CVE-2008-2146","affectedVersions":"<=2.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a6074c97-619d-4f47-97c7-781c7a38019d/wordpress","title":"WordPress Core <= 2.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"a6074c97-619d-4f47-97c7-781c7a38019d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a6074c97-619d-4f47-97c7-781c7a38019d?source=api-prod","cve":"CVE-2007-1622","affectedVersions":"<=2.0.9|>=2.1,<=2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a69782f0-aa61-4049-8339-7f27f4b6c36b/wordpress","title":"WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"a69782f0-aa61-4049-8339-7f27f4b6c36b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a69782f0-aa61-4049-8339-7f27f4b6c36b?source=api-prod","cve":"CVE-2026-3906","affectedVersions":">=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a7e8eb75-ba48-4385-9ddd-800d9bb907f1/wordpress","title":"WordPress Core < 4.5.3 - Bypass sanitize_file_name Protection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a7e8eb75-ba48-4385-9ddd-800d9bb907f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a7e8eb75-ba48-4385-9ddd-800d9bb907f1?source=api-prod","cve":"CVE-2016-5839","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"high"},{"advisoryId":"WPSECADV/WF/a9162c2e-e765-4bda-b09f-982603b5797a/wordpress","title":"WordPress Core <= 2.1.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9162c2e-e765-4bda-b09f-982603b5797a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9162c2e-e765-4bda-b09f-982603b5797a?source=api-prod","cve":"CVE-2007-1230","affectedVersions":"<=2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9498085-87c7-47e7-aac8-c0397264a7eb/wordpress","title":"WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9498085-87c7-47e7-aac8-c0397264a7eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9498085-87c7-47e7-aac8-c0397264a7eb?source=api-prod","cve":"CVE-2016-5834","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a973dd0a-1a36-4ea2-a300-0f8bb277dfaa/wordpress","title":"WordPress Core < 3.8.2 - Authentication Cookie Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"a973dd0a-1a36-4ea2-a300-0f8bb277dfaa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a973dd0a-1a36-4ea2-a300-0f8bb277dfaa?source=api-prod","cve":"CVE-2014-0166","affectedVersions":"<3.7|>=3.7,<=3.7.1|>=3.8,<=3.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa7b7474-c170-42a2-be88-0fe410a2e71b/wordpress","title":"WordPress <= 6.9.1 - Authenticated (Author+) XML External Entity Injection via getID3 Library Media Upload\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa7b7474-c170-42a2-be88-0fe410a2e71b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa7b7474-c170-42a2-be88-0fe410a2e71b?source=api-prod","affectedVersions":">=6.8,<=6.8.3|>=6.9,<=6.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa8a095b-abda-4a12-a4b9-246cda41fb4e/wordpress","title":"WordPress Core < 4.9.1- Stored Cross-Site Scripting via Language\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa8a095b-abda-4a12-a4b9-246cda41fb4e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa8a095b-abda-4a12-a4b9-246cda41fb4e?source=api-prod","cve":"CVE-2017-17093","affectedVersions":"<3.7|=4.9|>=3.7,<=3.7.23|>=3.8,<=3.8.23|>=3.9,<=3.9.21|>=4.0,<=4.0.20|>=4.1,<=4.1.20|>=4.2,<=4.2.17|>=4.3,<=4.3.13|>=4.4,<=4.4.12|>=4.5,<=4.5.11|>=4.6,<=4.6.8|>=4.7,<=4.7.7|>=4.8,<=4.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ab66ac69-0617-4f9f-8ad3-4ab1502892bd/wordpress","title":"WordPress Core < 3.5.1 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ab66ac69-0617-4f9f-8ad3-4ab1502892bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ab66ac69-0617-4f9f-8ad3-4ab1502892bd?source=api-prod","cve":"CVE-2013-0236","affectedVersions":"<3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ab710963-64e2-476e-9a60-0a18b64b7550/wordpress","title":"WordPress Core < 4.7.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"ab710963-64e2-476e-9a60-0a18b64b7550"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ab710963-64e2-476e-9a60-0a18b64b7550?source=api-prod","cve":"CVE-2017-5612","affectedVersions":"<3.7|>=3.7,<=3.7.17|>=3.8,<=3.8.17|>=3.9,<=3.9.15|>=4.0,<=4.0.14|>=4.1,<=4.1.14|>=4.2,<=4.2.11|>=4.3,<=4.3.7|>=4.4,<=4.4.6|>=4.5,<=4.5.5|>=4.6,<=4.6.2|>=4.7,<=4.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/aba33487-f6c5-41e9-9500-73bef37381e6/wordpress","title":"WordPress Core < 4.2.4 - Cross-Site Scripting via Widget Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"aba33487-f6c5-41e9-9500-73bef37381e6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aba33487-f6c5-41e9-9500-73bef37381e6?source=api-prod","cve":"CVE-2015-5732","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ac4c6bd8-179f-4553-b1b4-549300bae374/wordpress","title":"WordPress Core <= 2.2 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac4c6bd8-179f-4553-b1b4-549300bae374"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac4c6bd8-179f-4553-b1b4-549300bae374?source=api-prod","cve":"CVE-2007-3543","affectedVersions":"<=2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/ad943111-24c1-4ff9-b34a-aa4e1ee8ee75/wordpress","title":"WordPress Core < 3.9.2 - Brute Force of Cross-Site Request Forgery Tokens\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"ad943111-24c1-4ff9-b34a-aa4e1ee8ee75"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ad943111-24c1-4ff9-b34a-aa4e1ee8ee75?source=api-prod","cve":"CVE-2014-5205","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/adc90b32-f973-4c8e-b419-0614d4642b7f/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Post Overwrite\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"adc90b32-f973-4c8e-b419-0614d4642b7f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/adc90b32-f973-4c8e-b419-0614d4642b7f?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/adf3fb57-b080-4cda-b78b-14d94bad21a9/wordpress","title":"WordPress Core < 5.4.1 - Authenticated Cross-Site Scripting via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"adf3fb57-b080-4cda-b78b-14d94bad21a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/adf3fb57-b080-4cda-b78b-14d94bad21a9?source=api-prod","cve":"CVE-2020-11025","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae92bd0c-936c-4fae-8c0c-c94706568527/wordpress","title":"WordPress Core < 3.6.1 - .swf and .exe File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae92bd0c-936c-4fae-8c0c-c94706568527"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae92bd0c-936c-4fae-8c0c-c94706568527?source=api-prod","cve":"CVE-2013-5739","affectedVersions":"<3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/af420213-039b-41a4-b177-4035fc727867/wordpress","title":"WordPress Core < 3.6.1 - Spoof Post Authorship\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"af420213-039b-41a4-b177-4035fc727867"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af420213-039b-41a4-b177-4035fc727867?source=api-prod","cve":"CVE-2013-4340","affectedVersions":"<=3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/af77d642-d383-48f2-a59a-3a9c738cd47f/wordpress","title":"WordPress Core 6.3 - 6.3.1 - Authenticated(Contributor+) Cross-Site Scripting via Footnotes Block\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"af77d642-d383-48f2-a59a-3a9c738cd47f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af77d642-d383-48f2-a59a-3a9c738cd47f?source=api-prod","affectedVersions":">=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0382227-48eb-4a97-8f3c-5c8fc4bcc0b6/wordpress","title":"WordPress Core < 3.9.2 - Denial of Service via XML #2\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0382227-48eb-4a97-8f3c-5c8fc4bcc0b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0382227-48eb-4a97-8f3c-5c8fc4bcc0b6?source=api-prod","cve":"CVE-2014-5266","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0ef885f-fd62-4513-83cb-65381b99a172/wordpress","title":"WordPress Core < 5.8.3 - SQL Injection via WP_Query\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0ef885f-fd62-4513-83cb-65381b99a172"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0ef885f-fd62-4513-83cb-65381b99a172?source=api-prod","cve":"CVE-2022-21661","affectedVersions":">=3.7,<3.7.37|>=3.8,<3.8.37|>=3.9,<3.9.35|>=4.0,<4.0.34|>=4.1,<4.1.34|>=4.2,<4.2.31|>=4.3,<4.3.27|>=4.4,<4.4.26|>=4.5,<4.5.25|>=4.6,<4.6.22|>=4.7,<4.7.22|>=4.8,<4.8.18|>=4.9,<4.9.19|>=5.0,<5.0.15|>=5.1,<5.1.12|>=5.2,<5.2.14|>=5.3,<5.3.11|>=5.4,<5.4.9|>=5.5,<5.5.8|>=5.6,<5.6.7|>=5.7,<5.7.5|>=5.8,<5.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/b13f6a3f-cab6-4aff-a96e-58250fcf655a/wordpress","title":"WordPress Core < 5.5.2 - Misconfiguration That Allows Trigger of New Installation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b13f6a3f-cab6-4aff-a96e-58250fcf655a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b13f6a3f-cab6-4aff-a96e-58250fcf655a?source=api-prod","cve":"CVE-2020-28037","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b1446daf-662d-479c-8fc5-80b27b04d6c4/wordpress","title":"WordPress Core < 2.0.7 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"b1446daf-662d-479c-8fc5-80b27b04d6c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b1446daf-662d-479c-8fc5-80b27b04d6c4?source=api-prod","cve":"CVE-2007-0262","affectedVersions":"<=2.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/b16d675f-1b62-4e3e-b91b-7bdb1e70a221/wordpress","title":"WordPress Core < 2.09 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-02-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b16d675f-1b62-4e3e-b91b-7bdb1e70a221"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b16d675f-1b62-4e3e-b91b-7bdb1e70a221?source=api-prod","cve":"CVE-2007-1049","affectedVersions":"<2.0.9|=2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/b170ac00-5d5c-46ef-95f3-e98ef4528999/wordpress","title":"WordPress Core 6.4.0 - 6.4.1 - Remote Code Execution POP Chain\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b170ac00-5d5c-46ef-95f3-e98ef4528999"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b170ac00-5d5c-46ef-95f3-e98ef4528999?source=api-prod","cve":"CVE-2024-31211","affectedVersions":"=6.4.0|=6.4.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/b54af5b0-d79a-4fb2-965f-d3ff4956dc5a/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Author+) Information Exposure via attachment_submitbox_metadata()\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"b54af5b0-d79a-4fb2-965f-d3ff4956dc5a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b54af5b0-d79a-4fb2-965f-d3ff4956dc5a?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5541170-fd01-4d6d-934c-bfce446b3b55/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Authenticated (Author+) Unauthorized Sticky Post Modification via REST API\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5541170-fd01-4d6d-934c-bfce446b3b55"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5541170-fd01-4d6d-934c-bfce446b3b55?source=api-prod","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5582e89-83e6-4898-b9fe-09eddeb5f7ae/wordpress","title":"WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5582e89-83e6-4898-b9fe-09eddeb5f7ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5582e89-83e6-4898-b9fe-09eddeb5f7ae?source=api-prod","cve":"CVE-2022-4973","affectedVersions":"<=3.6.1|>=3.7,<=3.7.38|>=3.8,<=3.8.38|>=3.9,<=3.9.36|>=4.0,<=4.0.35|>=4.1,<=4.1.35|>=4.2,<=4.2.32|>=4.3,<=4.3.28|>=4.4,<=4.4.27|>=4.5,<=4.5.26|>=4.6,<=4.6.23|>=4.7,<=4.7.23|>=4.8,<=4.8.19|>=4.9,<=4.9.20|>=5.0,<=5.0.16|>=5.1,<=5.1.13|>=5.2,<=5.2.15|>=5.3,<=5.3.12|>=5.4,<=5.4.10|>=5.5,<=5.5.9|>=5.6,<=5.6.8|>=5.7,<=5.7.6|>=5.8,<=5.8.4|>=5.9,<=5.9.3|>=6.0,<=6.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5e0b875-ba8c-438f-b2b1-6c713ef604e5/wordpress","title":"WordPress Core < 4.4 - Brute Force Password Recovery Tokens\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5e0b875-ba8c-438f-b2b1-6c713ef604e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5e0b875-ba8c-438f-b2b1-6c713ef604e5?source=api-prod","cve":"CVE-2014-6412","affectedVersions":"<4.4","severity":"high"},{"advisoryId":"WPSECADV/WF/b5ebc99d-b82a-452b-8f53-bd96135aeecb/wordpress","title":"WordPress Core < 5.8.3 - Super Admin Multi-Site Installation Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5ebc99d-b82a-452b-8f53-bd96135aeecb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5ebc99d-b82a-452b-8f53-bd96135aeecb?source=api-prod","cve":"CVE-2022-21663","affectedVersions":">=3.7,<3.7.37|>=3.8,<3.8.37|>=3.9,<3.9.35|>=4.0,<4.0.34|>=4.1,<4.1.34|>=4.2,<4.2.31|>=4.3,<4.3.27|>=4.4,<4.4.26|>=4.5,<4.5.25|>=4.6,<4.6.22|>=4.7,<4.7.22|>=4.8,<4.8.18|>=4.9,<4.9.19|>=5.0,<5.0.15|>=5.1,<5.1.12|>=5.2,<5.2.14|>=5.3,<5.3.11|>=5.4,<5.4.9|>=5.5,<5.5.8|>=5.6,<5.6.7|>=5.7,<5.7.5|>=5.8,<5.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/b6066883-20e0-440d-9a96-7f4b06c670d2/wordpress","title":"WordPress Core < 4.8.2 - Cross-Site Scripting via Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"b6066883-20e0-440d-9a96-7f4b06c670d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b6066883-20e0-440d-9a96-7f4b06c670d2?source=api-prod","cve":"CVE-2017-14726","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b6b6fb24-f70b-44b0-a1e8-12ebc0e0c105/wordpress","title":"WordPress Core < 5.4.1 - Private Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b6b6fb24-f70b-44b0-a1e8-12ebc0e0c105"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b6b6fb24-f70b-44b0-a1e8-12ebc0e0c105?source=api-prod","cve":"CVE-2020-11028","affectedVersions":"<3.7|=5.4|>=3.7,<=3.7.32|>=3.8,<=3.8.32|>=3.9,<=3.9.30|>=4.0,<=4.0.29|>=4.1,<=4.1.29|>=4.2,<=4.2.26|>=4.3,<=4.3.22|>=4.4,<=4.4.21|>=4.5,<=4.5.20|>=4.6,<=4.6.17|>=4.7,<=4.7.16|>=4.8,<=4.8.12|>=4.9,<=4.9.13|>=5.0,<=5.0.8|>=5.1,<=5.1.4|>=5.2,<=5.2.5|>=5.3,<=5.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b7c70db1-5058-45e5-bd12-3e2cab0338ad/wordpress","title":"WordPress Core < 3.3.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7c70db1-5058-45e5-bd12-3e2cab0338ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7c70db1-5058-45e5-bd12-3e2cab0338ad?source=api-prod","cve":"CVE-2012-2400","affectedVersions":"<=3.3.1","severity":"high"},{"advisoryId":"WPSECADV/WF/b7cc5b51-5fb4-470b-8d2d-581eceadde7b/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Request Forgery to Authentication Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7cc5b51-5fb4-470b-8d2d-581eceadde7b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7cc5b51-5fb4-470b-8d2d-581eceadde7b?source=api-prod","cve":"CVE-2014-9033","affectedVersions":"<3.7|>=3.7,<=3.7.3|>=3.8,<=3.8.3|>=3.9,<=3.9.1","severity":"high"},{"advisoryId":"WPSECADV/WF/b801e7d9-0ca0-471e-a524-af19ea0d85be/wordpress","title":"WordPress Core 5.4 - 5.8 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"b801e7d9-0ca0-471e-a524-af19ea0d85be"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b801e7d9-0ca0-471e-a524-af19ea0d85be?source=api-prod","cve":"CVE-2021-39201","affectedVersions":">=5.4,<5.4.7|>=5.5,<5.5.6|>=5.6,<5.6.5|>=5.7,<5.7.3|>=5.8,<5.8.1","severity":"high"},{"advisoryId":"WPSECADV/WF/bb6182e8-ba5c-4873-aa18-45a79191c8c5/wordpress","title":"WordPress Core < 4.8.3 - SQL Injection due to Double Prepare approach\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb6182e8-ba5c-4873-aa18-45a79191c8c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb6182e8-ba5c-4873-aa18-45a79191c8c5?source=api-prod","cve":"CVE-2017-16510","affectedVersions":"<3.7|>=3.7,<=3.7.22|>=3.8,<=3.8.22|>=3.9,<=3.9.20|>=4.0,<=4.0.19|>=4.1,<=4.1.19|>=4.2,<=4.2.16|>=4.3,<=4.3.12|>=4.4,<=4.4.11|>=4.5,<=4.5.10|>=4.6,<=4.6.7|>=4.7,<=4.7.6|>=4.8,<=4.8.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/bba3eeeb-5e7e-4ec3-9db0-02c44585647a/wordpress","title":"WordPress Core < 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Embed Discovery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"bba3eeeb-5e7e-4ec3-9db0-02c44585647a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bba3eeeb-5e7e-4ec3-9db0-02c44585647a?source=api-prod","affectedVersions":"<4.1.38|>=4.2,<4.2.35|>=4.3,<4.3.31|>=4.4,<4.4.30|>=4.5,<4.5.29|>=4.6,<4.6.26|>=4.7,<4.7.26|>=4.8,<4.8.22|>=4.9,<4.9.23|>=5.0,<5.0.19|>=5.1,<5.1.16|>=5.2,<5.2.18|>=5.3,<5.3.15|>=5.4,<5.4.13|>=5.5,<5.5.12|>=5.6,<5.6.11|>=5.7,<5.7.9|>=5.8,<5.8.7|>=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bbe9eed9-9a96-47da-95fa-b942817a9d4f/wordpress","title":"WordPress Core < 4.8.2 - Directory Traversal via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"bbe9eed9-9a96-47da-95fa-b942817a9d4f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bbe9eed9-9a96-47da-95fa-b942817a9d4f?source=api-prod","cve":"CVE-2017-14722","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc0d36f8-6569-49a1-b722-5cf57c4bb32a/wordpress","title":"WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc0d36f8-6569-49a1-b722-5cf57c4bb32a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc0d36f8-6569-49a1-b722-5cf57c4bb32a?source=api-prod","cve":"CVE-2024-6307","affectedVersions":">=5.9,<=5.9.9|>=6.0,<=6.0.8|>=6.1,<=6.1.6|>=6.2,<=6.2.5|>=6.3,<=6.3.4|>=6.4,<=6.4.4|>=6.5,<=6.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc5886e8-a520-48e4-9976-2e92b37e4bdf/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Authenticated (Contributor+) Denial of Service via Block Editor URL Details\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc5886e8-a520-48e4-9976-2e92b37e4bdf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc5886e8-a520-48e4-9976-2e92b37e4bdf?source=api-prod","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc6a8c0e-1136-41ff-bfc2-450434aa6326/wordpress","title":"WordPress Core < 5.4.2 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc6a8c0e-1136-41ff-bfc2-450434aa6326"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc6a8c0e-1136-41ff-bfc2-450434aa6326?source=api-prod","cve":"CVE-2020-4048","affectedVersions":"<3.7|>=3.7,<=3.7.33|>=3.8,<=3.8.33|>=3.9,<=3.9.31|>=4.0,<=4.0.30|>=4.1,<=4.1.30|>=4.2,<=4.2.27|>=4.3,<=4.3.23|>=4.4,<=4.4.22|>=4.5,<=4.5.21|>=4.6,<=4.6.18|>=4.7,<=4.7.17|>=4.8,<=4.8.13|>=4.9,<=4.9.14|>=5.0,<=5.0.9|>=5.1,<=5.1.5|>=5.2,<=5.2.6|>=5.3,<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/bd087d06-5395-4dfd-a288-2c3271a62842/wordpress","title":"WordPress Core 6.8 -  7.0.1 - Unauthenticated SQL Injection via author__not_in Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd087d06-5395-4dfd-a288-2c3271a62842"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd087d06-5395-4dfd-a288-2c3271a62842?source=api-prod","cve":"CVE-2026-60137","affectedVersions":">=6.8,<6.8.5|>=6.9,<6.9.5|>=7.0,<7.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/bd715375-6bf8-4602-9554-b1f81aa5afa2/wordpress","title":"WordPress Core <= 2.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd715375-6bf8-4602-9554-b1f81aa5afa2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd715375-6bf8-4602-9554-b1f81aa5afa2?source=api-prod","cve":"CVE-2007-3140","affectedVersions":"<=2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/bdc84664-2a04-4cc6-ac3f-48bfd432691f/wordpress","title":"WordPress Core 4.7.0-6.3.1 - Denial of Service via Cache Poisoning\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"bdc84664-2a04-4cc6-ac3f-48bfd432691f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdc84664-2a04-4cc6-ac3f-48bfd432691f?source=api-prod","affectedVersions":">=4.7,<=4.7.26|>=4.8,<=4.8.22|>=4.9,<=4.9.23|>=5.0,<=5.0.19|>=5.1,<=5.1.16|>=5.2,<=5.2.18|>=5.3,<=5.3.15|>=5.4,<=5.4.13|>=5.5,<=5.5.12|>=5.6,<=5.6.11|>=5.7,<=5.7.9|>=5.8,<=5.8.7|>=5.9,<=5.9.7|>=6.0,<=6.0.5|>=6.1,<=6.1.3|>=6.2,<=6.2.2|>=6.3,<=6.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/be4515d8-0d5d-4925-a9a4-64ba9d51fe02/wordpress","title":"WordPress Core <= 2.0.4 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"be4515d8-0d5d-4925-a9a4-64ba9d51fe02"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be4515d8-0d5d-4925-a9a4-64ba9d51fe02?source=api-prod","cve":"CVE-2006-6017","affectedVersions":"<=2.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/beb70eb8-9a9c-4116-832c-337fc2a03329/wordpress","title":"WordPress Core < 5.5.2 - Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"beb70eb8-9a9c-4116-832c-337fc2a03329"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/beb70eb8-9a9c-4116-832c-337fc2a03329?source=api-prod","cve":"CVE-2020-28039","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bf48087a-f729-488a-8e40-f4e010ccd5a7/wordpress","title":"WordPress Core < 1.5.1.3 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"bf48087a-f729-488a-8e40-f4e010ccd5a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bf48087a-f729-488a-8e40-f4e010ccd5a7?source=api-prod","cve":"CVE-2005-2110","affectedVersions":"<=1.5.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/bfcbf652-6cb4-4f3e-9032-ad262e8c8480/wordpress","title":"WordPress Core < 5.2.3 - Stored Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"bfcbf652-6cb4-4f3e-9032-ad262e8c8480"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bfcbf652-6cb4-4f3e-9032-ad262e8c8480?source=api-prod","cve":"CVE-2019-16218","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.12|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/c0bba475-b498-4c2d-a3f2-f4766a2b8616/wordpress","title":"WordPress Core <= 3.5.1 - Denial of Service via wp-postpass cookie\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"c0bba475-b498-4c2d-a3f2-f4766a2b8616"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c0bba475-b498-4c2d-a3f2-f4766a2b8616?source=api-prod","cve":"CVE-2013-2173","affectedVersions":"<3.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c2385865-ff03-4daf-bf81-3ec3ea11c91f/wordpress","title":"WordPress Core < 4.2.4 - Cross-Site Scripting in Theme Preview\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2385865-ff03-4daf-bf81-3ec3ea11c91f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2385865-ff03-4daf-bf81-3ec3ea11c91f?source=api-prod","cve":"CVE-2015-5734","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/c248606f-2d79-46c1-8975-e111b9118ceb/wordpress","title":"WordPress Core < 3.1.2 - Incorrect Authorization for Contributor-level users\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"c248606f-2d79-46c1-8975-e111b9118ceb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c248606f-2d79-46c1-8975-e111b9118ceb?source=api-prod","cve":"CVE-2011-1762","affectedVersions":"<=3.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c272f769-65da-4963-aff0-8f68a277ea63/wordpress","title":"WordPress Core < 5.8.3 - Authenticated (Author+) Stored Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"c272f769-65da-4963-aff0-8f68a277ea63"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c272f769-65da-4963-aff0-8f68a277ea63?source=api-prod","cve":"CVE-2022-21662","affectedVersions":">=3.7,<3.7.37|>=3.8,<3.8.37|>=3.9,<3.9.35|>=4.0,<4.0.34|>=4.1,<4.1.34|>=4.2,<4.2.31|>=4.3,<4.3.27|>=4.4,<4.4.26|>=4.5,<4.5.25|>=4.6,<4.6.22|>=4.7,<4.7.22|>=4.8,<4.8.18|>=4.9,<4.9.19|>=5.0,<5.0.15|>=5.1,<5.1.12|>=5.2,<5.2.14|>=5.3,<5.3.11|>=5.4,<5.4.9|>=5.5,<5.5.8|>=5.6,<5.6.7|>=5.7,<5.7.5|>=5.8,<5.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/c34ef5e3-afcd-4686-861f-5e382812233a/wordpress","title":"WordPress Core <= 7.1 - Forced Theme Install/Preview and Selector Injection via Theme Installer Route\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c34ef5e3-afcd-4686-861f-5e382812233a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c34ef5e3-afcd-4686-861f-5e382812233a?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c38a5e59-3233-4b37-bd6f-baf5dc9f9a01/wordpress","title":"WordPress Core < 4.9.7 - Authenticated Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c38a5e59-3233-4b37-bd6f-baf5dc9f9a01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c38a5e59-3233-4b37-bd6f-baf5dc9f9a01?source=api-prod","cve":"CVE-2018-12895","affectedVersions":"<3.7|>=3.7,<=3.7.26|>=3.8,<=3.8.26|>=3.9,<=3.9.24|>=4.0,<=4.0.23|>=4.1,<=4.1.23|>=4.2,<=4.2.20|>=4.3,<=4.3.16|>=4.4,<=4.4.15|>=4.5,<=4.5.14|>=4.6,<=4.6.11|>=4.7,<=4.7.10|>=4.8,<=4.8.6|>=4.9,<=4.9.6","severity":"high"},{"advisoryId":"WPSECADV/WF/c399687c-bb00-4b72-a17f-e3bf04918259/wordpress","title":"WordPress Core < 5.0.1 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"c399687c-bb00-4b72-a17f-e3bf04918259"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c399687c-bb00-4b72-a17f-e3bf04918259?source=api-prod","cve":"CVE-2018-20152","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3b42bd3-f7d3-43d1-bdd8-4389fd82e1e9/wordpress","title":"WordPress Core < 2.0.7 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3b42bd3-f7d3-43d1-bdd8-4389fd82e1e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3b42bd3-f7d3-43d1-bdd8-4389fd82e1e9?source=api-prod","cve":"CVE-2007-0233","affectedVersions":"<=2.0.6","severity":"high"},{"advisoryId":"WPSECADV/WF/c3ecda09-ecee-4e97-ae6f-92d52b0589e5/wordpress","title":"WordPress <= 6.8.2 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3ecda09-ecee-4e97-ae6f-92d52b0589e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3ecda09-ecee-4e97-ae6f-92d52b0589e5?source=api-prod","cve":"CVE-2025-58674","affectedVersions":"<=4.7|>=4.7,<=4.7.30|>=4.8,<=4.8.26|>=4.9,<=4.9.27|>=5.0,<=5.0.23|>=5.1,<=5.1.20|>=5.2,<=5.2.22|>=5.3,<=5.3.19|>=5.4,<=5.4.17|>=5.5,<=5.5.16|>=5.6,<=5.6.15|>=5.7,<=5.7.13|>=5.8,<=5.8.11|>=5.9,<=5.9.11|>=6.0,<=6.0.10|>=6.1,<=6.1.8|>=6.2,<=6.2.7|>=6.3,<=6.3.6|>=6.4,<=6.4.6|>=6.5,<=6.5.6|>=6.6,<=6.6.3|>=6.7,<=6.7.3|>=6.8,<=6.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3f9898b-0aa0-4dd1-9298-96c853dbef5c/wordpress","title":"WordPress Core <= 7.0.2 - Unauthenticated Sensitive Information Exposure via Comment Feeds\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3f9898b-0aa0-4dd1-9298-96c853dbef5c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3f9898b-0aa0-4dd1-9298-96c853dbef5c?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c41aadb1-e1a6-4bda-ac94-c461c320e78f/wordpress","title":"WordPress Core <= 7.1 - HTML API set_modifiable_text() Comment Boundary Break\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c41aadb1-e1a6-4bda-ac94-c461c320e78f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c41aadb1-e1a6-4bda-ac94-c461c320e78f?source=api-prod","affectedVersions":"=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"low"},{"advisoryId":"WPSECADV/WF/c510063e-1c64-40fa-842a-e7efd3dc550a/wordpress","title":"WordPress Core < 5.2.3 - Reflected Cross-Site Scripting via Shortcode Previews\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c510063e-1c64-40fa-842a-e7efd3dc550a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c510063e-1c64-40fa-842a-e7efd3dc550a?source=api-prod","cve":"CVE-2019-16219","affectedVersions":"<3.7|>=3.7,<=3.7.29|>=3.8,<=3.8.29|>=3.9,<=3.9.27|>=4.0,<=4.0.26|>=4.1,<=4.1.26|>=4.2,<=4.2.23|>=4.3,<=4.3.19|>=4.4,<=4.4.18|>=4.5,<=4.5.17|>=4.6,<=4.6.13|>=4.7,<=4.7.12|>=4.8,<=4.8.9|>=4.9,<=4.9.10|>=5.0,<=5.0.5|>=5.1,<=5.1.1|>=5.2,<=5.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c544c86d-e414-49c2-ae57-3293b1a6409d/wordpress","title":"WordPress Core < 3.5.1 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"c544c86d-e414-49c2-ae57-3293b1a6409d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c544c86d-e414-49c2-ae57-3293b1a6409d?source=api-prod","cve":"CVE-2013-0235","affectedVersions":"<=3.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/c5bfa818-65e4-4b36-8b61-6f47b42eb6c5/wordpress","title":"WordPress Core < 4.0.1 - Cross-Site Scripting via media-playlists\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5bfa818-65e4-4b36-8b61-6f47b42eb6c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5bfa818-65e4-4b36-8b61-6f47b42eb6c5?source=api-prod","cve":"CVE-2014-9032","affectedVersions":"<3.7|=4.0|>=3.7,<=3.7.4|>=3.8,<=3.8.4|>=3.9,<=3.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/c6670e56-ae81-4b1b-8274-bf355a411e92/wordpress","title":"WordPress Core <= 2.1.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"c6670e56-ae81-4b1b-8274-bf355a411e92"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c6670e56-ae81-4b1b-8274-bf355a411e92?source=api-prod","cve":"CVE-2007-1244","affectedVersions":"<=2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c674bb2a-8ecf-4aea-a729-c9bdf4ee35fd/wordpress","title":"WordPress Core < 4.5.3 - Authorization Bypass to Remove Category Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"c674bb2a-8ecf-4aea-a729-c9bdf4ee35fd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c674bb2a-8ecf-4aea-a729-c9bdf4ee35fd?source=api-prod","cve":"CVE-2016-5837","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c6ae2633-caf6-4319-ba81-e71a673c89ee/wordpress","title":"WordPress Core < 4.2.4 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"c6ae2633-caf6-4319-ba81-e71a673c89ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c6ae2633-caf6-4319-ba81-e71a673c89ee?source=api-prod","cve":"CVE-2015-2213","affectedVersions":"<3.7|>=3.7,<=3.7.9|>=3.8,<=3.8.9|>=3.9,<=3.9.7|>=4.0,<=4.0.6|>=4.1,<=4.1.6|>=4.2,<=4.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/c77fce42-92e9-43bc-ab3b-599e036ed648/wordpress","title":"WordPress Core < 3.4.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"c77fce42-92e9-43bc-ab3b-599e036ed648"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c77fce42-92e9-43bc-ab3b-599e036ed648?source=api-prod","cve":"CVE-2012-3384","affectedVersions":"<=3.4","severity":"high"},{"advisoryId":"WPSECADV/WF/c7d04f7d-d114-4104-a7cb-298c148e2b6d/wordpress","title":"WordPress Core <= 2.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"c7d04f7d-d114-4104-a7cb-298c148e2b6d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c7d04f7d-d114-4104-a7cb-298c148e2b6d?source=api-prod","cve":"CVE-2007-1894","affectedVersions":"<=2.0.9|>=2.1,<=2.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8313827-f3ce-451d-869a-99684f58daff/wordpress","title":"WordPress Core < 2.0.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8313827-f3ce-451d-869a-99684f58daff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8313827-f3ce-451d-869a-99684f58daff?source=api-prod","cve":"CVE-2006-1263","affectedVersions":"<2.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c83a2c4d-a264-49ec-85f1-e3f48715d725/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Author+) CSS Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"c83a2c4d-a264-49ec-85f1-e3f48715d725"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c83a2c4d-a264-49ec-85f1-e3f48715d725?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c84e274e-292f-4d0f-b847-4a786b4cb15a/wordpress","title":"WordPress Core < 2.1 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"c84e274e-292f-4d0f-b847-4a786b4cb15a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c84e274e-292f-4d0f-b847-4a786b4cb15a?source=api-prod","cve":"CVE-2007-0541","affectedVersions":"<2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c90844e1-0502-4d08-888f-4835f63f8dd0/wordpress","title":"WordPress Core < 5.9.1 - jQuery Prototype Pollution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"c90844e1-0502-4d08-888f-4835f63f8dd0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c90844e1-0502-4d08-888f-4835f63f8dd0?source=api-prod","cve":"CVE-2021-20083","affectedVersions":"<3.7|>=3.7,<=3.7.37|>=3.8,<=3.8.37|>=3.9,<=3.9.35|>=4.0,<=4.0.34|>=4.1,<=4.1.34|>=4.2,<=4.2.31|>=4.3,<=4.3.27|>=4.4,<=4.4.26|>=4.5,<=4.5.25|>=4.6,<=4.6.22|>=4.7,<=4.7.22|>=4.8,<=4.8.18|>=4.9,<=4.9.19|>=5.0,<=5.0.15|>=5.1,<=5.1.12|>=5.2,<=5.2.14|>=5.3,<=5.3.11|>=5.4,<=5.4.9|>=5.5,<=5.5.8|>=5.6,<=5.6.7|>=5.7,<=5.7.5|>=5.8,<=5.8.3|>=5.9,<=5.9.1","severity":"high"},{"advisoryId":"WPSECADV/WF/c95505e3-6851-476e-af40-bb841eb01be7/wordpress","title":"WordPress Core < 5.2.4 - Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"c95505e3-6851-476e-af40-bb841eb01be7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c95505e3-6851-476e-af40-bb841eb01be7?source=api-prod","cve":"CVE-2019-17669","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.13|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ca4824fb-192a-499d-bf92-aa59410d8d4a/wordpress","title":"WordPress Core < 4.8.2 - Cross-Site Scripting via Template Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"ca4824fb-192a-499d-bf92-aa59410d8d4a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca4824fb-192a-499d-bf92-aa59410d8d4a?source=api-prod","cve":"CVE-2017-14720","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/caa66246-7ffa-4944-ae3a-9c872300b7d4/wordpress","title":"WordPress Core < 5.0.1 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"caa66246-7ffa-4944-ae3a-9c872300b7d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/caa66246-7ffa-4944-ae3a-9c872300b7d4?source=api-prod","cve":"CVE-2018-20151","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"high"},{"advisoryId":"WPSECADV/WF/cac1c1fa-7d6c-43c3-885e-9be320cb8f83/wordpress","title":"WordPress Core <= 7.0.2 - Authenticated (Subscriber+) Email Change Confirmation Bypass\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"cac1c1fa-7d6c-43c3-885e-9be320cb8f83"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cac1c1fa-7d6c-43c3-885e-9be320cb8f83?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb072bfa-991a-4839-996d-fdc803427076/wordpress","title":"WordPress Core < 2.8.1 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-12-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb072bfa-991a-4839-996d-fdc803427076"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb072bfa-991a-4839-996d-fdc803427076?source=api-prod","cve":"CVE-2008-6762","affectedVersions":"<2.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc0d15ab-e0a4-4ac5-8558-23aeaf00b11a/wordpress","title":"WordPress Core < 2.0.3 - Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"cc0d15ab-e0a4-4ac5-8558-23aeaf00b11a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc0d15ab-e0a4-4ac5-8558-23aeaf00b11a?source=api-prod","cve":"CVE-2006-2667","affectedVersions":"<=2.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/cddbb0f8-fc73-46d7-80af-edb69227084f/wordpress","title":"WordPress Core <= 7.0.2 - Unauthenticated Blind Server-Side Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"cddbb0f8-fc73-46d7-80af-edb69227084f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cddbb0f8-fc73-46d7-80af-edb69227084f?source=api-prod","affectedVersions":">=4.7.0,<=4.7.33|>=4.8.0,<=4.8.28|>=4.9.0,<=4.9.29|>=5.0.0,<=5.0.25|>=5.1.0,<=5.1.22|>=5.2.0,<=5.2.24|>=5.3.0,<=5.3.21|>=5.4.0,<=5.4.19|>=5.5.0,<=5.5.18|>=5.6.0,<=5.6.17|>=5.7.0,<=5.7.15|>=5.8.0,<=5.8.13|>=5.9.0,<=5.9.13|>=6.0.0,<=6.0.12|>=6.1.0,<=6.1.10|>=6.2.0,<=6.2.9|>=6.3.0,<=6.3.8|>=6.4.0,<=6.4.8|>=6.5.0,<=6.5.8|>=6.6.0,<=6.6.5|>=6.7.0,<=6.7.5|>=6.8.0,<=6.8.6|>=6.9.0,<=6.9.5|>=7.0.0,<=7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/cec5bfa6-96ed-4a5a-be19-63434af32c89/wordpress","title":"WordPress Core < 4.2.1 - Cross-Site Scripting via Comments\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"cec5bfa6-96ed-4a5a-be19-63434af32c89"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cec5bfa6-96ed-4a5a-be19-63434af32c89?source=api-prod","cve":"CVE-2015-3440","affectedVersions":"=4.2|>=4.0,<=4.0.3|>=4.1,<=4.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/cefb979e-2b5b-4820-a350-ee106131f0f9/wordpress","title":"WordPress Core < 3.1.1 - Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"cefb979e-2b5b-4820-a350-ee106131f0f9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cefb979e-2b5b-4820-a350-ee106131f0f9?source=api-prod","cve":"CVE-2011-4957","affectedVersions":"<3.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/cf803368-64ff-4dbe-85ae-af30e18bc833/wordpress","title":"WordPress Core < 2.6 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-07-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"cf803368-64ff-4dbe-85ae-af30e18bc833"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cf803368-64ff-4dbe-85ae-af30e18bc833?source=api-prod","cve":"CVE-2008-3233","affectedVersions":"<2.6","severity":"high"},{"advisoryId":"WPSECADV/WF/d0318ed9-a464-498b-a821-f7746740937c/wordpress","title":"WordPress Core <= 2.8.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-07-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"d0318ed9-a464-498b-a821-f7746740937c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d0318ed9-a464-498b-a821-f7746740937c?source=api-prod","cve":"CVE-2009-2851","affectedVersions":"<=2.8.1","severity":"high"},{"advisoryId":"WPSECADV/WF/d116e432-ded9-4fc1-9509-710269dba5e0/wordpress","title":"WordPress Core < 3.5.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"d116e432-ded9-4fc1-9509-710269dba5e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d116e432-ded9-4fc1-9509-710269dba5e0?source=api-prod","cve":"CVE-2013-2205","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2716f7e-ae73-482a-acf7-772884f0b3ab/wordpress","title":"WordPress Core < 4.8.2 - Cross-Site Scripting in oEmbed\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2716f7e-ae73-482a-acf7-772884f0b3ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2716f7e-ae73-482a-acf7-772884f0b3ab?source=api-prod","cve":"CVE-2017-14724","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d27c2393-64b2-4087-aa91-cbfaec644e13/wordpress","title":"WordPress Core 4.7.0 - 7.1.2 - Conditional Action Hook Injection via Unregistered Post Status or Post Type\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"d27c2393-64b2-4087-aa91-cbfaec644e13"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d27c2393-64b2-4087-aa91-cbfaec644e13?source=api-prod","affectedVersions":">=4.7.0,<=4.7.37|>=4.8.0,<=4.8.32|>=4.9.0,<=4.9.33|>=5.0.0,<=5.0.29|>=5.1.0,<=5.1.26|>=5.2.0,<=5.2.28|>=5.3.0,<=5.3.25|>=5.4.0,<=5.4.23|>=5.5.0,<=5.5.22|>=5.6.0,<=5.6.21|>=5.7.0,<=5.7.19|>=5.8.0,<=5.8.17|>=5.9.0,<=5.9.18|>=6.0.0,<=6.0.16|>=6.1.0,<=6.1.14|>=6.2.0,<=6.2.13|>=6.3.0,<=6.3.12|>=6.4.0,<=6.4.12|>=6.5.0,<=6.5.12|>=6.6.0,<=6.6.9|>=6.7.0,<=6.7.9|>=6.8.0,<=6.8.10|>=6.9.0,<=6.9.9|>=7.0.0,<=7.0.6|>=7.1.0,<=7.1.2","severity":"low"},{"advisoryId":"WPSECADV/WF/d3039831-6a29-48de-bdf3-66cac7655719/wordpress","title":"WordPress Core < 4.9.5 - Authenticated Stored Cross-Site Scripting via Generator Tag\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3039831-6a29-48de-bdf3-66cac7655719"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3039831-6a29-48de-bdf3-66cac7655719?source=api-prod","cve":"CVE-2018-10102","affectedVersions":"<3.7|>=3.7,<=3.7.25|>=3.8,<=3.8.25|>=3.9,<=3.9.23|>=4.0,<=4.0.22|>=4.1,<=4.1.22|>=4.2,<=4.2.19|>=4.3,<=4.3.15|>=4.4,<=4.4.14|>=4.5,<=4.5.13|>=4.6,<=4.6.10|>=4.7,<=4.7.9|>=4.8,<=4.8.5|>=4.9,<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/d311aab4-fca8-4e83-83cf-c4b8350d7dd1/wordpress","title":"SWFUpload <= 2.2.0.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-11-09 20:12:00","sources":[{"name":"Wordfence","remoteId":"d311aab4-fca8-4e83-83cf-c4b8350d7dd1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d311aab4-fca8-4e83-83cf-c4b8350d7dd1?source=api-prod","cve":"CVE-2012-3414","affectedVersions":"<3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d357f92a-3c20-4972-af4d-65053027d31c/wordpress","title":"WordPress Core < 4.7.5 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d357f92a-3c20-4972-af4d-65053027d31c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d357f92a-3c20-4972-af4d-65053027d31c?source=api-prod","cve":"CVE-2017-9066","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"high"},{"advisoryId":"WPSECADV/WF/d5f1ceb3-34b6-4d97-9787-d52a92f84662/wordpress","title":"WordPress Core < 3.5.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"d5f1ceb3-34b6-4d97-9787-d52a92f84662"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d5f1ceb3-34b6-4d97-9787-d52a92f84662?source=api-prod","cve":"CVE-2013-2203","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6a51962-fe99-4911-85c9-a75bd18e74c2/wordpress","title":"WordPress Core < 5.2.4 - Server Side Request Forgery #2\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6a51962-fe99-4911-85c9-a75bd18e74c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6a51962-fe99-4911-85c9-a75bd18e74c2?source=api-prod","cve":"CVE-2019-17670","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.13|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6dfed14-bb6f-4418-bdd8-9c548e63dac0/wordpress","title":"WordPress Core < 4.6 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6dfed14-bb6f-4418-bdd8-9c548e63dac0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6dfed14-bb6f-4418-bdd8-9c548e63dac0?source=api-prod","cve":"CVE-2016-6897","affectedVersions":"<4.6","severity":"high"},{"advisoryId":"WPSECADV/WF/d7d94443-3ab2-4d89-a580-2e9697d28cd7/wordpress","title":"WordPress Core < 3.5.2 -  Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"d7d94443-3ab2-4d89-a580-2e9697d28cd7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7d94443-3ab2-4d89-a580-2e9697d28cd7?source=api-prod","cve":"CVE-2013-2200","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d84cf972-be7e-497c-b360-2ea491e44ad6/wordpress","title":"WordPress Core < 2.8 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-06-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"d84cf972-be7e-497c-b360-2ea491e44ad6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d84cf972-be7e-497c-b360-2ea491e44ad6?source=api-prod","cve":"CVE-2009-2431","affectedVersions":"<=2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d91ea0c9-ee41-4c8f-a16b-8b36c7f0a72e/wordpress","title":"WordPress Core < 3.6.1 - Deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"d91ea0c9-ee41-4c8f-a16b-8b36c7f0a72e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d91ea0c9-ee41-4c8f-a16b-8b36c7f0a72e?source=api-prod","cve":"CVE-2013-4338","affectedVersions":"<=3.6","severity":"high"},{"advisoryId":"WPSECADV/WF/d928b738-d8ed-447a-b604-e71e90d4d23d/wordpress","title":"WordPress Core < 2.8.4 - Forced Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"d928b738-d8ed-447a-b604-e71e90d4d23d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d928b738-d8ed-447a-b604-e71e90d4d23d?source=api-prod","cve":"CVE-2009-2762","affectedVersions":"<=2.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/da760bcf-b252-4b88-9f54-af0a097e3295/wordpress","title":"WordPress Core <= 0.70 - Remote File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2003-06-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"da760bcf-b252-4b88-9f54-af0a097e3295"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da760bcf-b252-4b88-9f54-af0a097e3295?source=api-prod","cve":"CVE-2003-1599","affectedVersions":"<=0.70","severity":"critical"},{"advisoryId":"WPSECADV/WF/da8d1659-c532-4020-be16-527c1437952a/wordpress","title":"WordPress Core < 4.6 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"da8d1659-c532-4020-be16-527c1437952a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da8d1659-c532-4020-be16-527c1437952a?source=api-prod","cve":"CVE-2016-10148","affectedVersions":"<4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/dab0ddfb-6e30-4bde-95fb-90570579ff04/wordpress","title":"WordPress Core <= 2.0.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2006-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"dab0ddfb-6e30-4bde-95fb-90570579ff04"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dab0ddfb-6e30-4bde-95fb-90570579ff04?source=api-prod","cve":"CVE-2006-0985","affectedVersions":"<=2.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/dbcdeda4-85b7-48d6-b89d-1d1756d183d2/wordpress","title":"WordPress Core < 3.5.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"dbcdeda4-85b7-48d6-b89d-1d1756d183d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dbcdeda4-85b7-48d6-b89d-1d1756d183d2?source=api-prod","cve":"CVE-2013-0237","affectedVersions":"<=3.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/dc1ae2c7-1eff-4976-8f88-f0b97a5cf323/wordpress","title":"WordPress Core <= 7.1 - Authenticated (Administrator+) Missing Authorization to Network Plugin Activation (Multisite)\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"dc1ae2c7-1eff-4976-8f88-f0b97a5cf323"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc1ae2c7-1eff-4976-8f88-f0b97a5cf323?source=api-prod","affectedVersions":"<=6.6.7|=7.1|>=6.7,<=6.7.7|>=6.8,<=6.8.8|>=6.9,<=6.9.7|>=7.0,<=7.0.4","severity":"low"},{"advisoryId":"WPSECADV/WF/ddd06190-d0c1-445d-8c6f-4c7df3248db4/wordpress","title":"WordPress Core < 6.0.3 - Cross-Site Request Forgery via wp-trackback.php\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ddd06190-d0c1-445d-8c6f-4c7df3248db4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ddd06190-d0c1-445d-8c6f-4c7df3248db4?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/e1e973e3-f2a2-465c-aec7-5a7d4290c00b/wordpress","title":"WordPress Core <= 3.5.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1e973e3-f2a2-465c-aec7-5a7d4290c00b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1e973e3-f2a2-465c-aec7-5a7d4290c00b?source=api-prod","cve":"CVE-2012-2399","affectedVersions":"<=3.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/e363c09a-4381-4b3a-951c-9a0ff5669016/wordpress","title":"WordPress Core < 6.5.2 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e363c09a-4381-4b3a-951c-9a0ff5669016"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e363c09a-4381-4b3a-951c-9a0ff5669016?source=api-prod","cve":"CVE-2024-4439","affectedVersions":">=6.0,<=6.0.7|>=6.1,<=6.1.5|>=6.2,<=6.2.4|>=6.3,<=6.3.3|>=6.4,<=6.4.3|>=6.5,<=6.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/e5252b2f-c1a1-4fec-abaf-ad234affdcfb/wordpress","title":"WordPress Core < 4.9.1 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5252b2f-c1a1-4fec-abaf-ad234affdcfb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5252b2f-c1a1-4fec-abaf-ad234affdcfb?source=api-prod","cve":"CVE-2017-17092","affectedVersions":"<3.7|=4.9|>=3.7,<=3.7.23|>=3.8,<=3.8.23|>=3.9,<=3.9.21|>=4.0,<=4.0.20|>=4.1,<=4.1.20|>=4.2,<=4.2.17|>=4.3,<=4.3.13|>=4.4,<=4.4.12|>=4.5,<=4.5.11|>=4.6,<=4.6.8|>=4.7,<=4.7.7|>=4.8,<=4.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e5539ad8-4203-4d22-9a40-0ed6e0471e19/wordpress","title":"WordPress Core 2.2.1 - Backdoor\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-03-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5539ad8-4203-4d22-9a40-0ed6e0471e19"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5539ad8-4203-4d22-9a40-0ed6e0471e19?source=api-prod","cve":"CVE-2007-1277","affectedVersions":"=2.2.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/e5dc87cd-4f45-4faf-b1e2-64e94eacb180/wordpress","title":"WordPress Core - Informational < 6.8 - Weak Hashing Algorithm\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5dc87cd-4f45-4faf-b1e2-64e94eacb180"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5dc87cd-4f45-4faf-b1e2-64e94eacb180?source=api-prod","cve":"CVE-2012-6707","affectedVersions":"<6.8","severity":"low"},{"advisoryId":"WPSECADV/WF/e620328e-f4f4-4f3a-8767-efbc676f72a4/wordpress","title":"WordPress Core < 4.7.1 - Cross-Site Request Forgery via Uploading Flash File\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"e620328e-f4f4-4f3a-8767-efbc676f72a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e620328e-f4f4-4f3a-8767-efbc676f72a4?source=api-prod","cve":"CVE-2017-5489","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"high"},{"advisoryId":"WPSECADV/WF/e669ae60-c015-4b84-86a8-56aab9fe23bd/wordpress","title":"WordPress Core < 2.6.5 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-12-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"e669ae60-c015-4b84-86a8-56aab9fe23bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e669ae60-c015-4b84-86a8-56aab9fe23bd?source=api-prod","cve":"CVE-2008-5278","affectedVersions":"<=2.6.4","severity":"high"},{"advisoryId":"WPSECADV/WF/e72e87ae-f5c0-4582-a644-b90e93d98e74/wordpress","title":"WordPress Core < 4.4.2 - Open Redirect via wp_validate_redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"e72e87ae-f5c0-4582-a644-b90e93d98e74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e72e87ae-f5c0-4582-a644-b90e93d98e74?source=api-prod","cve":"CVE-2016-2221","affectedVersions":"<3.7|>=3.7,<=3.7.12|>=3.8,<=3.8.12|>=3.9,<=3.9.10|>=4.0,<=4.0.9|>=4.1,<=4.1.9|>=4.2,<=4.2.6|>=4.3,<=4.3.2|>=4.4,<=4.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8687bf7-4172-4cc3-bd6e-830fc5fc28e9/wordpress","title":"WordPress Core < 1.2.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2004-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8687bf7-4172-4cc3-bd6e-830fc5fc28e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8687bf7-4172-4cc3-bd6e-830fc5fc28e9?source=api-prod","cve":"CVE-2004-1559","affectedVersions":"<1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8fcc105-0b37-47a7-a726-fee33b86790e/wordpress","title":"WordPress Core <= 2.0.9 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8fcc105-0b37-47a7-a726-fee33b86790e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8fcc105-0b37-47a7-a726-fee33b86790e?source=api-prod","cve":"CVE-2008-0192","affectedVersions":"<=2.0.9","severity":"high"},{"advisoryId":"WPSECADV/WF/e9ec79e5-9f02-4a73-9437-58821ca855ef/wordpress","title":"WordPress Core 1.5 - 2.3.1 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-12-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"e9ec79e5-9f02-4a73-9437-58821ca855ef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e9ec79e5-9f02-4a73-9437-58821ca855ef?source=api-prod","cve":"CVE-2007-6013","affectedVersions":">=1.5,<=2.3.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/ea26eb81-e6d1-4c6d-95f4-fd1b2d919632/wordpress","title":"WordPress Core < 4.5 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea26eb81-e6d1-4c6d-95f4-fd1b2d919632"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea26eb81-e6d1-4c6d-95f4-fd1b2d919632?source=api-prod","cve":"CVE-2016-4029","affectedVersions":"<4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/eadbfb77-fb9a-4363-acc8-8dd9b87820eb/wordpress","title":"WordPress Core < 6.0.3 - Stored Cross-Site Scripting via wp-mail.php\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"eadbfb77-fb9a-4363-acc8-8dd9b87820eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eadbfb77-fb9a-4363-acc8-8dd9b87820eb?source=api-prod","cve":"CVE-2022-43504","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/eaea07ad-e6f1-4f23-a508-94203967af7f/wordpress","title":"WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"eaea07ad-e6f1-4f23-a508-94203967af7f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eaea07ad-e6f1-4f23-a508-94203967af7f?source=api-prod","cve":"CVE-2019-17672","affectedVersions":"<3.7|>=3.7,<=3.7.30|>=3.8,<=3.8.30|>=3.9,<=3.9.28|>=4.0,<=4.0.27|>=4.1,<=4.1.27|>=4.2,<=4.2.24|>=4.3,<=4.3.20|>=4.4,<=4.4.19|>=4.5,<=4.5.18|>=4.6,<=4.6.15|>=4.7,<=4.7.13|>=4.7,<=4.7.14|>=4.8,<=4.8.10|>=4.9,<=4.9.11|>=5.0,<=5.0.6|>=5.1,<=5.1.2|>=5.2,<=5.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/eb56da48-c928-42d4-8c71-de72f879d430/wordpress","title":"WordPress Core < 4.5.3 - Password Change via Stolen Cookie\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb56da48-c928-42d4-8c71-de72f879d430"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb56da48-c928-42d4-8c71-de72f879d430?source=api-prod","cve":"CVE-2016-5838","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ec8ad817-9716-4d29-a02a-57eb9aa58a13/wordpress","title":"WordPress Core <= 1.2 - HTTP Response Splitting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2004-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec8ad817-9716-4d29-a02a-57eb9aa58a13"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec8ad817-9716-4d29-a02a-57eb9aa58a13?source=api-prod","cve":"CVE-2004-1584","affectedVersions":"<1.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ecdcad88-c926-490f-8e83-09d92ba080f8/wordpress","title":"WordPress Core < 5.0.1 Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"ecdcad88-c926-490f-8e83-09d92ba080f8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ecdcad88-c926-490f-8e83-09d92ba080f8?source=api-prod","cve":"CVE-2018-20150","affectedVersions":"<3.7|=5.0|>=3.7,<=3.7.27|>=3.8,<=3.8.27|>=3.9,<=3.9.25|>=4.0,<=4.0.24|>=4.1,<=4.1.24|>=4.2,<=4.2.21|>=4.3,<=4.3.17|>=4.4,<=4.4.16|>=4.5,<=4.5.15|>=4.6,<=4.6.12|>=4.7,<=4.7.11|>=4.8,<=4.8.7|>=4.9,<=4.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/edc0d90f-41a7-430a-a994-57be7fba8753/wordpress","title":"WordPress Core < 2.6.2 - Cryptographic Weakness\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2008-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"edc0d90f-41a7-430a-a994-57be7fba8753"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/edc0d90f-41a7-430a-a994-57be7fba8753?source=api-prod","cve":"CVE-2008-4107","affectedVersions":"<=2.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/edcf46b6-368e-49c0-b2c3-99bf6e2d358f/wordpress","title":"WordPress Core < 6.2.1 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"edcf46b6-368e-49c0-b2c3-99bf6e2d358f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/edcf46b6-368e-49c0-b2c3-99bf6e2d358f?source=api-prod","cve":"CVE-2023-2745","affectedVersions":"<4.1.38|>=4.2,<4.2.35|>=4.3,<4.3.31|>=4.4,<4.4.30|>=4.5,<4.5.29|>=4.6,<4.6.26|>=4.7,<4.7.26|>=4.8,<4.8.22|>=4.9,<4.9.23|>=5.0,<5.0.19|>=5.1,<5.1.16|>=5.2,<5.2.18|>=5.3,<5.3.15|>=5.4,<5.4.13|>=5.5,<5.5.12|>=5.6,<5.6.11|>=5.7,<5.7.9|>=5.8,<5.8.7|>=5.9,<5.9.6|>=6.0,<6.0.4|>=6.1,<6.1.2|>=6.2,<6.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee01dab6-8e10-43aa-bc20-1f389f1e7d07/wordpress","title":"WordPress Core < 3.1.3 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"ee01dab6-8e10-43aa-bc20-1f389f1e7d07"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee01dab6-8e10-43aa-bc20-1f389f1e7d07?source=api-prod","cve":"CVE-2011-3128","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee2c5df2-250a-4e35-9219-2630d8d9253a/wordpress","title":"WordPress Core < 3.1.3 - Clickjacking\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2011-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"ee2c5df2-250a-4e35-9219-2630d8d9253a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee2c5df2-250a-4e35-9219-2630d8d9253a?source=api-prod","cve":"CVE-2011-3127","affectedVersions":"<=3.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/f0691a2a-734e-4726-97a1-9e0c796c2fb5/wordpress","title":"WordPress Core < 6.0.3 - Information Disclosure (Email Address)\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"f0691a2a-734e-4726-97a1-9e0c796c2fb5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f0691a2a-734e-4726-97a1-9e0c796c2fb5?source=api-prod","cve":"CVE-2022-43504","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f10fdf31-6941-4d41-8c15-90ed61addc2f/wordpress","title":"WordPress Core < 4.7.1 - Stored Cross-Site Scripting via theme directory name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"f10fdf31-6941-4d41-8c15-90ed61addc2f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f10fdf31-6941-4d41-8c15-90ed61addc2f?source=api-prod","cve":"CVE-2017-5490","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f21c70aa-22be-456d-93bb-f478b70deaef/wordpress","title":"WordPress Core < 4.7.5 - Cross-Site Scripting via Customizer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"f21c70aa-22be-456d-93bb-f478b70deaef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f21c70aa-22be-456d-93bb-f478b70deaef?source=api-prod","cve":"CVE-2017-9063","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f25d0409-dbca-4c5a-9f43-fc03e5307d0f/wordpress","title":"WordPress Core < 1.5.1.3 - Arbitrary Email Content Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f25d0409-dbca-4c5a-9f43-fc03e5307d0f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f25d0409-dbca-4c5a-9f43-fc03e5307d0f?source=api-prod","cve":"CVE-2005-2109","affectedVersions":"<=1.5.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f29f9290-1f98-4019-997b-e33f2c151a5d/wordpress","title":"WordPress Core <= 3.3.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"f29f9290-1f98-4019-997b-e33f2c151a5d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f29f9290-1f98-4019-997b-e33f2c151a5d?source=api-prod","cve":"CVE-2012-6633","affectedVersions":"<3.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3ff473c-c629-487c-9b18-e074534c7b79/wordpress","title":"WordPress Core < 5.5.2 - Spam Embed on Multisite Installations\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3ff473c-c629-487c-9b18-e074534c7b79"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3ff473c-c629-487c-9b18-e074534c7b79?source=api-prod","cve":"CVE-2020-28033","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f419b83c-9253-4ca6-a02a-7daad1819581/wordpress","title":"WordPress Core < 3.3.2 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"f419b83c-9253-4ca6-a02a-7daad1819581"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f419b83c-9253-4ca6-a02a-7daad1819581?source=api-prod","cve":"CVE-2012-2402","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f4393526-6357-40ee-a024-f461d0430a62/wordpress","title":"WordPress Core <= 2.0.5 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f4393526-6357-40ee-a024-f461d0430a62"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f4393526-6357-40ee-a024-f461d0430a62?source=api-prod","cve":"CVE-2007-0107","affectedVersions":"<=2.0.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/f460d529-f15e-4c23-ad67-94d3f4bc0c2e/wordpress","title":"WordPress Core <= 2.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"f460d529-f15e-4c23-ad67-94d3f4bc0c2e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f460d529-f15e-4c23-ad67-94d3f4bc0c2e?source=api-prod","cve":"CVE-2007-2627","affectedVersions":"<=2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f4a4e3ef-ee88-4175-8628-c5511c20bf23/wordpress","title":"WordPress Core < 4.7.1 - Cross-Site Scripting via Name and Version Header of Plugin\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"f4a4e3ef-ee88-4175-8628-c5511c20bf23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f4a4e3ef-ee88-4175-8628-c5511c20bf23?source=api-prod","cve":"CVE-2017-5488","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f50bca0a-7089-4b4e-820f-d311fdb88cf1/wordpress","title":"WordPress Core 2.0.2 - 2.0.5 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f50bca0a-7089-4b4e-820f-d311fdb88cf1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f50bca0a-7089-4b4e-820f-d311fdb88cf1?source=api-prod","cve":"CVE-2006-4743","affectedVersions":">=2.0.2,<=2.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/f582eb1d-fcd0-4758-9922-969f8eb6efea/wordpress","title":"WordPress Core <= 2.2.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2007-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f582eb1d-fcd0-4758-9922-969f8eb6efea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f582eb1d-fcd0-4758-9922-969f8eb6efea?source=api-prod","cve":"CVE-2007-4154","affectedVersions":"<=2.0.10|>=2.2,<=2.2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f7d66176-73a8-4076-8ae0-1f1fd8260f8e/wordpress","title":"WordPress Core < 4.7.5 - Mishandling Post Meta Values via XML-RPC\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"f7d66176-73a8-4076-8ae0-1f1fd8260f8e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7d66176-73a8-4076-8ae0-1f1fd8260f8e?source=api-prod","cve":"CVE-2017-9062","affectedVersions":"<3.7|>=3.7,<=3.7.20|>=3.8,<=3.8.20|>=3.9,<=3.9.18|>=4.0,<=4.0.17|>=4.1,<=4.1.17|>=4.2,<=4.2.14|>=4.3,<=4.3.10|>=4.4,<=4.4.9|>=4.5,<=4.5.8|>=4.6,<=4.6.5|>=4.7,<=4.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f8758fd2-9f43-4e31-b496-50b77180bc07/wordpress","title":"WordPress Core < 2.1 - Cross-Site Request Forgery to Denial of Service\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"f8758fd2-9f43-4e31-b496-50b77180bc07"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f8758fd2-9f43-4e31-b496-50b77180bc07?source=api-prod","cve":"CVE-2013-7233","affectedVersions":"<=2.0.11","severity":"high"},{"advisoryId":"WPSECADV/WF/f9bfa726-40e1-4417-9d59-289dbb3a17ff/wordpress","title":"WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9bfa726-40e1-4417-9d59-289dbb3a17ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9bfa726-40e1-4417-9d59-289dbb3a17ff?source=api-prod","cve":"CVE-2020-28035","affectedVersions":"<3.7|>=3.7,<=3.7.34|>=3.8,<=3.8.34|>=3.9,<=3.9.32|>=4.0,<=4.0.31|>=4.1,<=4.1.31|>=4.2,<=4.2.28|>=4.3,<=4.3.24|>=4.4,<=4.4.23|>=4.5,<=4.5.22|>=4.6,<=4.6.19|>=4.7,<=4.7.18|>=4.8,<=4.8.14|>=4.9,<=4.9.15|>=5.0,<=5.0.10|>=5.1,<=5.1.6|>=5.2,<=5.2.7|>=5.3,<=5.3.4|>=5.4,<=5.4.2|>=5.5,<=5.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f9ce0ae8-4729-4236-b4e8-e5726f4d3101/wordpress","title":"WordPress Core <= 2.8.5 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2009-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9ce0ae8-4729-4236-b4e8-e5726f4d3101"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9ce0ae8-4729-4236-b4e8-e5726f4d3101?source=api-prod","cve":"CVE-2009-3890","affectedVersions":"<=2.8.5","severity":"high"},{"advisoryId":"WPSECADV/WF/fa139703-e83e-4a19-a801-464b72a2acc4/wordpress","title":"WordPress Core < 6.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting via Comments\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"fa139703-e83e-4a19-a801-464b72a2acc4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fa139703-e83e-4a19-a801-464b72a2acc4?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/faf3fb76-847f-447f-b6c6-49bd0d30d3c7/wordpress","title":"WordPress Core < 1.5.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"faf3fb76-847f-447f-b6c6-49bd0d30d3c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/faf3fb76-847f-447f-b6c6-49bd0d30d3c7?source=api-prod","cve":"CVE-2005-1687","affectedVersions":"<1.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/fbe42214-0a01-4b9c-8149-68c47082d9d9/wordpress","title":"WordPress Core < 1.5.2 - Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2005-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"fbe42214-0a01-4b9c-8149-68c47082d9d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fbe42214-0a01-4b9c-8149-68c47082d9d9?source=api-prod","cve":"CVE-2005-2612","affectedVersions":"<=1.5.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/fceae728-ea72-4586-848f-3a45b6f9699a/wordpress","title":"WordPress Core < 3.4.1 - Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"fceae728-ea72-4586-848f-3a45b6f9699a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fceae728-ea72-4586-848f-3a45b6f9699a?source=api-prod","cve":"CVE-2012-3385","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd23b9cd-3492-4f6f-b90d-5215e175c1e3/wordpress","title":"WordPress Core < 4.9.5 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd23b9cd-3492-4f6f-b90d-5215e175c1e3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd23b9cd-3492-4f6f-b90d-5215e175c1e3?source=api-prod","cve":"CVE-2018-10100","affectedVersions":"<3.7|>=3.7,<=3.7.25|>=3.8,<=3.8.25|>=3.9,<=3.9.23|>=4.0,<=4.0.22|>=4.1,<=4.1.22|>=4.2,<=4.2.19|>=4.3,<=4.3.15|>=4.4,<=4.4.14|>=4.5,<=4.5.13|>=4.6,<=4.6.10|>=4.7,<=4.7.9|>=4.8,<=4.8.5|>=4.9,<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd4ac2b0-120a-4e68-bf8d-e039336fe9dc/wordpress","title":"WordPress Core < 4.7.1 -  Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd4ac2b0-120a-4e68-bf8d-e039336fe9dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd4ac2b0-120a-4e68-bf8d-e039336fe9dc?source=api-prod","cve":"CVE-2017-5491","affectedVersions":"<3.7|>=3.7,<=3.7.16|>=3.8,<=3.8.16|>=3.9,<=3.9.14|>=4.0,<=4.0.13|>=4.1,<=4.1.13|>=4.2,<=4.2.10|>=4.3,<=4.3.6|>=4.4,<=4.4.5|>=4.5,<=4.5.4|>=4.6,<=4.6.1|>=4.7,<=4.7.0","severity":"high"},{"advisoryId":"WPSECADV/WF/fe1301d9-738b-485f-b8db-c23c16e4f99d/wordpress","title":"WordPress Core < 4.8.2 - Cross-Site Scripting via Javascript: and Data: URLs\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-09-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"fe1301d9-738b-485f-b8db-c23c16e4f99d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe1301d9-738b-485f-b8db-c23c16e4f99d?source=api-prod","cve":"CVE-2017-14718","affectedVersions":"<3.7|>=3.7,<=3.7.21|>=3.8,<=3.8.21|>=3.9,<=3.9.19|>=4.0,<=4.0.18|>=4.1,<=4.1.18|>=4.2,<=4.2.15|>=4.3,<=4.3.11|>=4.4,<=4.4.10|>=4.5,<=4.5.9|>=4.6,<=4.6.6|>=4.7,<=4.7.5|>=4.8,<=4.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ff4b47d8-28c1-4706-91d9-0285f419147e/wordpress","title":"WordPress Core < 6.0.3 - SQL Injection via WP_Date_Query\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ff4b47d8-28c1-4706-91d9-0285f419147e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ff4b47d8-28c1-4706-91d9-0285f419147e?source=api-prod","affectedVersions":"<=3.6.1|>=3.7,<=3.7.39|>=3.8,<=3.8.39|>=3.9,<=3.9.37|>=4.0,<=4.0.36|>=4.1,<=4.1.36|>=4.2,<=4.2.33|>=4.3,<=4.3.29|>=4.4,<=4.4.28|>=4.5,<=4.5.27|>=4.6,<=4.6.24|>=4.7,<=4.7.24|>=4.8,<=4.8.20|>=4.9,<=4.9.21|>=5.0,<=5.0.17|>=5.1,<=5.1.14|>=5.2,<=5.2.16|>=5.3,<=5.3.13|>=5.4,<=5.4.11|>=5.5,<=5.5.10|>=5.6,<=5.6.9|>=5.7,<=5.7.7|>=5.8,<=5.8.5|>=5.9,<=5.9.4|>=6.0,<=6.0.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/ffa252d6-0fe2-4d1f-802f-b902084822a7/wordpress","title":"WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name #2\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ffa252d6-0fe2-4d1f-802f-b902084822a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ffa252d6-0fe2-4d1f-802f-b902084822a7?source=api-prod","cve":"CVE-2016-5833","affectedVersions":"<3.7|>=3.7,<=3.7.14|>=3.8,<=3.8.14|>=3.9,<=3.9.12|>=4.0,<=4.0.11|>=4.1,<=4.1.11|>=4.2,<=4.2.8|>=4.3,<=4.3.4|>=4.4,<=4.4.3|>=4.5,<=4.5.2","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_61636164656d6973742d636f7265811c9dc5_gen.json b/internal/data/assets/plugin_61636164656d6973742d636f7265811c9dc5_gen.json
new file mode 100644
index 00000000..71d40653
--- /dev/null
+++ b/internal/data/assets/plugin_61636164656d6973742d636f7265811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/f0cae732-9551-4f25-acf0-92d6d2e09bab/academist-core","title":"Academist Core <= 1.4.1 - Unauthenticated Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"f0cae732-9551-4f25-acf0-92d6d2e09bab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f0cae732-9551-4f25-acf0-92d6d2e09bab?source=api-prod","cve":"CVE-2026-112820","affectedVersions":"<=1.4.1","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6163662d657874656e6465642d70726f811c9dc5_gen.json b/internal/data/assets/plugin_6163662d657874656e6465642d70726f811c9dc5_gen.json
index 44663253..3899343f 100644
--- a/internal/data/assets/plugin_6163662d657874656e6465642d70726f811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6163662d657874656e6465642d70726f811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/b8a7a925-2b9e-43bc-b649-c7ec518e063c/acf-extended-pro","title":"Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8a7a925-2b9e-43bc-b649-c7ec518e063c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8a7a925-2b9e-43bc-b649-c7ec518e063c?source=api-prod","affectedVersions":"<=0.9.2.6","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2630b75d-eb3e-445d-96c9-f2e643b22d53/acf-extended-pro","title":"Advanced Custom Fields: Extended  0.9.2.7 - Unauthenticated Arbitrary Non-Admin Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"2630b75d-eb3e-445d-96c9-f2e643b22d53"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2630b75d-eb3e-445d-96c9-f2e643b22d53?source=api-prod","cve":"CVE-2026-94262","affectedVersions":"=0.9.2.7","severity":"high"},{"advisoryId":"WPSECADV/WF/26e22e63-d2a6-4ee7-b574-e2979bacfb6a/acf-extended-pro","title":"Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"26e22e63-d2a6-4ee7-b574-e2979bacfb6a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26e22e63-d2a6-4ee7-b574-e2979bacfb6a?source=api-prod","cve":"CVE-2026-94264","affectedVersions":">=0.8.9.4,<=0.9.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/8396cd8d-6546-4014-9109-bd407fd7d363/acf-extended-pro","title":"Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Privilege Escalation via Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"8396cd8d-6546-4014-9109-bd407fd7d363"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8396cd8d-6546-4014-9109-bd407fd7d363?source=api-prod","cve":"CVE-2026-94268","affectedVersions":"=0.9.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/ac64371c-9f91-4875-a5e3-9b0f4460acd9/acf-extended-pro","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac64371c-9f91-4875-a5e3-9b0f4460acd9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac64371c-9f91-4875-a5e3-9b0f4460acd9?source=api-prod","cve":"CVE-2026-94267","affectedVersions":"<0.9.2.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/b8a7a925-2b9e-43bc-b649-c7ec518e063c/acf-extended-pro","title":"Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8a7a925-2b9e-43bc-b649-c7ec518e063c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8a7a925-2b9e-43bc-b649-c7ec518e063c?source=api-prod","affectedVersions":"<=0.9.2.6","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6163662d657874656e646564811c9dc5_gen.json b/internal/data/assets/plugin_6163662d657874656e646564811c9dc5_gen.json
index 40e91e54..98b265f2 100644
--- a/internal/data/assets/plugin_6163662d657874656e646564811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6163662d657874656e646564811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/72a179af-25a0-40f2-a585-8d25c0289782/acf-extended","title":"Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Privilege Escalation via Administrator Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"72a179af-25a0-40f2-a585-8d25c0289782"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72a179af-25a0-40f2-a585-8d25c0289782?source=api-prod","cve":"CVE-2026-12526","affectedVersions":"<0.9.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/9954ef37-bae0-48fb-9654-ff54750c46c2/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"9954ef37-bae0-48fb-9654-ff54750c46c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9954ef37-bae0-48fb-9654-ff54750c46c2?source=api-prod","cve":"CVE-2026-2839","affectedVersions":"<=0.9.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae9cd51f-e6c8-4aec-a044-376075e9540a/acf-extended","title":"Advanced Custom Fields: Extended <= 0.8.8.6 - Admin+ SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-12-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae9cd51f-e6c8-4aec-a044-376075e9540a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae9cd51f-e6c8-4aec-a044-376075e9540a?source=api-prod","cve":"CVE-2021-24865","affectedVersions":"<=0.8.8.6","severity":"high"},{"advisoryId":"WPSECADV/WF/bb5b64d1-8e13-44aa-b158-4cb6fd50e7cd/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb5b64d1-8e13-44aa-b158-4cb6fd50e7cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb5b64d1-8e13-44aa-b158-4cb6fd50e7cd?source=api-prod","cve":"CVE-2026-81284","affectedVersions":"<=0.9.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/bd332f49-5aa9-4207-89db-84692a6430e0/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-28 10:09:02","sources":[{"name":"Wordfence","remoteId":"bd332f49-5aa9-4207-89db-84692a6430e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd332f49-5aa9-4207-89db-84692a6430e0?source=api-prod","cve":"CVE-2026-8809","affectedVersions":"<=0.9.2.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/c508cb73-53e6-4ebe-b3d0-285908b722c9/acf-extended","title":"Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_form\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-02 18:43:18","sources":[{"name":"Wordfence","remoteId":"c508cb73-53e6-4ebe-b3d0-285908b722c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c508cb73-53e6-4ebe-b3d0-285908b722c9?source=api-prod","cve":"CVE-2025-13486","affectedVersions":">=0.9.0.5,<=0.9.1.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/d44f8af2-3525-4b00-afa8-a908250cc838/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.1 - Unauthenticated Privilege Escalation via Insert User Form Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-19 21:07:19","sources":[{"name":"Wordfence","remoteId":"d44f8af2-3525-4b00-afa8-a908250cc838"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d44f8af2-3525-4b00-afa8-a908250cc838?source=api-prod","cve":"CVE-2025-14533","affectedVersions":"<=0.9.2.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/dcbe0c72-d518-45d3-a220-896a51071b26/acf-extended","title":"Advanced Custom Fields: Extended <= 0.8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"dcbe0c72-d518-45d3-a220-896a51071b26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dcbe0c72-d518-45d3-a220-896a51071b26?source=api-prod","cve":"CVE-2023-5292","affectedVersions":"<=0.8.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e0e96e24-3dcd-4f8a-a483-2c5a6fce32b2/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"e0e96e24-3dcd-4f8a-a483-2c5a6fce32b2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e0e96e24-3dcd-4f8a-a483-2c5a6fce32b2?source=api-prod","cve":"CVE-2026-112312","affectedVersions":"<=0.9.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e81c7783-b0c3-4ede-bff1-57a1a69cdbc7/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 09:26:44","sources":[{"name":"Wordfence","remoteId":"e81c7783-b0c3-4ede-bff1-57a1a69cdbc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e81c7783-b0c3-4ede-bff1-57a1a69cdbc7?source=api-prod","cve":"CVE-2026-112313","affectedVersions":"<=0.9.2.7","severity":"high"},{"advisoryId":"WPSECADV/WF/ed7f3f80-4d08-440f-b990-b1099a565ed0/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 21:31:34","sources":[{"name":"Wordfence","remoteId":"ed7f3f80-4d08-440f-b990-b1099a565ed0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed7f3f80-4d08-440f-b990-b1099a565ed0?source=api-prod","cve":"CVE-2026-10752","affectedVersions":"<=0.9.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3339f80-d131-4201-87c7-dd4dba0d7f20/acf-extended","title":"Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3339f80-d131-4201-87c7-dd4dba0d7f20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3339f80-d131-4201-87c7-dd4dba0d7f20?source=api-prod","cve":"CVE-2026-80467","affectedVersions":">=0.9.2.2,<=0.9.2.6","severity":"high"},{"advisoryId":"WPSECADV/WF/f8544784-1994-47e2-be39-568d0ab9ee00/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-12 09:54:49","sources":[{"name":"Wordfence","remoteId":"f8544784-1994-47e2-be39-568d0ab9ee00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f8544784-1994-47e2-be39-568d0ab9ee00?source=api-prod","cve":"CVE-2025-15463","affectedVersions":"<=0.9.2.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2630b75d-eb3e-445d-96c9-f2e643b22d53/acf-extended","title":"Advanced Custom Fields: Extended  0.9.2.7 - Unauthenticated Arbitrary Non-Admin Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"2630b75d-eb3e-445d-96c9-f2e643b22d53"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2630b75d-eb3e-445d-96c9-f2e643b22d53?source=api-prod","cve":"CVE-2026-94262","affectedVersions":"=0.9.2.7","severity":"high"},{"advisoryId":"WPSECADV/WF/26e22e63-d2a6-4ee7-b574-e2979bacfb6a/acf-extended","title":"Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"26e22e63-d2a6-4ee7-b574-e2979bacfb6a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26e22e63-d2a6-4ee7-b574-e2979bacfb6a?source=api-prod","cve":"CVE-2026-94264","affectedVersions":">=0.8.9.4,<=0.9.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d98419c-b411-4579-8225-c9695d2099e7/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"2d98419c-b411-4579-8225-c9695d2099e7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d98419c-b411-4579-8225-c9695d2099e7?source=api-prod","cve":"CVE-2026-112311","affectedVersions":"<=0.9.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/72a179af-25a0-40f2-a585-8d25c0289782/acf-extended","title":"Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Privilege Escalation via Administrator Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"72a179af-25a0-40f2-a585-8d25c0289782"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72a179af-25a0-40f2-a585-8d25c0289782?source=api-prod","cve":"CVE-2026-12526","affectedVersions":"<0.9.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/8396cd8d-6546-4014-9109-bd407fd7d363/acf-extended","title":"Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Privilege Escalation via Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"8396cd8d-6546-4014-9109-bd407fd7d363"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8396cd8d-6546-4014-9109-bd407fd7d363?source=api-prod","cve":"CVE-2026-94268","affectedVersions":"=0.9.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/8e0e1557-3861-44e3-b7ca-8b2d19550e25/acf-extended","title":"Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e0e1557-3861-44e3-b7ca-8b2d19550e25"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e0e1557-3861-44e3-b7ca-8b2d19550e25?source=api-prod","cve":"CVE-2026-94263","affectedVersions":">=0.9.2.4,<=0.9.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/9954ef37-bae0-48fb-9654-ff54750c46c2/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"9954ef37-bae0-48fb-9654-ff54750c46c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9954ef37-bae0-48fb-9654-ff54750c46c2?source=api-prod","cve":"CVE-2026-2839","affectedVersions":"<=0.9.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/ac64371c-9f91-4875-a5e3-9b0f4460acd9/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac64371c-9f91-4875-a5e3-9b0f4460acd9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac64371c-9f91-4875-a5e3-9b0f4460acd9?source=api-prod","cve":"CVE-2026-94267","affectedVersions":"<0.9.2.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/ae9cd51f-e6c8-4aec-a044-376075e9540a/acf-extended","title":"Advanced Custom Fields: Extended <= 0.8.8.6 - Admin+ SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-12-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae9cd51f-e6c8-4aec-a044-376075e9540a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae9cd51f-e6c8-4aec-a044-376075e9540a?source=api-prod","cve":"CVE-2021-24865","affectedVersions":"<=0.8.8.6","severity":"high"},{"advisoryId":"WPSECADV/WF/bb5b64d1-8e13-44aa-b158-4cb6fd50e7cd/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb5b64d1-8e13-44aa-b158-4cb6fd50e7cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb5b64d1-8e13-44aa-b158-4cb6fd50e7cd?source=api-prod","cve":"CVE-2026-81284","affectedVersions":"<=0.9.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/bd332f49-5aa9-4207-89db-84692a6430e0/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-28 10:09:02","sources":[{"name":"Wordfence","remoteId":"bd332f49-5aa9-4207-89db-84692a6430e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd332f49-5aa9-4207-89db-84692a6430e0?source=api-prod","cve":"CVE-2026-8809","affectedVersions":"<=0.9.2.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/c508cb73-53e6-4ebe-b3d0-285908b722c9/acf-extended","title":"Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_form\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-02 18:43:18","sources":[{"name":"Wordfence","remoteId":"c508cb73-53e6-4ebe-b3d0-285908b722c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c508cb73-53e6-4ebe-b3d0-285908b722c9?source=api-prod","cve":"CVE-2025-13486","affectedVersions":">=0.9.0.5,<=0.9.1.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/d44f8af2-3525-4b00-afa8-a908250cc838/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.1 - Unauthenticated Privilege Escalation via Insert User Form Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-19 21:07:19","sources":[{"name":"Wordfence","remoteId":"d44f8af2-3525-4b00-afa8-a908250cc838"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d44f8af2-3525-4b00-afa8-a908250cc838?source=api-prod","cve":"CVE-2025-14533","affectedVersions":"<=0.9.2.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/dcbe0c72-d518-45d3-a220-896a51071b26/acf-extended","title":"Advanced Custom Fields: Extended <= 0.8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"dcbe0c72-d518-45d3-a220-896a51071b26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dcbe0c72-d518-45d3-a220-896a51071b26?source=api-prod","cve":"CVE-2023-5292","affectedVersions":"<=0.8.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e0e96e24-3dcd-4f8a-a483-2c5a6fce32b2/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"e0e96e24-3dcd-4f8a-a483-2c5a6fce32b2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e0e96e24-3dcd-4f8a-a483-2c5a6fce32b2?source=api-prod","cve":"CVE-2026-112312","affectedVersions":"<=0.9.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e81c7783-b0c3-4ede-bff1-57a1a69cdbc7/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 09:26:44","sources":[{"name":"Wordfence","remoteId":"e81c7783-b0c3-4ede-bff1-57a1a69cdbc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e81c7783-b0c3-4ede-bff1-57a1a69cdbc7?source=api-prod","cve":"CVE-2026-112313","affectedVersions":"<=0.9.2.7","severity":"high"},{"advisoryId":"WPSECADV/WF/ed7f3f80-4d08-440f-b990-b1099a565ed0/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 21:31:34","sources":[{"name":"Wordfence","remoteId":"ed7f3f80-4d08-440f-b990-b1099a565ed0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed7f3f80-4d08-440f-b990-b1099a565ed0?source=api-prod","cve":"CVE-2026-10752","affectedVersions":"<=0.9.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3339f80-d131-4201-87c7-dd4dba0d7f20/acf-extended","title":"Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3339f80-d131-4201-87c7-dd4dba0d7f20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3339f80-d131-4201-87c7-dd4dba0d7f20?source=api-prod","cve":"CVE-2026-80467","affectedVersions":">=0.9.2.2,<=0.9.2.6","severity":"high"},{"advisoryId":"WPSECADV/WF/f8544784-1994-47e2-be39-568d0ab9ee00/acf-extended","title":"Advanced Custom Fields: Extended <= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-12 09:54:49","sources":[{"name":"Wordfence","remoteId":"f8544784-1994-47e2-be39-568d0ab9ee00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f8544784-1994-47e2-be39-568d0ab9ee00?source=api-prod","cve":"CVE-2025-15463","affectedVersions":"<=0.9.2.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_61642d776964676574811c9dc5_gen.json b/internal/data/assets/plugin_61642d776964676574811c9dc5_gen.json
index 741c5dbe..2b67470e 100644
--- a/internal/data/assets/plugin_61642d776964676574811c9dc5_gen.json
+++ b/internal/data/assets/plugin_61642d776964676574811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/9604fccc-ed8b-480b-ab56-ffa341631b52/ad-widget","title":"WordPress Ad Widget <= 2.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"9604fccc-ed8b-480b-ab56-ffa341631b52"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9604fccc-ed8b-480b-ab56-ffa341631b52?source=api-prod","cve":"CVE-2024-33696","affectedVersions":"<=2.20.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f31bf9cd-fbf3-4f7a-bddd-ddd44c899710/ad-widget","title":"WordPress Ad Widget <= 2.11.0 - Local File Inclusion\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"f31bf9cd-fbf3-4f7a-bddd-ddd44c899710"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f31bf9cd-fbf3-4f7a-bddd-ddd44c899710?source=api-prod","affectedVersions":"<2.12.0","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/9604fccc-ed8b-480b-ab56-ffa341631b52/ad-widget","title":"WordPress Ad Widget <= 2.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"9604fccc-ed8b-480b-ab56-ffa341631b52"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9604fccc-ed8b-480b-ab56-ffa341631b52?source=api-prod","cve":"CVE-2024-33696","affectedVersions":"<=2.20.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f31bf9cd-fbf3-4f7a-bddd-ddd44c899710/ad-widget","title":"WordPress Ad Widget <= 2.11.0 - Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-01-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"f31bf9cd-fbf3-4f7a-bddd-ddd44c899710"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f31bf9cd-fbf3-4f7a-bddd-ddd44c899710?source=api-prod","cve":"CVE-2017-20289","affectedVersions":"<2.12.0","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_61646d696e2d636f6c756d6e732d666f722d6163662d6669656c6473811c9dc5_gen.json b/internal/data/assets/plugin_61646d696e2d636f6c756d6e732d666f722d6163662d6669656c6473811c9dc5_gen.json
index d6cbcbac..5df5f58b 100644
--- a/internal/data/assets/plugin_61646d696e2d636f6c756d6e732d666f722d6163662d6669656c6473811c9dc5_gen.json
+++ b/internal/data/assets/plugin_61646d696e2d636f6c756d6e732d666f722d6163662d6669656c6473811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/950908c8-9afc-4fc4-aa02-0c9790cdcb4c/admin-columns-for-acf-fields","title":"Admin Columns for ACF Fields <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"950908c8-9afc-4fc4-aa02-0c9790cdcb4c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/950908c8-9afc-4fc4-aa02-0c9790cdcb4c?source=api-prod","cve":"CVE-2026-15262","affectedVersions":"<=0.3.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/950908c8-9afc-4fc4-aa02-0c9790cdcb4c/admin-columns-for-acf-fields","title":"Admin Columns for ACF Fields < 0.3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"950908c8-9afc-4fc4-aa02-0c9790cdcb4c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/950908c8-9afc-4fc4-aa02-0c9790cdcb4c?source=api-prod","cve":"CVE-2026-15262","affectedVersions":"<0.3.3.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_616476616e6365642d706f73742d626c6f636b811c9dc5_gen.json b/internal/data/assets/plugin_616476616e6365642d706f73742d626c6f636b811c9dc5_gen.json
index 9664b230..f7f8b6e0 100644
--- a/internal/data/assets/plugin_616476616e6365642d706f73742d626c6f636b811c9dc5_gen.json
+++ b/internal/data/assets/plugin_616476616e6365642d706f73742d626c6f636b811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/8fb6c221-d885-42b5-977c-39e8608e3e31/advanced-post-block","title":"Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"8fb6c221-d885-42b5-977c-39e8608e3e31"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8fb6c221-d885-42b5-977c-39e8608e3e31?source=api-prod","cve":"CVE-2024-0908","affectedVersions":"<=1.13.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/10dba353-f12f-49c0-a0fb-8de112a43031/advanced-post-block","title":"Advanced Post Block – Display Your Posts Exactly How You Want <= 2.5.1 - Authenticated (Contributor+) Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"10dba353-f12f-49c0-a0fb-8de112a43031"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10dba353-f12f-49c0-a0fb-8de112a43031?source=api-prod","cve":"CVE-2026-115955","affectedVersions":"<=2.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8fb6c221-d885-42b5-977c-39e8608e3e31/advanced-post-block","title":"Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"8fb6c221-d885-42b5-977c-39e8608e3e31"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8fb6c221-d885-42b5-977c-39e8608e3e31?source=api-prod","cve":"CVE-2024-0908","affectedVersions":"<=1.13.4","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6173706f73652d696d706f727465722d6578706f72746572811c9dc5_gen.json b/internal/data/assets/plugin_6173706f73652d696d706f727465722d6578706f72746572811c9dc5_gen.json
index 87a8359f..c0f16ff7 100644
--- a/internal/data/assets/plugin_6173706f73652d696d706f727465722d6578706f72746572811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6173706f73652d696d706f727465722d6578706f72746572811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/b605027a-4d65-4bfe-9daa-5b2f88811bc7/aspose-importer-exporter","title":"Aspose Importer & Exporter (Discontinued) < 3.0 - Arbitrary File Download\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b605027a-4d65-4bfe-9daa-5b2f88811bc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b605027a-4d65-4bfe-9daa-5b2f88811bc7?source=api-prod","affectedVersions":"<=2.0","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/b605027a-4d65-4bfe-9daa-5b2f88811bc7/aspose-importer-exporter","title":"Aspose Importer & Exporter (Discontinued) < 3.0 - Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b605027a-4d65-4bfe-9daa-5b2f88811bc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b605027a-4d65-4bfe-9daa-5b2f88811bc7?source=api-prod","cve":"CVE-2015-20124","affectedVersions":"<=2.0","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6173706f73652d7064662d6578706f72746572811c9dc5_gen.json b/internal/data/assets/plugin_6173706f73652d7064662d6578706f72746572811c9dc5_gen.json
index bb6a4398..48196bd7 100644
--- a/internal/data/assets/plugin_6173706f73652d7064662d6578706f72746572811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6173706f73652d7064662d6578706f72746572811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/8a87bbfe-8cf5-4bba-90bc-902071b72bca/aspose-pdf-exporter","title":"Aspose.PDF Exporter < 2.0 - Arbitrary File Download\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a87bbfe-8cf5-4bba-90bc-902071b72bca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a87bbfe-8cf5-4bba-90bc-902071b72bca?source=api-prod","affectedVersions":"<2.0","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/8a87bbfe-8cf5-4bba-90bc-902071b72bca/aspose-pdf-exporter","title":"Aspose.PDF Exporter < 2.0 - Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a87bbfe-8cf5-4bba-90bc-902071b72bca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a87bbfe-8cf5-4bba-90bc-902071b72bca?source=api-prod","cve":"CVE-2015-20125","affectedVersions":"<2.0","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_617376657265696e62617365811c9dc5_gen.json b/internal/data/assets/plugin_617376657265696e62617365811c9dc5_gen.json
new file mode 100644
index 00000000..9b9719a6
--- /dev/null
+++ b/internal/data/assets/plugin_617376657265696e62617365811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/02a2341b-6462-4d9b-a4a1-dd8c965df7be/asvereinbase","title":"asVereinbase <= 1.1.7 - Two-Factor Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"02a2341b-6462-4d9b-a4a1-dd8c965df7be"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/02a2341b-6462-4d9b-a4a1-dd8c965df7be?source=api-prod","cve":"CVE-2026-110956","affectedVersions":"<=1.1.7","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6261636b7570811c9dc5_gen.json b/internal/data/assets/plugin_6261636b7570811c9dc5_gen.json
index b6e8b8c5..f215606d 100644
--- a/internal/data/assets/plugin_6261636b7570811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6261636b7570811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/01e8e53c-8d23-4bd3-9291-29f97df7c984/backup","title":"Backup Guard <= 1.5.9 - Authenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"01e8e53c-8d23-4bd3-9291-29f97df7c984"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01e8e53c-8d23-4bd3-9291-29f97df7c984?source=api-prod","cve":"CVE-2021-24155","affectedVersions":"<=1.5.9","severity":"high"},{"advisoryId":"WPSECADV/WF/3a581d5e-11c3-468a-b4a1-6507f898f5ed/backup","title":"Backup Guard <= 1.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"3a581d5e-11c3-468a-b4a1-6507f898f5ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3a581d5e-11c3-468a-b4a1-6507f898f5ed?source=api-prod","cve":"CVE-2022-34148","affectedVersions":"<=1.6.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e2a9d71-21ef-45a1-99ed-477066ce9620/backup","title":"JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e2a9d71-21ef-45a1-99ed-477066ce9620"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e2a9d71-21ef-45a1-99ed-477066ce9620?source=api-prod","cve":"CVE-2020-36668","affectedVersions":"<=1.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e61c868-b430-4aa6-8664-ae237db73d66/backup","title":"BackupGuard <= 1.1.46 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e61c868-b430-4aa6-8664-ae237db73d66"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e61c868-b430-4aa6-8664-ae237db73d66?source=api-prod","cve":"CVE-2017-10837","affectedVersions":"<=1.1.46","severity":"medium"},{"advisoryId":"WPSECADV/WF/463fd745-92ea-4e55-b470-a5f08884169f/backup","title":"Backup Guard <= 1.1.46 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"463fd745-92ea-4e55-b470-a5f08884169f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/463fd745-92ea-4e55-b470-a5f08884169f?source=api-prod","cve":"CVE-2017-18488","affectedVersions":"<1.1.47","severity":"medium"},{"advisoryId":"WPSECADV/WF/4aa0fa80-05dd-4fe1-b7b5-7ed0cf13053c/backup","title":"JetBackup <= 3.1.19.8 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal in 'fileName' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-16 15:21:18","sources":[{"name":"Wordfence","remoteId":"4aa0fa80-05dd-4fe1-b7b5-7ed0cf13053c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4aa0fa80-05dd-4fe1-b7b5-7ed0cf13053c?source=api-prod","cve":"CVE-2026-4853","affectedVersions":"<=3.1.19.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/59532447-1d74-4d34-85f5-d89b65a001d8/backup","title":"JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"59532447-1d74-4d34-85f5-d89b65a001d8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/59532447-1d74-4d34-85f5-d89b65a001d8?source=api-prod","cve":"CVE-2020-36667","affectedVersions":"<=1.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ee267ff-b650-44a5-994b-3a22d34722e8/backup","title":"WordPress Backup and Migrate Plugin – Backup Guard < 1.0.3 - Arbitrary File Upload\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-02-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ee267ff-b650-44a5-994b-3a22d34722e8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ee267ff-b650-44a5-994b-3a22d34722e8?source=api-prod","affectedVersions":"<1.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/81f835ae-322f-417e-8d0f-05b3d75fcb80/backup","title":"JetBackup – Backup, Restore & Migrate 3.1.7.9 - 3.1.23.3 - Authenticated (Subscriber+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"81f835ae-322f-417e-8d0f-05b3d75fcb80"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81f835ae-322f-417e-8d0f-05b3d75fcb80?source=api-prod","cve":"CVE-2026-19453","affectedVersions":">=3.1.7.9,<=3.1.23.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/9ae8de00-ba4c-48d2-a566-13dac0bc4312/backup","title":"JetBackup – WP Backup, Migrate & Restore <= 1.3.9 - Cross-Site Request Forgery to Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"9ae8de00-ba4c-48d2-a566-13dac0bc4312"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ae8de00-ba4c-48d2-a566-13dac0bc4312?source=api-prod","cve":"CVE-2020-36669","affectedVersions":"<=1.3.9","severity":"high"},{"advisoryId":"WPSECADV/WF/aa56cbb5-a01a-4feb-a57e-30b8a3832d32/backup","title":"JetBackup – Backup, Restore & Migrate 3.1.18.8 - 3.1.23.3 - Authenticated (Admin+) Backup Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa56cbb5-a01a-4feb-a57e-30b8a3832d32"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa56cbb5-a01a-4feb-a57e-30b8a3832d32?source=api-prod","cve":"CVE-2026-19454","affectedVersions":">=3.1.18.8,<=3.1.23.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd978ac0-42f2-4746-9430-37458375b588/backup","title":"JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd978ac0-42f2-4746-9430-37458375b588"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd978ac0-42f2-4746-9430-37458375b588?source=api-prod","cve":"CVE-2023-7165","affectedVersions":"<=2.0.9.7","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/01e8e53c-8d23-4bd3-9291-29f97df7c984/backup","title":"Backup Guard <= 1.5.9 - Authenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"01e8e53c-8d23-4bd3-9291-29f97df7c984"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01e8e53c-8d23-4bd3-9291-29f97df7c984?source=api-prod","cve":"CVE-2021-24155","affectedVersions":"<=1.5.9","severity":"high"},{"advisoryId":"WPSECADV/WF/3a581d5e-11c3-468a-b4a1-6507f898f5ed/backup","title":"Backup Guard <= 1.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"3a581d5e-11c3-468a-b4a1-6507f898f5ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3a581d5e-11c3-468a-b4a1-6507f898f5ed?source=api-prod","cve":"CVE-2022-34148","affectedVersions":"<=1.6.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e2a9d71-21ef-45a1-99ed-477066ce9620/backup","title":"JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e2a9d71-21ef-45a1-99ed-477066ce9620"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e2a9d71-21ef-45a1-99ed-477066ce9620?source=api-prod","cve":"CVE-2020-36668","affectedVersions":"<=1.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e61c868-b430-4aa6-8664-ae237db73d66/backup","title":"BackupGuard <= 1.1.46 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e61c868-b430-4aa6-8664-ae237db73d66"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e61c868-b430-4aa6-8664-ae237db73d66?source=api-prod","cve":"CVE-2017-10837","affectedVersions":"<=1.1.46","severity":"medium"},{"advisoryId":"WPSECADV/WF/463fd745-92ea-4e55-b470-a5f08884169f/backup","title":"Backup Guard <= 1.1.46 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"463fd745-92ea-4e55-b470-a5f08884169f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/463fd745-92ea-4e55-b470-a5f08884169f?source=api-prod","cve":"CVE-2017-18488","affectedVersions":"<1.1.47","severity":"medium"},{"advisoryId":"WPSECADV/WF/4aa0fa80-05dd-4fe1-b7b5-7ed0cf13053c/backup","title":"JetBackup <= 3.1.19.8 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal in 'fileName' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-16 15:21:18","sources":[{"name":"Wordfence","remoteId":"4aa0fa80-05dd-4fe1-b7b5-7ed0cf13053c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4aa0fa80-05dd-4fe1-b7b5-7ed0cf13053c?source=api-prod","cve":"CVE-2026-4853","affectedVersions":"<=3.1.19.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/59532447-1d74-4d34-85f5-d89b65a001d8/backup","title":"JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"59532447-1d74-4d34-85f5-d89b65a001d8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/59532447-1d74-4d34-85f5-d89b65a001d8?source=api-prod","cve":"CVE-2020-36667","affectedVersions":"<=1.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ee267ff-b650-44a5-994b-3a22d34722e8/backup","title":"WordPress Backup and Migrate Plugin – Backup Guard < 1.0.3 - Arbitrary File Upload\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-02-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ee267ff-b650-44a5-994b-3a22d34722e8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ee267ff-b650-44a5-994b-3a22d34722e8?source=api-prod","affectedVersions":"<1.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/81f835ae-322f-417e-8d0f-05b3d75fcb80/backup","title":"JetBackup – Backup, Restore & Migrate 3.1.7.9 - 3.1.23.3 - Authenticated (Subscriber+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"81f835ae-322f-417e-8d0f-05b3d75fcb80"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81f835ae-322f-417e-8d0f-05b3d75fcb80?source=api-prod","cve":"CVE-2026-19453","affectedVersions":">=3.1.7.9,<=3.1.23.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/9ae8de00-ba4c-48d2-a566-13dac0bc4312/backup","title":"JetBackup – WP Backup, Migrate & Restore <= 1.3.9 - Cross-Site Request Forgery to Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"9ae8de00-ba4c-48d2-a566-13dac0bc4312"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ae8de00-ba4c-48d2-a566-13dac0bc4312?source=api-prod","cve":"CVE-2020-36669","affectedVersions":"<=1.3.9","severity":"high"},{"advisoryId":"WPSECADV/WF/aa56cbb5-a01a-4feb-a57e-30b8a3832d32/backup","title":"JetBackup – Backup, Restore & Migrate 3.1.18.8 - 3.1.23.3 - Authenticated (Admin+) Backup Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa56cbb5-a01a-4feb-a57e-30b8a3832d32"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa56cbb5-a01a-4feb-a57e-30b8a3832d32?source=api-prod","cve":"CVE-2026-19454","affectedVersions":">=3.1.18.8,<=3.1.23.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e2994731-310b-4e76-9baf-7d7dff231dcc/backup","title":"JetBackup – Backup, Restore & Migrate <= 3.1.24.9 - Authenticated (Admin+) Arbitrary File Write\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"e2994731-310b-4e76-9baf-7d7dff231dcc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e2994731-310b-4e76-9baf-7d7dff231dcc?source=api-prod","cve":"CVE-2026-104068","affectedVersions":"<=3.1.24.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd978ac0-42f2-4746-9430-37458375b588/backup","title":"JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd978ac0-42f2-4746-9430-37458375b588"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd978ac0-42f2-4746-9430-37458375b588?source=api-prod","cve":"CVE-2023-7165","affectedVersions":"<=2.0.9.7","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_626c6f67726f6c6c2d66756e811c9dc5_gen.json b/internal/data/assets/plugin_626c6f67726f6c6c2d66756e811c9dc5_gen.json
index ff5cf6c1..53d6e6d7 100644
--- a/internal/data/assets/plugin_626c6f67726f6c6c2d66756e811c9dc5_gen.json
+++ b/internal/data/assets/plugin_626c6f67726f6c6c2d66756e811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2b2fa832-ed1b-47e9-b9eb-049541530ab6/blogroll-fun","title":"Blogroll Fun – Show Last Post and Last Update Time < 0.8.5 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-07-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b2fa832-ed1b-47e9-b9eb-049541530ab6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b2fa832-ed1b-47e9-b9eb-049541530ab6?source=api-prod","affectedVersions":"<=0.8.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/11b73932-7e0d-418b-8e51-d4fb768a0955/blogroll-fun","title":"Blogroll Fun – Show  Last Post and Last Update Time < 0.8.5 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-07-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"11b73932-7e0d-418b-8e51-d4fb768a0955"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/11b73932-7e0d-418b-8e51-d4fb768a0955?source=api-prod","cve":"CVE-2014-125132","affectedVersions":"<0.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/2b2fa832-ed1b-47e9-b9eb-049541530ab6/blogroll-fun","title":"Blogroll Fun – Show Last Post and Last Update Time < 0.8.5 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-07-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b2fa832-ed1b-47e9-b9eb-049541530ab6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b2fa832-ed1b-47e9-b9eb-049541530ab6?source=api-prod","affectedVersions":"<=0.8.4","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_626d692d6164756c746b69642d63616c63756c61746f72811c9dc5_gen.json b/internal/data/assets/plugin_626d692d6164756c746b69642d63616c63756c61746f72811c9dc5_gen.json
index 192d9ea2..6f1a1c7d 100644
--- a/internal/data/assets/plugin_626d692d6164756c746b69642d63616c63756c61746f72811c9dc5_gen.json
+++ b/internal/data/assets/plugin_626d692d6164756c746b69642d63616c63756c61746f72811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/a37f049d-e704-4139-b311-51acbd373df7/bmi-adultkid-calculator","title":"BMI Adult & Kid Calculator <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"a37f049d-e704-4139-b311-51acbd373df7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a37f049d-e704-4139-b311-51acbd373df7?source=api-prod","cve":"CVE-2025-53469","affectedVersions":"<=1.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6fcec03-4782-467a-ab8d-1c775ab40d3f/bmi-adultkid-calculator","title":"BMI Adult & Kid Calculator <= 1.2.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6fcec03-4782-467a-ab8d-1c775ab40d3f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6fcec03-4782-467a-ab8d-1c775ab40d3f?source=api-prod","cve":"CVE-2025-47618","affectedVersions":"<=1.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ed494a5a-2edf-43c9-a88a-331448c4e6d7/bmi-adultkid-calculator","title":"BMI Adult & Kid Calculator  <= 1.2.1 - Cross-Site Request Forgery to Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed494a5a-2edf-43c9-a88a-331448c4e6d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed494a5a-2edf-43c9-a88a-331448c4e6d7?source=api-prod","cve":"CVE-2024-32550","affectedVersions":"<=1.2.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/a37f049d-e704-4139-b311-51acbd373df7/bmi-adultkid-calculator","title":"BMI Adult & Kid Calculator <= 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"a37f049d-e704-4139-b311-51acbd373df7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a37f049d-e704-4139-b311-51acbd373df7?source=api-prod","cve":"CVE-2025-53469","affectedVersions":"<=1.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6fcec03-4782-467a-ab8d-1c775ab40d3f/bmi-adultkid-calculator","title":"BMI Adult & Kid Calculator <= 1.2.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6fcec03-4782-467a-ab8d-1c775ab40d3f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6fcec03-4782-467a-ab8d-1c775ab40d3f?source=api-prod","cve":"CVE-2025-47618","affectedVersions":"<=1.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ed494a5a-2edf-43c9-a88a-331448c4e6d7/bmi-adultkid-calculator","title":"BMI Adult & Kid Calculator  <= 1.2.1 - Cross-Site Request Forgery to Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed494a5a-2edf-43c9-a88a-331448c4e6d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed494a5a-2edf-43c9-a88a-331448c4e6d7?source=api-prod","cve":"CVE-2024-32550","affectedVersions":"<=1.2.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_626f6f6b696e672d616e642d72656e74616c2d6d616e616765722d666f722d776f6f636f6d6d65726365811c9dc5_gen.json b/internal/data/assets/plugin_626f6f6b696e672d616e642d72656e74616c2d6d616e616765722d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
index 8ba42962..eedd8e71 100644
--- a/internal/data/assets/plugin_626f6f6b696e672d616e642d72656e74616c2d6d616e616765722d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
+++ b/internal/data/assets/plugin_626f6f6b696e672d616e642d72656e74616c2d6d616e616765722d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0312cea9-8205-4d09-874d-aef319d15c65/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.3.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"0312cea9-8205-4d09-874d-aef319d15c65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0312cea9-8205-4d09-874d-aef319d15c65?source=api-prod","cve":"CVE-2025-47585","affectedVersions":"<=2.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/08fe2e28-5b19-4ce6-914a-304fe82a8ee0/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"08fe2e28-5b19-4ce6-914a-304fe82a8ee0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/08fe2e28-5b19-4ce6-914a-304fe82a8ee0?source=api-prod","cve":"CVE-2025-27011","affectedVersions":"<=2.2.8","severity":"high"},{"advisoryId":"WPSECADV/WF/0b738d0a-39e2-46e3-9b62-920599543220/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.5.9 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b738d0a-39e2-46e3-9b62-920599543220"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b738d0a-39e2-46e3-9b62-920599543220?source=api-prod","cve":"CVE-2025-69328","affectedVersions":"<=2.5.9","severity":"high"},{"advisoryId":"WPSECADV/WF/286b3e24-bd13-4885-a57b-28e2bd71c407/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"286b3e24-bd13-4885-a57b-28e2bd71c407"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/286b3e24-bd13-4885-a57b-28e2bd71c407?source=api-prod","cve":"CVE-2026-81762","affectedVersions":"<=2.7.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/32207aa7-9298-4c92-98d4-5529b259b381/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.2.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"32207aa7-9298-4c92-98d4-5529b259b381"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/32207aa7-9298-4c92-98d4-5529b259b381?source=api-prod","cve":"CVE-2025-39457","affectedVersions":"<=2.2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/501be94e-c01a-43bd-b079-c11e60969def/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.6.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"501be94e-c01a-43bd-b079-c11e60969def"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/501be94e-c01a-43bd-b079-c11e60969def?source=api-prod","cve":"CVE-2026-23972","affectedVersions":"<=2.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5de24a9e-0af3-44d7-af0b-06689a3e3bc5/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"5de24a9e-0af3-44d7-af0b-06689a3e3bc5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5de24a9e-0af3-44d7-af0b-06689a3e3bc5?source=api-prod","cve":"CVE-2025-49904","affectedVersions":"<=2.5.3","severity":"high"},{"advisoryId":"WPSECADV/WF/6e7c629f-e9c6-4254-ba37-46de5206d77d/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e7c629f-e9c6-4254-ba37-46de5206d77d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e7c629f-e9c6-4254-ba37-46de5206d77d?source=api-prod","cve":"CVE-2023-35048","affectedVersions":"<=1.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/747a3efc-c0fb-4b3c-bc17-7b6306b17d4f/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.3.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"747a3efc-c0fb-4b3c-bc17-7b6306b17d4f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/747a3efc-c0fb-4b3c-bc17-7b6306b17d4f?source=api-prod","cve":"CVE-2025-39390","affectedVersions":"<=2.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/83a2dcbb-bd7d-49b2-ab90-38e76679ae2f/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"83a2dcbb-bd7d-49b2-ab90-38e76679ae2f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83a2dcbb-bd7d-49b2-ab90-38e76679ae2f?source=api-prod","cve":"CVE-2026-78258","affectedVersions":"<=2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/95d85e42-4872-4fc4-9e6f-4b9d9fb75ef2/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.2 - Unauthenticated Price Maniputlation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"95d85e42-4872-4fc4-9e6f-4b9d9fb75ef2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95d85e42-4872-4fc4-9e6f-4b9d9fb75ef2?source=api-prod","cve":"CVE-2026-59532","affectedVersions":"<=2.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/9df7f70f-0374-46b7-a3aa-a84a6aea2f86/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"9df7f70f-0374-46b7-a3aa-a84a6aea2f86"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9df7f70f-0374-46b7-a3aa-a84a6aea2f86?source=api-prod","cve":"CVE-2025-22720","affectedVersions":"<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a783ce82-a963-47c5-9c45-b5f3e25e0cc0/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.8.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:05:00","sources":[{"name":"Wordfence","remoteId":"a783ce82-a963-47c5-9c45-b5f3e25e0cc0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a783ce82-a963-47c5-9c45-b5f3e25e0cc0?source=api-prod","cve":"CVE-2026-115614","affectedVersions":"<=2.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0cde64f-2533-46e0-9268-b9d100fb0a82/booking-and-rental-manager-for-woocommerce","title":"Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-10 19:06:05","sources":[{"name":"Wordfence","remoteId":"b0cde64f-2533-46e0-9268-b9d100fb0a82"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0cde64f-2533-46e0-9268-b9d100fb0a82?source=api-prod","cve":"CVE-2024-12412","affectedVersions":"<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5b6b0fe-ccaf-4ec3-97d2-4aa972ad6833/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5b6b0fe-ccaf-4ec3-97d2-4aa972ad6833"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5b6b0fe-ccaf-4ec3-97d2-4aa972ad6833?source=api-prod","cve":"CVE-2026-57660","affectedVersions":"<=2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b69b1343-9a0b-42d9-b8f6-1ba3e216e2bf/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.5 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"b69b1343-9a0b-42d9-b8f6-1ba3e216e2bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b69b1343-9a0b-42d9-b8f6-1ba3e216e2bf?source=api-prod","cve":"CVE-2026-78257","affectedVersions":"<=2.7.5","severity":"high"},{"advisoryId":"WPSECADV/WF/cdcae7fe-1cc1-4168-8b4b-fcee5bf91be2/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdcae7fe-1cc1-4168-8b4b-fcee5bf91be2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdcae7fe-1cc1-4168-8b4b-fcee5bf91be2?source=api-prod","cve":"CVE-2025-64266","affectedVersions":"<=2.5.4","severity":"high"},{"advisoryId":"WPSECADV/WF/ed65eaa1-247e-4bb1-af72-d41962931826/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.6.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed65eaa1-247e-4bb1-af72-d41962931826"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed65eaa1-247e-4bb1-af72-d41962931826?source=api-prod","cve":"CVE-2026-57404","affectedVersions":"<=2.6.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3347400-c985-489d-90bb-4911fa9e8f88/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3347400-c985-489d-90bb-4911fa9e8f88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3347400-c985-489d-90bb-4911fa9e8f88?source=api-prod","cve":"CVE-2026-85303","affectedVersions":"<=2.7.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/fab0a42e-fa99-4451-91fd-c924a33d33c8/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.2.6 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"fab0a42e-fa99-4451-91fd-c924a33d33c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fab0a42e-fa99-4451-91fd-c924a33d33c8?source=api-prod","cve":"CVE-2025-26921","affectedVersions":"<=2.2.6","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0312cea9-8205-4d09-874d-aef319d15c65/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.3.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"0312cea9-8205-4d09-874d-aef319d15c65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0312cea9-8205-4d09-874d-aef319d15c65?source=api-prod","cve":"CVE-2025-47585","affectedVersions":"<=2.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/08fe2e28-5b19-4ce6-914a-304fe82a8ee0/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"08fe2e28-5b19-4ce6-914a-304fe82a8ee0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/08fe2e28-5b19-4ce6-914a-304fe82a8ee0?source=api-prod","cve":"CVE-2025-27011","affectedVersions":"<=2.2.8","severity":"high"},{"advisoryId":"WPSECADV/WF/0b738d0a-39e2-46e3-9b62-920599543220/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.5.9 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b738d0a-39e2-46e3-9b62-920599543220"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b738d0a-39e2-46e3-9b62-920599543220?source=api-prod","cve":"CVE-2025-69328","affectedVersions":"<=2.5.9","severity":"high"},{"advisoryId":"WPSECADV/WF/286b3e24-bd13-4885-a57b-28e2bd71c407/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"286b3e24-bd13-4885-a57b-28e2bd71c407"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/286b3e24-bd13-4885-a57b-28e2bd71c407?source=api-prod","cve":"CVE-2026-81762","affectedVersions":"<=2.7.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/32207aa7-9298-4c92-98d4-5529b259b381/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.2.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"32207aa7-9298-4c92-98d4-5529b259b381"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/32207aa7-9298-4c92-98d4-5529b259b381?source=api-prod","cve":"CVE-2025-39457","affectedVersions":"<=2.2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/501be94e-c01a-43bd-b079-c11e60969def/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.6.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"501be94e-c01a-43bd-b079-c11e60969def"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/501be94e-c01a-43bd-b079-c11e60969def?source=api-prod","cve":"CVE-2026-23972","affectedVersions":"<=2.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5de24a9e-0af3-44d7-af0b-06689a3e3bc5/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"5de24a9e-0af3-44d7-af0b-06689a3e3bc5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5de24a9e-0af3-44d7-af0b-06689a3e3bc5?source=api-prod","cve":"CVE-2025-49904","affectedVersions":"<=2.5.3","severity":"high"},{"advisoryId":"WPSECADV/WF/6e7c629f-e9c6-4254-ba37-46de5206d77d/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e7c629f-e9c6-4254-ba37-46de5206d77d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e7c629f-e9c6-4254-ba37-46de5206d77d?source=api-prod","cve":"CVE-2023-35048","affectedVersions":"<=1.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/747a3efc-c0fb-4b3c-bc17-7b6306b17d4f/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.3.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"747a3efc-c0fb-4b3c-bc17-7b6306b17d4f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/747a3efc-c0fb-4b3c-bc17-7b6306b17d4f?source=api-prod","cve":"CVE-2025-39390","affectedVersions":"<=2.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/83a2dcbb-bd7d-49b2-ab90-38e76679ae2f/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"83a2dcbb-bd7d-49b2-ab90-38e76679ae2f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83a2dcbb-bd7d-49b2-ab90-38e76679ae2f?source=api-prod","cve":"CVE-2026-78258","affectedVersions":"<=2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/95d85e42-4872-4fc4-9e6f-4b9d9fb75ef2/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.2 - Unauthenticated Price Maniputlation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"95d85e42-4872-4fc4-9e6f-4b9d9fb75ef2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95d85e42-4872-4fc4-9e6f-4b9d9fb75ef2?source=api-prod","cve":"CVE-2026-59532","affectedVersions":"<=2.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/9df7f70f-0374-46b7-a3aa-a84a6aea2f86/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"9df7f70f-0374-46b7-a3aa-a84a6aea2f86"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9df7f70f-0374-46b7-a3aa-a84a6aea2f86?source=api-prod","cve":"CVE-2025-22720","affectedVersions":"<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a783ce82-a963-47c5-9c45-b5f3e25e0cc0/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.8.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:05:00","sources":[{"name":"Wordfence","remoteId":"a783ce82-a963-47c5-9c45-b5f3e25e0cc0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a783ce82-a963-47c5-9c45-b5f3e25e0cc0?source=api-prod","cve":"CVE-2026-115614","affectedVersions":"<=2.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0cde64f-2533-46e0-9268-b9d100fb0a82/booking-and-rental-manager-for-woocommerce","title":"Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-10 19:06:05","sources":[{"name":"Wordfence","remoteId":"b0cde64f-2533-46e0-9268-b9d100fb0a82"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0cde64f-2533-46e0-9268-b9d100fb0a82?source=api-prod","cve":"CVE-2024-12412","affectedVersions":"<=2.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5b6b0fe-ccaf-4ec3-97d2-4aa972ad6833/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5b6b0fe-ccaf-4ec3-97d2-4aa972ad6833"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5b6b0fe-ccaf-4ec3-97d2-4aa972ad6833?source=api-prod","cve":"CVE-2026-57660","affectedVersions":"<=2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b69b1343-9a0b-42d9-b8f6-1ba3e216e2bf/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.5 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"b69b1343-9a0b-42d9-b8f6-1ba3e216e2bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b69b1343-9a0b-42d9-b8f6-1ba3e216e2bf?source=api-prod","cve":"CVE-2026-78257","affectedVersions":"<=2.7.5","severity":"high"},{"advisoryId":"WPSECADV/WF/c195ec93-6c40-495a-b0ad-d41959f4a45f/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.8.0 - Unauthenticated Reduced Booking Price\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c195ec93-6c40-495a-b0ad-d41959f4a45f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c195ec93-6c40-495a-b0ad-d41959f4a45f?source=api-prod","cve":"CVE-2026-103350","affectedVersions":"<=2.8.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/cdcae7fe-1cc1-4168-8b4b-fcee5bf91be2/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdcae7fe-1cc1-4168-8b4b-fcee5bf91be2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdcae7fe-1cc1-4168-8b4b-fcee5bf91be2?source=api-prod","cve":"CVE-2025-64266","affectedVersions":"<=2.5.4","severity":"high"},{"advisoryId":"WPSECADV/WF/ed65eaa1-247e-4bb1-af72-d41962931826/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager <= 2.6.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed65eaa1-247e-4bb1-af72-d41962931826"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed65eaa1-247e-4bb1-af72-d41962931826?source=api-prod","cve":"CVE-2026-57404","affectedVersions":"<=2.6.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3347400-c985-489d-90bb-4911fa9e8f88/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3347400-c985-489d-90bb-4911fa9e8f88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3347400-c985-489d-90bb-4911fa9e8f88?source=api-prod","cve":"CVE-2026-85303","affectedVersions":"<=2.7.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/fab0a42e-fa99-4451-91fd-c924a33d33c8/booking-and-rental-manager-for-woocommerce","title":"Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.2.6 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"fab0a42e-fa99-4451-91fd-c924a33d33c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fab0a42e-fa99-4451-91fd-c924a33d33c8?source=api-prod","cve":"CVE-2025-26921","affectedVersions":"<=2.2.6","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_626f6f6b696e672d7061636b616765811c9dc5_gen.json b/internal/data/assets/plugin_626f6f6b696e672d7061636b616765811c9dc5_gen.json
index 02b5de50..f5ca8c2d 100644
--- a/internal/data/assets/plugin_626f6f6b696e672d7061636b616765811c9dc5_gen.json
+++ b/internal/data/assets/plugin_626f6f6b696e672d7061636b616765811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/003e7fcf-c514-48fc-9db4-d7f079633149/booking-package","title":"Booking Package < 1.7.31 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"003e7fcf-c514-48fc-9db4-d7f079633149"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/003e7fcf-c514-48fc-9db4-d7f079633149?source=api-prod","cve":"CVE-2026-105996","affectedVersions":"<1.7.31","severity":"medium"},{"advisoryId":"WPSECADV/WF/10063035-5f91-4dbe-b559-ea5be50d6950/booking-package","title":"Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 12:14:45","sources":[{"name":"Wordfence","remoteId":"10063035-5f91-4dbe-b559-ea5be50d6950"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10063035-5f91-4dbe-b559-ea5be50d6950?source=api-prod","cve":"CVE-2026-103423","affectedVersions":"<=1.7.29","severity":"high"},{"advisoryId":"WPSECADV/WF/10293e5a-15ea-42c1-a0df-b95f723a75a3/booking-package","title":"Booking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 12:14:52","sources":[{"name":"Wordfence","remoteId":"10293e5a-15ea-42c1-a0df-b95f723a75a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10293e5a-15ea-42c1-a0df-b95f723a75a3?source=api-prod","cve":"CVE-2026-103425","affectedVersions":"<=1.7.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/212e8f84-22a9-4b9e-b440-280f8569846f/booking-package","title":"Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-18 10:25:55","sources":[{"name":"Wordfence","remoteId":"212e8f84-22a9-4b9e-b440-280f8569846f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/212e8f84-22a9-4b9e-b440-280f8569846f?source=api-prod","cve":"CVE-2024-13508","affectedVersions":"<=1.6.72","severity":"medium"},{"advisoryId":"WPSECADV/WF/3884cb24-3f46-4feb-a6b9-4445ca8fd0e6/booking-package","title":"Booking Package <= 1.5.10 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"3884cb24-3f46-4feb-a6b9-4445ca8fd0e6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3884cb24-3f46-4feb-a6b9-4445ca8fd0e6?source=api-prod","cve":"CVE-2021-20840","affectedVersions":"<1.5.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/3acab2e6-c6ce-4e87-aa6d-ce9d027cd774/booking-package","title":"Booking Package <= 1.7.06 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"3acab2e6-c6ce-4e87-aa6d-ce9d027cd774"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3acab2e6-c6ce-4e87-aa6d-ce9d027cd774?source=api-prod","cve":"CVE-2026-40774","affectedVersions":"<=1.7.06","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b611abb-460c-44d4-9f77-052a208f8d85/booking-package","title":"Booking Package <= 1.6.27 - Unauthenticated Price Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5b611abb-460c-44d4-9f77-052a208f8d85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b611abb-460c-44d4-9f77-052a208f8d85?source=api-prod","cve":"CVE-2024-30516","affectedVersions":"<=1.6.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/61d63c5a-6ca6-42d8-ab0a-152d9c95945c/booking-package","title":"Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-27 18:18:55","sources":[{"name":"Wordfence","remoteId":"61d63c5a-6ca6-42d8-ab0a-152d9c95945c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61d63c5a-6ca6-42d8-ab0a-152d9c95945c?source=api-prod","cve":"CVE-2026-4911","affectedVersions":"<=1.7.06","severity":"medium"},{"advisoryId":"WPSECADV/WF/65166432-a877-4070-94c1-cdaf7e5d7586/booking-package","title":"Booking Package <= 1.5.98 - Authorization Bypass to Arbitrary Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"65166432-a877-4070-94c1-cdaf7e5d7586"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65166432-a877-4070-94c1-cdaf7e5d7586?source=api-prod","cve":"CVE-2023-37389","affectedVersions":"<1.5.99","severity":"critical"},{"advisoryId":"WPSECADV/WF/6bad88b8-f978-4c8d-a93f-7facd727a86b/booking-package","title":"Booking Package <= 1.7.29 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bad88b8-f978-4c8d-a93f-7facd727a86b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bad88b8-f978-4c8d-a93f-7facd727a86b?source=api-prod","cve":"CVE-2026-105995","affectedVersions":"<=1.7.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/795c1fd6-137b-4414-8d6b-30053bfb5924/booking-package","title":"Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-05 15:42:19","sources":[{"name":"Wordfence","remoteId":"795c1fd6-137b-4414-8d6b-30053bfb5924"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/795c1fd6-137b-4414-8d6b-30053bfb5924?source=api-prod","cve":"CVE-2026-9851","affectedVersions":"<=1.7.16","severity":"high"},{"advisoryId":"WPSECADV/WF/8bc86a29-cb1f-4711-925c-51dbbf682477/booking-package","title":"Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"8bc86a29-cb1f-4711-925c-51dbbf682477"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8bc86a29-cb1f-4711-925c-51dbbf682477?source=api-prod","cve":"CVE-2026-15335","affectedVersions":"<=1.7.20","severity":"high"},{"advisoryId":"WPSECADV/WF/8c5a065a-a81e-4963-af54-21f145632bed/booking-package","title":"Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c5a065a-a81e-4963-af54-21f145632bed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c5a065a-a81e-4963-af54-21f145632bed?source=api-prod","cve":"CVE-2022-0709","affectedVersions":"<1.5.29","severity":"high"},{"advisoryId":"WPSECADV/WF/d460cc34-c8b0-453b-9b6b-3bd53137625a/booking-package","title":"Booking Package <= 1.6.01 - Reflected Cross-Site Scripting via 'mode'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"d460cc34-c8b0-453b-9b6b-3bd53137625a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d460cc34-c8b0-453b-9b6b-3bd53137625a?source=api-prod","cve":"CVE-2023-39918","affectedVersions":"<=1.6.01","severity":"medium"},{"advisoryId":"WPSECADV/WF/f7eb440f-c122-4e78-9ea0-513a4cf9794d/booking-package","title":"Booking Package < 1.7.25 - Unauthenticated Price Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"f7eb440f-c122-4e78-9ea0-513a4cf9794d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7eb440f-c122-4e78-9ea0-513a4cf9794d?source=api-prod","cve":"CVE-2026-16986","affectedVersions":"<1.7.25","severity":"medium"},{"advisoryId":"WPSECADV/WF/fc23d7b2-2080-48d9-9379-b4ecd0536ff0/booking-package","title":"Booking Package <= 1.7.30 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"fc23d7b2-2080-48d9-9379-b4ecd0536ff0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fc23d7b2-2080-48d9-9379-b4ecd0536ff0?source=api-prod","cve":"CVE-2026-105998","affectedVersions":"<=1.7.30","severity":"medium"},{"advisoryId":"WPSECADV/WF/fc608cbf-99fd-4d92-9d49-ad7494ff3f03/booking-package","title":"Booking Package <= 1.7.30 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"fc608cbf-99fd-4d92-9d49-ad7494ff3f03"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fc608cbf-99fd-4d92-9d49-ad7494ff3f03?source=api-prod","cve":"CVE-2026-105999","affectedVersions":"<=1.7.30","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/003e7fcf-c514-48fc-9db4-d7f079633149/booking-package","title":"Booking Package < 1.7.31 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"003e7fcf-c514-48fc-9db4-d7f079633149"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/003e7fcf-c514-48fc-9db4-d7f079633149?source=api-prod","cve":"CVE-2026-105996","affectedVersions":"<1.7.31","severity":"medium"},{"advisoryId":"WPSECADV/WF/10063035-5f91-4dbe-b559-ea5be50d6950/booking-package","title":"Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 12:14:45","sources":[{"name":"Wordfence","remoteId":"10063035-5f91-4dbe-b559-ea5be50d6950"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10063035-5f91-4dbe-b559-ea5be50d6950?source=api-prod","cve":"CVE-2026-103423","affectedVersions":"<=1.7.29","severity":"high"},{"advisoryId":"WPSECADV/WF/10293e5a-15ea-42c1-a0df-b95f723a75a3/booking-package","title":"Booking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 12:14:52","sources":[{"name":"Wordfence","remoteId":"10293e5a-15ea-42c1-a0df-b95f723a75a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10293e5a-15ea-42c1-a0df-b95f723a75a3?source=api-prod","cve":"CVE-2026-103425","affectedVersions":"<=1.7.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/212e8f84-22a9-4b9e-b440-280f8569846f/booking-package","title":"Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-18 10:25:55","sources":[{"name":"Wordfence","remoteId":"212e8f84-22a9-4b9e-b440-280f8569846f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/212e8f84-22a9-4b9e-b440-280f8569846f?source=api-prod","cve":"CVE-2024-13508","affectedVersions":"<=1.6.72","severity":"medium"},{"advisoryId":"WPSECADV/WF/26fa0ed1-9c7f-4c16-b0d4-1d727bd46b0d/booking-package","title":"Booking Package < 1.7.33 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"26fa0ed1-9c7f-4c16-b0d4-1d727bd46b0d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26fa0ed1-9c7f-4c16-b0d4-1d727bd46b0d?source=api-prod","cve":"CVE-2026-105997","affectedVersions":"<1.7.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/3884cb24-3f46-4feb-a6b9-4445ca8fd0e6/booking-package","title":"Booking Package <= 1.5.10 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"3884cb24-3f46-4feb-a6b9-4445ca8fd0e6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3884cb24-3f46-4feb-a6b9-4445ca8fd0e6?source=api-prod","cve":"CVE-2021-20840","affectedVersions":"<1.5.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/3acab2e6-c6ce-4e87-aa6d-ce9d027cd774/booking-package","title":"Booking Package <= 1.7.06 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"3acab2e6-c6ce-4e87-aa6d-ce9d027cd774"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3acab2e6-c6ce-4e87-aa6d-ce9d027cd774?source=api-prod","cve":"CVE-2026-40774","affectedVersions":"<=1.7.06","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b611abb-460c-44d4-9f77-052a208f8d85/booking-package","title":"Booking Package <= 1.6.27 - Unauthenticated Price Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5b611abb-460c-44d4-9f77-052a208f8d85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b611abb-460c-44d4-9f77-052a208f8d85?source=api-prod","cve":"CVE-2024-30516","affectedVersions":"<=1.6.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/61d63c5a-6ca6-42d8-ab0a-152d9c95945c/booking-package","title":"Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-27 18:18:55","sources":[{"name":"Wordfence","remoteId":"61d63c5a-6ca6-42d8-ab0a-152d9c95945c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61d63c5a-6ca6-42d8-ab0a-152d9c95945c?source=api-prod","cve":"CVE-2026-4911","affectedVersions":"<=1.7.06","severity":"medium"},{"advisoryId":"WPSECADV/WF/65166432-a877-4070-94c1-cdaf7e5d7586/booking-package","title":"Booking Package <= 1.5.98 - Authorization Bypass to Arbitrary Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"65166432-a877-4070-94c1-cdaf7e5d7586"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65166432-a877-4070-94c1-cdaf7e5d7586?source=api-prod","cve":"CVE-2023-37389","affectedVersions":"<1.5.99","severity":"critical"},{"advisoryId":"WPSECADV/WF/6bad88b8-f978-4c8d-a93f-7facd727a86b/booking-package","title":"Booking Package <= 1.7.29 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bad88b8-f978-4c8d-a93f-7facd727a86b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bad88b8-f978-4c8d-a93f-7facd727a86b?source=api-prod","cve":"CVE-2026-105995","affectedVersions":"<=1.7.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/795c1fd6-137b-4414-8d6b-30053bfb5924/booking-package","title":"Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-05 15:42:19","sources":[{"name":"Wordfence","remoteId":"795c1fd6-137b-4414-8d6b-30053bfb5924"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/795c1fd6-137b-4414-8d6b-30053bfb5924?source=api-prod","cve":"CVE-2026-9851","affectedVersions":"<=1.7.16","severity":"high"},{"advisoryId":"WPSECADV/WF/8bc86a29-cb1f-4711-925c-51dbbf682477/booking-package","title":"Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"8bc86a29-cb1f-4711-925c-51dbbf682477"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8bc86a29-cb1f-4711-925c-51dbbf682477?source=api-prod","cve":"CVE-2026-15335","affectedVersions":"<=1.7.20","severity":"high"},{"advisoryId":"WPSECADV/WF/8c5a065a-a81e-4963-af54-21f145632bed/booking-package","title":"Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c5a065a-a81e-4963-af54-21f145632bed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c5a065a-a81e-4963-af54-21f145632bed?source=api-prod","cve":"CVE-2022-0709","affectedVersions":"<1.5.29","severity":"high"},{"advisoryId":"WPSECADV/WF/d460cc34-c8b0-453b-9b6b-3bd53137625a/booking-package","title":"Booking Package <= 1.6.01 - Reflected Cross-Site Scripting via 'mode'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"d460cc34-c8b0-453b-9b6b-3bd53137625a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d460cc34-c8b0-453b-9b6b-3bd53137625a?source=api-prod","cve":"CVE-2023-39918","affectedVersions":"<=1.6.01","severity":"medium"},{"advisoryId":"WPSECADV/WF/f7eb440f-c122-4e78-9ea0-513a4cf9794d/booking-package","title":"Booking Package < 1.7.25 - Unauthenticated Price Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"f7eb440f-c122-4e78-9ea0-513a4cf9794d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7eb440f-c122-4e78-9ea0-513a4cf9794d?source=api-prod","cve":"CVE-2026-16986","affectedVersions":"<1.7.25","severity":"medium"},{"advisoryId":"WPSECADV/WF/fc23d7b2-2080-48d9-9379-b4ecd0536ff0/booking-package","title":"Booking Package <= 1.7.30 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"fc23d7b2-2080-48d9-9379-b4ecd0536ff0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fc23d7b2-2080-48d9-9379-b4ecd0536ff0?source=api-prod","cve":"CVE-2026-105998","affectedVersions":"<=1.7.30","severity":"medium"},{"advisoryId":"WPSECADV/WF/fc608cbf-99fd-4d92-9d49-ad7494ff3f03/booking-package","title":"Booking Package <= 1.7.30 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"fc608cbf-99fd-4d92-9d49-ad7494ff3f03"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fc608cbf-99fd-4d92-9d49-ad7494ff3f03?source=api-prod","cve":"CVE-2026-105999","affectedVersions":"<=1.7.30","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_626f6f7473747261702d73686f7274636f646573811c9dc5_gen.json b/internal/data/assets/plugin_626f6f7473747261702d73686f7274636f646573811c9dc5_gen.json
index 355873e2..4d7023c8 100644
--- a/internal/data/assets/plugin_626f6f7473747261702d73686f7274636f646573811c9dc5_gen.json
+++ b/internal/data/assets/plugin_626f6f7473747261702d73686f7274636f646573811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2b1dc849-e306-4c09-a565-14d4e2427c69/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b1dc849-e306-4c09-a565-14d4e2427c69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b1dc849-e306-4c09-a565-14d4e2427c69?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/44b8659a-c88d-44d3-8eab-71b0a49d97b4/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"44b8659a-c88d-44d3-8eab-71b0a49d97b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44b8659a-c88d-44d3-8eab-71b0a49d97b4?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e97e603-b864-41ef-98c8-b0304a72ec44/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e97e603-b864-41ef-98c8-b0304a72ec44"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e97e603-b864-41ef-98c8-b0304a72ec44?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5235a235-911e-4462-90c5-05b0c7cb45a3/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"5235a235-911e-4462-90c5-05b0c7cb45a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5235a235-911e-4462-90c5-05b0c7cb45a3?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7416f5e2-5c59-4192-a87c-b3174fd84a01/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"7416f5e2-5c59-4192-a87c-b3174fd84a01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7416f5e2-5c59-4192-a87c-b3174fd84a01?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/77122403-5865-40d7-96d5-557147098c4e/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"77122403-5865-40d7-96d5-557147098c4e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/77122403-5865-40d7-96d5-557147098c4e?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7bc2eebb-d232-4aef-94e5-68876bba0f93/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"7bc2eebb-d232-4aef-94e5-68876bba0f93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7bc2eebb-d232-4aef-94e5-68876bba0f93?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fab0e10-d388-41d4-a01f-9bbb8c3cfb5f/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fab0e10-d388-41d4-a01f-9bbb8c3cfb5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fab0e10-d388-41d4-a01f-9bbb8c3cfb5f?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/974a3228-5eab-41be-b3c1-82e71cde8de7/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"974a3228-5eab-41be-b3c1-82e71cde8de7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/974a3228-5eab-41be-b3c1-82e71cde8de7?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f97bc19-c600-4819-ae75-d80b119a7575/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f97bc19-c600-4819-ae75-d80b119a7575"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f97bc19-c600-4819-ae75-d80b119a7575?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a187fa8b-daf1-4955-92b3-2937d0f6a159/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"a187fa8b-daf1-4955-92b3-2937d0f6a159"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a187fa8b-daf1-4955-92b3-2937d0f6a159?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b7e504ef-9989-468f-9bd0-dd8416f16d85/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7e504ef-9989-468f-9bd0-dd8416f16d85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7e504ef-9989-468f-9bd0-dd8416f16d85?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2b1dc849-e306-4c09-a565-14d4e2427c69/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b1dc849-e306-4c09-a565-14d4e2427c69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b1dc849-e306-4c09-a565-14d4e2427c69?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/44b8659a-c88d-44d3-8eab-71b0a49d97b4/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"44b8659a-c88d-44d3-8eab-71b0a49d97b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44b8659a-c88d-44d3-8eab-71b0a49d97b4?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e97e603-b864-41ef-98c8-b0304a72ec44/bootstrap-shortcodes","title":"BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e97e603-b864-41ef-98c8-b0304a72ec44"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e97e603-b864-41ef-98c8-b0304a72ec44?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5235a235-911e-4462-90c5-05b0c7cb45a3/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"5235a235-911e-4462-90c5-05b0c7cb45a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5235a235-911e-4462-90c5-05b0c7cb45a3?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7416f5e2-5c59-4192-a87c-b3174fd84a01/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"7416f5e2-5c59-4192-a87c-b3174fd84a01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7416f5e2-5c59-4192-a87c-b3174fd84a01?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/77122403-5865-40d7-96d5-557147098c4e/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"77122403-5865-40d7-96d5-557147098c4e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/77122403-5865-40d7-96d5-557147098c4e?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7bc2eebb-d232-4aef-94e5-68876bba0f93/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"7bc2eebb-d232-4aef-94e5-68876bba0f93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7bc2eebb-d232-4aef-94e5-68876bba0f93?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fab0e10-d388-41d4-a01f-9bbb8c3cfb5f/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fab0e10-d388-41d4-a01f-9bbb8c3cfb5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fab0e10-d388-41d4-a01f-9bbb8c3cfb5f?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/974a3228-5eab-41be-b3c1-82e71cde8de7/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"974a3228-5eab-41be-b3c1-82e71cde8de7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/974a3228-5eab-41be-b3c1-82e71cde8de7?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f97bc19-c600-4819-ae75-d80b119a7575/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f97bc19-c600-4819-ae75-d80b119a7575"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f97bc19-c600-4819-ae75-d80b119a7575?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/a187fa8b-daf1-4955-92b3-2937d0f6a159/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"a187fa8b-daf1-4955-92b3-2937d0f6a159"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a187fa8b-daf1-4955-92b3-2937d0f6a159?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/b7e504ef-9989-468f-9bd0-dd8416f16d85/bootstrap-shortcodes","title":"BootStrap Shortcode < 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7e504ef-9989-468f-9bd0-dd8416f16d85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7e504ef-9989-468f-9bd0-dd8416f16d85?source=api-prod","cve":"CVE-2022-4777","affectedVersions":"<3.4.6","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_626f742d666f722d74656c656772616d2d6f6e2d776f6f636f6d6d65726365811c9dc5_gen.json b/internal/data/assets/plugin_626f742d666f722d74656c656772616d2d6f6e2d776f6f636f6d6d65726365811c9dc5_gen.json
index 557d57a1..319dad58 100644
--- a/internal/data/assets/plugin_626f742d666f722d74656c656772616d2d6f6e2d776f6f636f6d6d65726365811c9dc5_gen.json
+++ b/internal/data/assets/plugin_626f742d666f722d74656c656772616d2d6f6e2d776f6f636f6d6d65726365811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/68d168fb-9f28-48b2-a054-d279d4cd21c3/bot-for-telegram-on-woocommerce","title":"Bot for Telegram on WooCommerce <= 1.2.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"68d168fb-9f28-48b2-a054-d279d4cd21c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68d168fb-9f28-48b2-a054-d279d4cd21c3?source=api-prod","cve":"CVE-2025-48268","affectedVersions":"<=1.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/a662c904-ba2e-494c-a603-b22eeeddf43d/bot-for-telegram-on-woocommerce","title":"Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a662c904-ba2e-494c-a603-b22eeeddf43d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a662c904-ba2e-494c-a603-b22eeeddf43d?source=api-prod","cve":"CVE-2024-9821","affectedVersions":"<=1.2.7","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/1f6b73e0-c154-4bc4-90bc-0929053b77b0/bot-for-telegram-on-woocommerce","title":"Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 14:44:39","sources":[{"name":"Wordfence","remoteId":"1f6b73e0-c154-4bc4-90bc-0929053b77b0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f6b73e0-c154-4bc4-90bc-0929053b77b0?source=api-prod","cve":"CVE-2026-109516","affectedVersions":"<=1.3.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/68d168fb-9f28-48b2-a054-d279d4cd21c3/bot-for-telegram-on-woocommerce","title":"Bot for Telegram on WooCommerce <= 1.2.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"68d168fb-9f28-48b2-a054-d279d4cd21c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68d168fb-9f28-48b2-a054-d279d4cd21c3?source=api-prod","cve":"CVE-2025-48268","affectedVersions":"<=1.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/a662c904-ba2e-494c-a603-b22eeeddf43d/bot-for-telegram-on-woocommerce","title":"Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a662c904-ba2e-494c-a603-b22eeeddf43d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a662c904-ba2e-494c-a603-b22eeeddf43d?source=api-prod","cve":"CVE-2024-9821","affectedVersions":"<=1.2.7","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_62702d6265747465722d6d65737361676573811c9dc5_gen.json b/internal/data/assets/plugin_62702d6265747465722d6d65737361676573811c9dc5_gen.json
index 4f5c6bc1..57f9c24c 100644
--- a/internal/data/assets/plugin_62702d6265747465722d6d65737361676573811c9dc5_gen.json
+++ b/internal/data/assets/plugin_62702d6265747465722d6d65737361676573811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/169a857f-1ae0-40f6-8a34-10c573af59c5/bp-better-messages","title":"Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"169a857f-1ae0-40f6-8a34-10c573af59c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/169a857f-1ae0-40f6-8a34-10c573af59c5?source=api-prod","cve":"CVE-2024-13612","affectedVersions":"<=2.6.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/1e6327b0-a047-4f8c-8e95-88f2e4b7089f/bp-better-messages","title":"BP Better Messages <= 2.4.32 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"1e6327b0-a047-4f8c-8e95-88f2e4b7089f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1e6327b0-a047-4f8c-8e95-88f2e4b7089f?source=api-prod","cve":"CVE-2024-32802","affectedVersions":"<=2.4.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/22a798d7-03e6-4083-9af2-235238b09fc9/bp-better-messages","title":"Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.15.27 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"22a798d7-03e6-4083-9af2-235238b09fc9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22a798d7-03e6-4083-9af2-235238b09fc9?source=api-prod","cve":"CVE-2026-84812","affectedVersions":"<=2.15.27","severity":"high"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/bp-better-messages","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.9.9.170","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e7f310e-1e10-44dd-9928-23e63af21fef/bp-better-messages","title":"Better Messages <= 1.9.10.68 - Authorization Bypass to Blocking Control Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e7f310e-1e10-44dd-9928-23e63af21fef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e7f310e-1e10-44dd-9928-23e63af21fef?source=api-prod","cve":"CVE-2022-40216","affectedVersions":"<=1.9.10.68","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/bp-better-messages","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":">=1.9.10.72,<=2.1.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/553a9a16-97e0-4443-9d4b-dd901b86141b/bp-better-messages","title":"Better Messages <= 3.0.4 - Authenticated (Subscriber+) SQL Injection via 'group_id' Message Meta Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:12:46","sources":[{"name":"Wordfence","remoteId":"553a9a16-97e0-4443-9d4b-dd901b86141b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/553a9a16-97e0-4443-9d4b-dd901b86141b?source=api-prod","cve":"CVE-2026-93899","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/68fee8cb-476d-4962-b830-59fd823329ac/bp-better-messages","title":"Better Messages <= 1.9.10.57 - Resource Exhaustion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"68fee8cb-476d-4962-b830-59fd823329ac"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68fee8cb-476d-4962-b830-59fd823329ac?source=api-prod","cve":"CVE-2022-33142","affectedVersions":"<=1.9.10.57","severity":"high"},{"advisoryId":"WPSECADV/WF/70f2965a-37fe-4b7e-890a-9bf73b5de1c7/bp-better-messages","title":"Better Messages <= 1.9.10.68 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"70f2965a-37fe-4b7e-890a-9bf73b5de1c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70f2965a-37fe-4b7e-890a-9bf73b5de1c7?source=api-prod","cve":"CVE-2022-41609","affectedVersions":"<=1.9.10.68","severity":"high"},{"advisoryId":"WPSECADV/WF/997918b9-2ccd-413e-9df2-d24bc3820ba1/bp-better-messages","title":"Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-28 19:31:16","sources":[{"name":"Wordfence","remoteId":"997918b9-2ccd-413e-9df2-d24bc3820ba1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/997918b9-2ccd-413e-9df2-d24bc3820ba1?source=api-prod","cve":"CVE-2024-13611","affectedVersions":"<=2.6.9","severity":"high"},{"advisoryId":"WPSECADV/WF/a3e34ec7-eeb2-4966-bac3-c7d4723355d7/bp-better-messages","title":"Better Messages <= 1.9.9.148 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3e34ec7-eeb2-4966-bac3-c7d4723355d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3e34ec7-eeb2-4966-bac3-c7d4723355d7?source=api-prod","cve":"CVE-2022-36389","affectedVersions":"<=1.9.9.148","severity":"high"},{"advisoryId":"WPSECADV/WF/a4ccc7f8-c8e0-457a-b437-2a23530a9df4/bp-better-messages","title":"BP Better Messages <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"a4ccc7f8-c8e0-457a-b437-2a23530a9df4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a4ccc7f8-c8e0-457a-b437-2a23530a9df4?source=api-prod","cve":"CVE-2023-49168","affectedVersions":"<=2.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3243fe4-9d11-49f0-884b-0162cd776993/bp-better-messages","title":"Better Messages <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure via '/thread/<id>' REST Endpoint\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-18 13:52:39","sources":[{"name":"Wordfence","remoteId":"b3243fe4-9d11-49f0-884b-0162cd776993"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3243fe4-9d11-49f0-884b-0162cd776993?source=api-prod","cve":"CVE-2026-89334","affectedVersions":"<=2.15.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/b67710d7-976b-4a65-bad3-091a97aceb00/bp-better-messages","title":"Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"b67710d7-976b-4a65-bad3-091a97aceb00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b67710d7-976b-4a65-bad3-091a97aceb00?source=api-prod","cve":"CVE-2024-13697","affectedVersions":"<=2.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/b7034792-4e5e-4745-a873-3c4ef854a65e/bp-better-messages","title":"Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.15.22 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7034792-4e5e-4745-a873-3c4ef854a65e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7034792-4e5e-4745-a873-3c4ef854a65e?source=api-prod","cve":"CVE-2026-32547","affectedVersions":"<=2.15.22","severity":"high"},{"advisoryId":"WPSECADV/WF/be23d61f-1e7f-40fb-88ca-dd0ed226a7c5/bp-better-messages","title":"Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.14.16 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"be23d61f-1e7f-40fb-88ca-dd0ed226a7c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be23d61f-1e7f-40fb-88ca-dd0ed226a7c5?source=api-prod","cve":"CVE-2026-42736","affectedVersions":"<=2.14.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/c322841a-4134-4c21-8028-0ccacd46335b/bp-better-messages","title":"BP Better Messages <= 1.9.9.37 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"c322841a-4134-4c21-8028-0ccacd46335b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c322841a-4134-4c21-8028-0ccacd46335b?source=api-prod","cve":"CVE-2021-24808","affectedVersions":"<1.9.9.41","severity":"medium"},{"advisoryId":"WPSECADV/WF/d68bbf0d-72e9-4295-a1e1-4abeb36cae1b/bp-better-messages","title":"Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-16 17:20:44","sources":[{"name":"Wordfence","remoteId":"d68bbf0d-72e9-4295-a1e1-4abeb36cae1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d68bbf0d-72e9-4295-a1e1-4abeb36cae1b?source=api-prod","cve":"CVE-2025-14154","affectedVersions":"<=2.10.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d694491c-c0f5-4418-805a-db792ea4f712/bp-better-messages","title":"Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-30 17:17:30","sources":[{"name":"Wordfence","remoteId":"d694491c-c0f5-4418-805a-db792ea4f712"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d694491c-c0f5-4418-805a-db792ea4f712?source=api-prod","cve":"CVE-2024-13362","affectedVersions":"<=2.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/df28ecd7-d463-48b7-95e6-8adc9f34d6bd/bp-better-messages","title":"Better Messages <= 2.15.33 - Unauthenticated Information Exposure Spoofing via 'X-Real-IP' Header via /guests/register\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-18 13:53:09","sources":[{"name":"Wordfence","remoteId":"df28ecd7-d463-48b7-95e6-8adc9f34d6bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/df28ecd7-d463-48b7-95e6-8adc9f34d6bd?source=api-prod","cve":"CVE-2026-89093","affectedVersions":"<=2.15.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/e24a672b-0ba4-4061-971d-255a61aed60b/bp-better-messages","title":"Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting via 'icn' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 15:29:12","sources":[{"name":"Wordfence","remoteId":"e24a672b-0ba4-4061-971d-255a61aed60b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e24a672b-0ba4-4061-971d-255a61aed60b?source=api-prod","cve":"CVE-2026-18555","affectedVersions":"<=2.15.22","severity":"medium"},{"advisoryId":"WPSECADV/WF/e9274957-7584-4df6-bb2a-d745510f5033/bp-better-messages","title":"Better Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 16:36:42","sources":[{"name":"Wordfence","remoteId":"e9274957-7584-4df6-bb2a-d745510f5033"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e9274957-7584-4df6-bb2a-d745510f5033?source=api-prod","cve":"CVE-2026-16585","affectedVersions":"<=2.15.19","severity":"high"},{"advisoryId":"WPSECADV/WF/eb89a16c-fae0-4d36-85aa-79beab753cba/bp-better-messages","title":"BP Better Messages <= 1.9.9.37 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb89a16c-fae0-4d36-85aa-79beab753cba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb89a16c-fae0-4d36-85aa-79beab753cba?source=api-prod","cve":"CVE-2021-24809","affectedVersions":"<1.9.9.41","severity":"high"},{"advisoryId":"WPSECADV/WF/f4f5a268-7e7f-4dbe-823a-a17ac0f52928/bp-better-messages","title":"Better Messages <= 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via User Display Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:13:22","sources":[{"name":"Wordfence","remoteId":"f4f5a268-7e7f-4dbe-823a-a17ac0f52928"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f4f5a268-7e7f-4dbe-823a-a17ac0f52928?source=api-prod","cve":"CVE-2026-94376","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f67ce101-3b4f-45be-9aed-d9055cc09fd3/bp-better-messages","title":"Better Messages <= 1.9.9.148 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"f67ce101-3b4f-45be-9aed-d9055cc09fd3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f67ce101-3b4f-45be-9aed-d9055cc09fd3?source=api-prod","cve":"CVE-2022-29454","affectedVersions":"<=1.9.9.148","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/169a857f-1ae0-40f6-8a34-10c573af59c5/bp-better-messages","title":"Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"169a857f-1ae0-40f6-8a34-10c573af59c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/169a857f-1ae0-40f6-8a34-10c573af59c5?source=api-prod","cve":"CVE-2024-13612","affectedVersions":"<=2.6.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/1e6327b0-a047-4f8c-8e95-88f2e4b7089f/bp-better-messages","title":"BP Better Messages <= 2.4.32 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"1e6327b0-a047-4f8c-8e95-88f2e4b7089f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1e6327b0-a047-4f8c-8e95-88f2e4b7089f?source=api-prod","cve":"CVE-2024-32802","affectedVersions":"<=2.4.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/22a798d7-03e6-4083-9af2-235238b09fc9/bp-better-messages","title":"Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.15.27 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"22a798d7-03e6-4083-9af2-235238b09fc9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22a798d7-03e6-4083-9af2-235238b09fc9?source=api-prod","cve":"CVE-2026-84812","affectedVersions":"<=2.15.27","severity":"high"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/bp-better-messages","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.9.9.170","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e7f310e-1e10-44dd-9928-23e63af21fef/bp-better-messages","title":"Better Messages <= 1.9.10.68 - Authorization Bypass to Blocking Control Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e7f310e-1e10-44dd-9928-23e63af21fef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e7f310e-1e10-44dd-9928-23e63af21fef?source=api-prod","cve":"CVE-2022-40216","affectedVersions":"<=1.9.10.68","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/bp-better-messages","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":">=1.9.10.72,<=2.1.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/553a9a16-97e0-4443-9d4b-dd901b86141b/bp-better-messages","title":"Better Messages <= 3.0.4 - Authenticated (Subscriber+) SQL Injection via 'group_id' Message Meta Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:12:46","sources":[{"name":"Wordfence","remoteId":"553a9a16-97e0-4443-9d4b-dd901b86141b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/553a9a16-97e0-4443-9d4b-dd901b86141b?source=api-prod","cve":"CVE-2026-93899","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5a2e8746-9bd7-47a9-96e3-1aba4502ef1e/bp-better-messages","title":"Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"5a2e8746-9bd7-47a9-96e3-1aba4502ef1e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5a2e8746-9bd7-47a9-96e3-1aba4502ef1e?source=api-prod","cve":"CVE-2026-114179","affectedVersions":"<=3.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/68fee8cb-476d-4962-b830-59fd823329ac/bp-better-messages","title":"Better Messages <= 1.9.10.57 - Resource Exhaustion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"68fee8cb-476d-4962-b830-59fd823329ac"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68fee8cb-476d-4962-b830-59fd823329ac?source=api-prod","cve":"CVE-2022-33142","affectedVersions":"<=1.9.10.57","severity":"high"},{"advisoryId":"WPSECADV/WF/70f2965a-37fe-4b7e-890a-9bf73b5de1c7/bp-better-messages","title":"Better Messages <= 1.9.10.68 - Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"70f2965a-37fe-4b7e-890a-9bf73b5de1c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70f2965a-37fe-4b7e-890a-9bf73b5de1c7?source=api-prod","cve":"CVE-2022-41609","affectedVersions":"<=1.9.10.68","severity":"high"},{"advisoryId":"WPSECADV/WF/997918b9-2ccd-413e-9df2-d24bc3820ba1/bp-better-messages","title":"Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-28 19:31:16","sources":[{"name":"Wordfence","remoteId":"997918b9-2ccd-413e-9df2-d24bc3820ba1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/997918b9-2ccd-413e-9df2-d24bc3820ba1?source=api-prod","cve":"CVE-2024-13611","affectedVersions":"<=2.6.9","severity":"high"},{"advisoryId":"WPSECADV/WF/a3e34ec7-eeb2-4966-bac3-c7d4723355d7/bp-better-messages","title":"Better Messages <= 1.9.9.148 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3e34ec7-eeb2-4966-bac3-c7d4723355d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3e34ec7-eeb2-4966-bac3-c7d4723355d7?source=api-prod","cve":"CVE-2022-36389","affectedVersions":"<=1.9.9.148","severity":"high"},{"advisoryId":"WPSECADV/WF/a4ccc7f8-c8e0-457a-b437-2a23530a9df4/bp-better-messages","title":"BP Better Messages <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"a4ccc7f8-c8e0-457a-b437-2a23530a9df4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a4ccc7f8-c8e0-457a-b437-2a23530a9df4?source=api-prod","cve":"CVE-2023-49168","affectedVersions":"<=2.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3243fe4-9d11-49f0-884b-0162cd776993/bp-better-messages","title":"Better Messages <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure via '/thread/<id>' REST Endpoint\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-18 13:52:39","sources":[{"name":"Wordfence","remoteId":"b3243fe4-9d11-49f0-884b-0162cd776993"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3243fe4-9d11-49f0-884b-0162cd776993?source=api-prod","cve":"CVE-2026-89334","affectedVersions":"<=2.15.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/b67710d7-976b-4a65-bad3-091a97aceb00/bp-better-messages","title":"Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"b67710d7-976b-4a65-bad3-091a97aceb00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b67710d7-976b-4a65-bad3-091a97aceb00?source=api-prod","cve":"CVE-2024-13697","affectedVersions":"<=2.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/b7034792-4e5e-4745-a873-3c4ef854a65e/bp-better-messages","title":"Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.15.22 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7034792-4e5e-4745-a873-3c4ef854a65e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7034792-4e5e-4745-a873-3c4ef854a65e?source=api-prod","cve":"CVE-2026-32547","affectedVersions":"<=2.15.22","severity":"high"},{"advisoryId":"WPSECADV/WF/be23d61f-1e7f-40fb-88ca-dd0ed226a7c5/bp-better-messages","title":"Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.14.16 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"be23d61f-1e7f-40fb-88ca-dd0ed226a7c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be23d61f-1e7f-40fb-88ca-dd0ed226a7c5?source=api-prod","cve":"CVE-2026-42736","affectedVersions":"<=2.14.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/c322841a-4134-4c21-8028-0ccacd46335b/bp-better-messages","title":"BP Better Messages <= 1.9.9.37 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"c322841a-4134-4c21-8028-0ccacd46335b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c322841a-4134-4c21-8028-0ccacd46335b?source=api-prod","cve":"CVE-2021-24808","affectedVersions":"<1.9.9.41","severity":"medium"},{"advisoryId":"WPSECADV/WF/d68bbf0d-72e9-4295-a1e1-4abeb36cae1b/bp-better-messages","title":"Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-16 17:20:44","sources":[{"name":"Wordfence","remoteId":"d68bbf0d-72e9-4295-a1e1-4abeb36cae1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d68bbf0d-72e9-4295-a1e1-4abeb36cae1b?source=api-prod","cve":"CVE-2025-14154","affectedVersions":"<=2.10.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d694491c-c0f5-4418-805a-db792ea4f712/bp-better-messages","title":"Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-30 17:17:30","sources":[{"name":"Wordfence","remoteId":"d694491c-c0f5-4418-805a-db792ea4f712"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d694491c-c0f5-4418-805a-db792ea4f712?source=api-prod","cve":"CVE-2024-13362","affectedVersions":"<=2.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/df28ecd7-d463-48b7-95e6-8adc9f34d6bd/bp-better-messages","title":"Better Messages <= 2.15.33 - Unauthenticated Information Exposure Spoofing via 'X-Real-IP' Header via /guests/register\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-18 13:53:09","sources":[{"name":"Wordfence","remoteId":"df28ecd7-d463-48b7-95e6-8adc9f34d6bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/df28ecd7-d463-48b7-95e6-8adc9f34d6bd?source=api-prod","cve":"CVE-2026-89093","affectedVersions":"<=2.15.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/e24a672b-0ba4-4061-971d-255a61aed60b/bp-better-messages","title":"Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting via 'icn' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 15:29:12","sources":[{"name":"Wordfence","remoteId":"e24a672b-0ba4-4061-971d-255a61aed60b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e24a672b-0ba4-4061-971d-255a61aed60b?source=api-prod","cve":"CVE-2026-18555","affectedVersions":"<=2.15.22","severity":"medium"},{"advisoryId":"WPSECADV/WF/e9274957-7584-4df6-bb2a-d745510f5033/bp-better-messages","title":"Better Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 16:36:42","sources":[{"name":"Wordfence","remoteId":"e9274957-7584-4df6-bb2a-d745510f5033"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e9274957-7584-4df6-bb2a-d745510f5033?source=api-prod","cve":"CVE-2026-16585","affectedVersions":"<=2.15.19","severity":"high"},{"advisoryId":"WPSECADV/WF/eb89a16c-fae0-4d36-85aa-79beab753cba/bp-better-messages","title":"BP Better Messages <= 1.9.9.37 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb89a16c-fae0-4d36-85aa-79beab753cba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb89a16c-fae0-4d36-85aa-79beab753cba?source=api-prod","cve":"CVE-2021-24809","affectedVersions":"<1.9.9.41","severity":"high"},{"advisoryId":"WPSECADV/WF/f4f5a268-7e7f-4dbe-823a-a17ac0f52928/bp-better-messages","title":"Better Messages <= 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via User Display Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:13:22","sources":[{"name":"Wordfence","remoteId":"f4f5a268-7e7f-4dbe-823a-a17ac0f52928"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f4f5a268-7e7f-4dbe-823a-a17ac0f52928?source=api-prod","cve":"CVE-2026-94376","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f67ce101-3b4f-45be-9aed-d9055cc09fd3/bp-better-messages","title":"Better Messages <= 1.9.9.148 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"f67ce101-3b4f-45be-9aed-d9055cc09fd3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f67ce101-3b4f-45be-9aed-d9055cc09fd3?source=api-prod","cve":"CVE-2022-29454","affectedVersions":"<=1.9.9.148","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_636173736f2d74752d646f6e672d7861632d6e68616e2d7468616e682d746f616e2d63687579656e2d6b686f616e2d6e67616e2d68616e67811c9dc5_gen.json b/internal/data/assets/plugin_636173736f2d74752d646f6e672d7861632d6e68616e2d7468616e682d746f616e2d63687579656e2d6b686f616e2d6e67616e2d68616e67811c9dc5_gen.json
index b6e3edf0..79008456 100644
--- a/internal/data/assets/plugin_636173736f2d74752d646f6e672d7861632d6e68616e2d7468616e682d746f616e2d63687579656e2d6b686f616e2d6e67616e2d68616e67811c9dc5_gen.json
+++ b/internal/data/assets/plugin_636173736f2d74752d646f6e672d7861632d6e68616e2d7468616e682d746f616e2d63687579656e2d6b686f616e2d6e67616e2d68616e67811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/edf0760c-356a-4c55-9ccc-9f086dae12b6/casso-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang","title":"Casso – Tự động xác nhận thanh toán chuyển khoản ngân hàng <= 2.8.6 - Authenticated (Admin+) Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"edf0760c-356a-4c55-9ccc-9f086dae12b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/edf0760c-356a-4c55-9ccc-9f086dae12b6?source=api-prod","affectedVersions":"<=2.8.6","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/c86d41e1-20e9-45b4-9e02-796652fa0546/casso-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang","title":"Casso Flow – Tự động xác nhận thanh toán chuyển khoản ngân hàng < 4.2.0 - Unauthenticated Arbitrary Order Status Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"c86d41e1-20e9-45b4-9e02-796652fa0546"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c86d41e1-20e9-45b4-9e02-796652fa0546?source=api-prod","cve":"CVE-2026-103382","affectedVersions":"<4.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/edf0760c-356a-4c55-9ccc-9f086dae12b6/casso-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang","title":"Casso – Tự động xác nhận thanh toán chuyển khoản ngân hàng <= 2.8.6 - Authenticated (Admin+) Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"edf0760c-356a-4c55-9ccc-9f086dae12b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/edf0760c-356a-4c55-9ccc-9f086dae12b6?source=api-prod","affectedVersions":"<=2.8.6","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_63636176616e75652d776f6f636f6d6d657263652d7061796d656e742d676574776179811c9dc5_gen.json b/internal/data/assets/plugin_63636176616e75652d776f6f636f6d6d657263652d7061796d656e742d676574776179811c9dc5_gen.json
new file mode 100644
index 00000000..4c7d69d0
--- /dev/null
+++ b/internal/data/assets/plugin_63636176616e75652d776f6f636f6d6d657263652d7061796d656e742d676574776179811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/30838075-7574-49e0-b8aa-924cb4f0b7ab/ccavanue-woocommerce-payment-getway","title":"CCAvenue Payment Gateway for WooCommerce <= 3.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"30838075-7574-49e0-b8aa-924cb4f0b7ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/30838075-7574-49e0-b8aa-924cb4f0b7ab?source=api-prod","cve":"CVE-2026-103298","affectedVersions":"<=3.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_636865636b6f75742d66696c65732d75706c6f61642d776f6f636f6d6d65726365811c9dc5_gen.json b/internal/data/assets/plugin_636865636b6f75742d66696c65732d75706c6f61642d776f6f636f6d6d65726365811c9dc5_gen.json
index c6413cd6..84711e5a 100644
--- a/internal/data/assets/plugin_636865636b6f75742d66696c65732d75706c6f61642d776f6f636f6d6d65726365811c9dc5_gen.json
+++ b/internal/data/assets/plugin_636865636b6f75742d66696c65732d75706c6f61642d776f6f636f6d6d65726365811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/09d9785a-db71-4735-b86b-7fa10cf36a0b/checkout-files-upload-woocommerce","title":"Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-17 20:47:11","sources":[{"name":"Wordfence","remoteId":"09d9785a-db71-4735-b86b-7fa10cf36a0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09d9785a-db71-4735-b86b-7fa10cf36a0b?source=api-prod","cve":"CVE-2025-4212","affectedVersions":"<=2.2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/287a3f78-ae8c-485a-8a26-77013fe5e9b4/checkout-files-upload-woocommerce","title":"Checkout Files Upload for WooCommerce <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"287a3f78-ae8c-485a-8a26-77013fe5e9b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/287a3f78-ae8c-485a-8a26-77013fe5e9b4?source=api-prod","cve":"CVE-2025-39520","affectedVersions":"<=2.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/2f7c1848-d49f-4f34-8869-3ddbdccdc38f/checkout-files-upload-woocommerce","title":"Checkout Files Upload for WooCommerce <= 2.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-05-04 06:49:00","sources":[{"name":"Wordfence","remoteId":"2f7c1848-d49f-4f34-8869-3ddbdccdc38f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f7c1848-d49f-4f34-8869-3ddbdccdc38f?source=api-prod","cve":"CVE-2022-29425","affectedVersions":"<=2.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/7d090e5e-bbcf-4e26-81c5-ed7dcae21f31/checkout-files-upload-woocommerce","title":"Checkout Files Upload for WooCommerce <= 2.2.5 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d090e5e-bbcf-4e26-81c5-ed7dcae21f31"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d090e5e-bbcf-4e26-81c5-ed7dcae21f31?source=api-prod","cve":"CVE-2026-42725","affectedVersions":"<=2.2.5","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/09d9785a-db71-4735-b86b-7fa10cf36a0b/checkout-files-upload-woocommerce","title":"Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-17 20:47:11","sources":[{"name":"Wordfence","remoteId":"09d9785a-db71-4735-b86b-7fa10cf36a0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09d9785a-db71-4735-b86b-7fa10cf36a0b?source=api-prod","cve":"CVE-2025-4212","affectedVersions":"<=2.2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/15f23748-fc32-4ea1-bd23-7b13ec1409af/checkout-files-upload-woocommerce","title":"Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"15f23748-fc32-4ea1-bd23-7b13ec1409af"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/15f23748-fc32-4ea1-bd23-7b13ec1409af?source=api-prod","cve":"CVE-2026-103688","affectedVersions":"<2.4.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/287a3f78-ae8c-485a-8a26-77013fe5e9b4/checkout-files-upload-woocommerce","title":"Checkout Files Upload for WooCommerce <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"287a3f78-ae8c-485a-8a26-77013fe5e9b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/287a3f78-ae8c-485a-8a26-77013fe5e9b4?source=api-prod","cve":"CVE-2025-39520","affectedVersions":"<=2.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/2f7c1848-d49f-4f34-8869-3ddbdccdc38f/checkout-files-upload-woocommerce","title":"Checkout Files Upload for WooCommerce <= 2.1.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-05-04 06:49:00","sources":[{"name":"Wordfence","remoteId":"2f7c1848-d49f-4f34-8869-3ddbdccdc38f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f7c1848-d49f-4f34-8869-3ddbdccdc38f?source=api-prod","cve":"CVE-2022-29425","affectedVersions":"<=2.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/7d090e5e-bbcf-4e26-81c5-ed7dcae21f31/checkout-files-upload-woocommerce","title":"Checkout Files Upload for WooCommerce <= 2.2.5 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d090e5e-bbcf-4e26-81c5-ed7dcae21f31"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d090e5e-bbcf-4e26-81c5-ed7dcae21f31?source=api-prod","cve":"CVE-2026-42725","affectedVersions":"<=2.2.5","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6368657272792d706c7567696e811c9dc5_gen.json b/internal/data/assets/plugin_6368657272792d706c7567696e811c9dc5_gen.json
index cfa49edc..8f51504f 100644
--- a/internal/data/assets/plugin_6368657272792d706c7567696e811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6368657272792d706c7567696e811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/fa2bc3ae-1162-496b-8bc3-5bee1c0ff702/cherry-plugin","title":"Cherry Plugin < 1.2.7 - Arbitrary File Upload\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-02-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"fa2bc3ae-1162-496b-8bc3-5bee1c0ff702"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fa2bc3ae-1162-496b-8bc3-5bee1c0ff702?source=api-prod","affectedVersions":"<1.2.7","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/fa2bc3ae-1162-496b-8bc3-5bee1c0ff702/cherry-plugin","title":"Cherry Plugin < 1.2.7 - Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-02-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"fa2bc3ae-1162-496b-8bc3-5bee1c0ff702"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fa2bc3ae-1162-496b-8bc3-5bee1c0ff702?source=api-prod","cve":"CVE-2016-20103","affectedVersions":"<1.2.7","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_636c61737369666965642d6c697374696e67811c9dc5_gen.json b/internal/data/assets/plugin_636c61737369666965642d6c697374696e67811c9dc5_gen.json
index edf5017b..d3d1c06e 100644
--- a/internal/data/assets/plugin_636c61737369666965642d6c697374696e67811c9dc5_gen.json
+++ b/internal/data/assets/plugin_636c61737369666965642d6c697374696e67811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/07cb3d57-d768-49a5-8af0-9dc4384487d5/classified-listing","title":"Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-14 19:53:53","sources":[{"name":"Wordfence","remoteId":"07cb3d57-d768-49a5-8af0-9dc4384487d5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/07cb3d57-d768-49a5-8af0-9dc4384487d5?source=api-prod","cve":"CVE-2026-7563","affectedVersions":"<=5.3.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ffc7596-436d-4f29-8921-013d6c20b7ae/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ffc7596-436d-4f29-8921-013d6c20b7ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ffc7596-436d-4f29-8921-013d6c20b7ae?source=api-prod","cve":"CVE-2026-94665","affectedVersions":"<=6.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/13648a6d-481d-4eb4-82c8-30476454793e/classified-listing","title":"Classified Listing <= 5.4.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"13648a6d-481d-4eb4-82c8-30476454793e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13648a6d-481d-4eb4-82c8-30476454793e?source=api-prod","cve":"CVE-2026-16276","affectedVersions":"<=5.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/13d9a59f-1a1a-4936-a5ab-8a5e0c50303b/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"13d9a59f-1a1a-4936-a5ab-8a5e0c50303b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13d9a59f-1a1a-4936-a5ab-8a5e0c50303b?source=api-prod","cve":"CVE-2024-11194","affectedVersions":"<=3.1.15.1","severity":"high"},{"advisoryId":"WPSECADV/WF/2352dce7-5302-4892-9ae2-bf814f029af4/classified-listing","title":"Classified Listing <= 2.4.5 - Cross-Site Request Forgery via rtcl_ajax_thumbnail_delete\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"2352dce7-5302-4892-9ae2-bf814f029af4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2352dce7-5302-4892-9ae2-bf814f029af4?source=api-prod","cve":"CVE-2023-37387","affectedVersions":"<=2.4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/38ce5790-f6b8-43a0-a1a3-290a86eb49cb/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"38ce5790-f6b8-43a0-a1a3-290a86eb49cb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38ce5790-f6b8-43a0-a1a3-290a86eb49cb?source=api-prod","cve":"CVE-2026-57344","affectedVersions":"<=5.4.2","severity":"high"},{"advisoryId":"WPSECADV/WF/41fcf001-84da-4baf-9f43-5911ad33af35/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 4.0.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"41fcf001-84da-4baf-9f43-5911ad33af35"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41fcf001-84da-4baf-9f43-5911ad33af35?source=api-prod","cve":"CVE-2025-24745","affectedVersions":"<=4.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/494d2e69-0759-419a-a603-e8870c157e49/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-12 18:35:01","sources":[{"name":"Wordfence","remoteId":"494d2e69-0759-419a-a603-e8870c157e49"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/494d2e69-0759-419a-a603-e8870c157e49?source=api-prod","cve":"CVE-2024-7888","affectedVersions":"<=3.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/4cfee2e2-3486-4be8-954f-6d7f9b6d54ec/classified-listing","title":"Classima < 2.1.11 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"4cfee2e2-3486-4be8-954f-6d7f9b6d54ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4cfee2e2-3486-4be8-954f-6d7f9b6d54ec?source=api-prod","cve":"CVE-2022-2654","affectedVersions":"<2.2.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/51560b6e-e926-4c3e-aa43-d604e7239a91/classified-listing","title":"Classified Listing <= 5.3.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) Receipt Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"51560b6e-e926-4c3e-aa43-d604e7239a91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51560b6e-e926-4c3e-aa43-d604e7239a91?source=api-prod","cve":"CVE-2026-14183","affectedVersions":"<=5.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/517531ec-4160-4287-8499-6266e08223dc/classified-listing","title":"Classified Listing <= 4.2.0 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"517531ec-4160-4287-8499-6266e08223dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/517531ec-4160-4287-8499-6266e08223dc?source=api-prod","cve":"CVE-2025-52715","affectedVersions":"<=4.2.0","severity":"high"},{"advisoryId":"WPSECADV/WF/5439651e-5557-4b13-813a-4fc0ad876104/classified-listing","title":"Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"5439651e-5557-4b13-813a-4fc0ad876104"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5439651e-5557-4b13-813a-4fc0ad876104?source=api-prod","cve":"CVE-2024-1315","affectedVersions":"<=3.0.4","severity":"high"},{"advisoryId":"WPSECADV/WF/5f7660ba-c3be-44f0-91cb-809d0021759a/classified-listing","title":"Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 15:38:00","sources":[{"name":"Wordfence","remoteId":"5f7660ba-c3be-44f0-91cb-809d0021759a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f7660ba-c3be-44f0-91cb-809d0021759a?source=api-prod","cve":"CVE-2026-10779","affectedVersions":"<=5.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/60782340-8913-4114-8544-109337795f45/classified-listing","title":"Classified Listing <= 5.0.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"60782340-8913-4114-8544-109337795f45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/60782340-8913-4114-8544-109337795f45?source=api-prod","cve":"CVE-2025-58601","affectedVersions":"<=5.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/621412c6-83fc-4770-ac8d-d76cb9b7f6e4/classified-listing","title":"Classified Listing <= 6.1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"621412c6-83fc-4770-ac8d-d76cb9b7f6e4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/621412c6-83fc-4770-ac8d-d76cb9b7f6e4?source=api-prod","cve":"CVE-2026-16281","affectedVersions":"<=6.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/70dda3b3-8515-49b2-8e45-21ceb9aeb419/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"70dda3b3-8515-49b2-8e45-21ceb9aeb419"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70dda3b3-8515-49b2-8e45-21ceb9aeb419?source=api-prod","cve":"CVE-2026-42651","affectedVersions":"<=5.3.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ac4388b-0d23-4d42-910f-8391730fd312/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ac4388b-0d23-4d42-910f-8391730fd312"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ac4388b-0d23-4d42-910f-8391730fd312?source=api-prod","cve":"CVE-2026-84217","affectedVersions":"<=6.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/811f147e-5829-4f7e-91d8-9dba780950d5/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-10 22:39:09","sources":[{"name":"Wordfence","remoteId":"811f147e-5829-4f7e-91d8-9dba780950d5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/811f147e-5829-4f7e-91d8-9dba780950d5?source=api-prod","cve":"CVE-2025-12953","affectedVersions":"<=5.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e926708-3c7f-4d7b-a64b-209f696984f9/classified-listing","title":"Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e926708-3c7f-4d7b-a64b-209f696984f9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e926708-3c7f-4d7b-a64b-209f696984f9?source=api-prod","cve":"CVE-2024-52386","affectedVersions":"<=3.1.16","severity":"high"},{"advisoryId":"WPSECADV/WF/9a724287-5b9c-45cb-ab83-28d73ddc39ec/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Authenticated (Subscriber+) Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"9a724287-5b9c-45cb-ab83-28d73ddc39ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a724287-5b9c-45cb-ab83-28d73ddc39ec?source=api-prod","cve":"CVE-2026-42679","affectedVersions":"<=5.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/abebfbc4-37ed-44d5-a35d-d6ad87346f3a/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.4 - Authenticated (Subscriber+) Sensitive Data Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"abebfbc4-37ed-44d5-a35d-d6ad87346f3a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/abebfbc4-37ed-44d5-a35d-d6ad87346f3a?source=api-prod","cve":"CVE-2026-23546","affectedVersions":"<=5.3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/baf2af6b-277e-4613-b066-1f2acda56602/classified-listing","title":"Classified Listing <= 5.0.0 - Authenticated (Contributor+) Content Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"baf2af6b-277e-4613-b066-1f2acda56602"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/baf2af6b-277e-4613-b066-1f2acda56602?source=api-prod","cve":"CVE-2025-54698","affectedVersions":"<=5.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/cbb25a81-a92b-4773-9194-9aa355750817/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"cbb25a81-a92b-4773-9194-9aa355750817"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cbb25a81-a92b-4773-9194-9aa355750817?source=api-prod","cve":"CVE-2026-42640","affectedVersions":"<=5.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/d67a5bf3-37fc-4739-8e08-ef60e547d378/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"d67a5bf3-37fc-4739-8e08-ef60e547d378"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d67a5bf3-37fc-4739-8e08-ef60e547d378?source=api-prod","cve":"CVE-2026-96351","affectedVersions":"<=6.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/d8c99ca9-74dc-4dca-8fa2-f637e98a32a8/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory < 6.1.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"d8c99ca9-74dc-4dca-8fa2-f637e98a32a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d8c99ca9-74dc-4dca-8fa2-f637e98a32a8?source=api-prod","cve":"CVE-2026-106646","affectedVersions":"<6.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d9b10db9-0c7c-4f13-9d98-6d407446cfb8/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-17 09:59:24","sources":[{"name":"Wordfence","remoteId":"d9b10db9-0c7c-4f13-9d98-6d407446cfb8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d9b10db9-0c7c-4f13-9d98-6d407446cfb8?source=api-prod","cve":"CVE-2025-7711","affectedVersions":"<=5.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e00672e0-ce3a-45ac-9901-7497eb1cc1a2/classified-listing","title":"Classified Listing <= 5.4.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"e00672e0-ce3a-45ac-9901-7497eb1cc1a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e00672e0-ce3a-45ac-9901-7497eb1cc1a2?source=api-prod","cve":"CVE-2026-16274","affectedVersions":"<=5.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e701b771-59f2-4783-b0a1-bea4d6c3d245/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"e701b771-59f2-4783-b0a1-bea4d6c3d245"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e701b771-59f2-4783-b0a1-bea4d6c3d245?source=api-prod","cve":"CVE-2025-1063","affectedVersions":"<=4.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/e7113b1c-78dc-4648-b14a-52ff6668fd1d/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"e7113b1c-78dc-4648-b14a-52ff6668fd1d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e7113b1c-78dc-4648-b14a-52ff6668fd1d?source=api-prod","cve":"CVE-2024-3893","affectedVersions":"<=3.0.10.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f0e6b405-0843-4469-ae60-7023dea0786f/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f0e6b405-0843-4469-ae60-7023dea0786f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f0e6b405-0843-4469-ae60-7023dea0786f?source=api-prod","cve":"CVE-2026-42658","affectedVersions":"<=5.3.8","severity":"high"},{"advisoryId":"WPSECADV/WF/f2fb18eb-a5ce-463f-aae2-55dc0bb3e9c7/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2fb18eb-a5ce-463f-aae2-55dc0bb3e9c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2fb18eb-a5ce-463f-aae2-55dc0bb3e9c7?source=api-prod","cve":"CVE-2026-57355","affectedVersions":"<=5.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f5da4cdd-15c7-41a6-be2f-e31bd407ae05/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"f5da4cdd-15c7-41a6-be2f-e31bd407ae05"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f5da4cdd-15c7-41a6-be2f-e31bd407ae05?source=api-prod","cve":"CVE-2024-1352","affectedVersions":"<=3.0.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/07cb3d57-d768-49a5-8af0-9dc4384487d5/classified-listing","title":"Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-14 19:53:53","sources":[{"name":"Wordfence","remoteId":"07cb3d57-d768-49a5-8af0-9dc4384487d5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/07cb3d57-d768-49a5-8af0-9dc4384487d5?source=api-prod","cve":"CVE-2026-7563","affectedVersions":"<=5.3.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ffc7596-436d-4f29-8921-013d6c20b7ae/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ffc7596-436d-4f29-8921-013d6c20b7ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ffc7596-436d-4f29-8921-013d6c20b7ae?source=api-prod","cve":"CVE-2026-94665","affectedVersions":"<=6.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/13648a6d-481d-4eb4-82c8-30476454793e/classified-listing","title":"Classified Listing <= 5.4.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"13648a6d-481d-4eb4-82c8-30476454793e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13648a6d-481d-4eb4-82c8-30476454793e?source=api-prod","cve":"CVE-2026-16276","affectedVersions":"<=5.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/13d9a59f-1a1a-4936-a5ab-8a5e0c50303b/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"13d9a59f-1a1a-4936-a5ab-8a5e0c50303b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13d9a59f-1a1a-4936-a5ab-8a5e0c50303b?source=api-prod","cve":"CVE-2024-11194","affectedVersions":"<=3.1.15.1","severity":"high"},{"advisoryId":"WPSECADV/WF/2352dce7-5302-4892-9ae2-bf814f029af4/classified-listing","title":"Classified Listing <= 2.4.5 - Cross-Site Request Forgery via rtcl_ajax_thumbnail_delete\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"2352dce7-5302-4892-9ae2-bf814f029af4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2352dce7-5302-4892-9ae2-bf814f029af4?source=api-prod","cve":"CVE-2023-37387","affectedVersions":"<=2.4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/38ce5790-f6b8-43a0-a1a3-290a86eb49cb/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"38ce5790-f6b8-43a0-a1a3-290a86eb49cb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38ce5790-f6b8-43a0-a1a3-290a86eb49cb?source=api-prod","cve":"CVE-2026-57344","affectedVersions":"<=5.4.2","severity":"high"},{"advisoryId":"WPSECADV/WF/41fcf001-84da-4baf-9f43-5911ad33af35/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 4.0.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"41fcf001-84da-4baf-9f43-5911ad33af35"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41fcf001-84da-4baf-9f43-5911ad33af35?source=api-prod","cve":"CVE-2025-24745","affectedVersions":"<=4.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/494d2e69-0759-419a-a603-e8870c157e49/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-12 18:35:01","sources":[{"name":"Wordfence","remoteId":"494d2e69-0759-419a-a603-e8870c157e49"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/494d2e69-0759-419a-a603-e8870c157e49?source=api-prod","cve":"CVE-2024-7888","affectedVersions":"<=3.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/4cfee2e2-3486-4be8-954f-6d7f9b6d54ec/classified-listing","title":"Classima < 2.1.11 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"4cfee2e2-3486-4be8-954f-6d7f9b6d54ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4cfee2e2-3486-4be8-954f-6d7f9b6d54ec?source=api-prod","cve":"CVE-2022-2654","affectedVersions":"<2.2.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/51560b6e-e926-4c3e-aa43-d604e7239a91/classified-listing","title":"Classified Listing <= 5.3.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) Receipt Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"51560b6e-e926-4c3e-aa43-d604e7239a91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51560b6e-e926-4c3e-aa43-d604e7239a91?source=api-prod","cve":"CVE-2026-14183","affectedVersions":"<=5.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/517531ec-4160-4287-8499-6266e08223dc/classified-listing","title":"Classified Listing <= 4.2.0 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"517531ec-4160-4287-8499-6266e08223dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/517531ec-4160-4287-8499-6266e08223dc?source=api-prod","cve":"CVE-2025-52715","affectedVersions":"<=4.2.0","severity":"high"},{"advisoryId":"WPSECADV/WF/5439651e-5557-4b13-813a-4fc0ad876104/classified-listing","title":"Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"5439651e-5557-4b13-813a-4fc0ad876104"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5439651e-5557-4b13-813a-4fc0ad876104?source=api-prod","cve":"CVE-2024-1315","affectedVersions":"<=3.0.4","severity":"high"},{"advisoryId":"WPSECADV/WF/5f7660ba-c3be-44f0-91cb-809d0021759a/classified-listing","title":"Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 15:38:00","sources":[{"name":"Wordfence","remoteId":"5f7660ba-c3be-44f0-91cb-809d0021759a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f7660ba-c3be-44f0-91cb-809d0021759a?source=api-prod","cve":"CVE-2026-10779","affectedVersions":"<=5.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/60782340-8913-4114-8544-109337795f45/classified-listing","title":"Classified Listing <= 5.0.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"60782340-8913-4114-8544-109337795f45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/60782340-8913-4114-8544-109337795f45?source=api-prod","cve":"CVE-2025-58601","affectedVersions":"<=5.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/621412c6-83fc-4770-ac8d-d76cb9b7f6e4/classified-listing","title":"Classified Listing <= 6.1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"621412c6-83fc-4770-ac8d-d76cb9b7f6e4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/621412c6-83fc-4770-ac8d-d76cb9b7f6e4?source=api-prod","cve":"CVE-2026-16281","affectedVersions":"<=6.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/70dda3b3-8515-49b2-8e45-21ceb9aeb419/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"70dda3b3-8515-49b2-8e45-21ceb9aeb419"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70dda3b3-8515-49b2-8e45-21ceb9aeb419?source=api-prod","cve":"CVE-2026-42651","affectedVersions":"<=5.3.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ac4388b-0d23-4d42-910f-8391730fd312/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ac4388b-0d23-4d42-910f-8391730fd312"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ac4388b-0d23-4d42-910f-8391730fd312?source=api-prod","cve":"CVE-2026-84217","affectedVersions":"<=6.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/811f147e-5829-4f7e-91d8-9dba780950d5/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-10 22:39:09","sources":[{"name":"Wordfence","remoteId":"811f147e-5829-4f7e-91d8-9dba780950d5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/811f147e-5829-4f7e-91d8-9dba780950d5?source=api-prod","cve":"CVE-2025-12953","affectedVersions":"<=5.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e926708-3c7f-4d7b-a64b-209f696984f9/classified-listing","title":"Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e926708-3c7f-4d7b-a64b-209f696984f9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e926708-3c7f-4d7b-a64b-209f696984f9?source=api-prod","cve":"CVE-2024-52386","affectedVersions":"<=3.1.16","severity":"high"},{"advisoryId":"WPSECADV/WF/9a724287-5b9c-45cb-ab83-28d73ddc39ec/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Authenticated (Subscriber+) Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"9a724287-5b9c-45cb-ab83-28d73ddc39ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a724287-5b9c-45cb-ab83-28d73ddc39ec?source=api-prod","cve":"CVE-2026-42679","affectedVersions":"<=5.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/9cd8338c-9987-4a7b-bd10-757a2595aaad/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.5 - Authenticated (Subscriber+) Arbitrary PHP Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"9cd8338c-9987-4a7b-bd10-757a2595aaad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9cd8338c-9987-4a7b-bd10-757a2595aaad?source=api-prod","cve":"CVE-2026-111828","affectedVersions":"<=6.1.5","severity":"high"},{"advisoryId":"WPSECADV/WF/abebfbc4-37ed-44d5-a35d-d6ad87346f3a/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.4 - Authenticated (Subscriber+) Sensitive Data Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"abebfbc4-37ed-44d5-a35d-d6ad87346f3a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/abebfbc4-37ed-44d5-a35d-d6ad87346f3a?source=api-prod","cve":"CVE-2026-23546","affectedVersions":"<=5.3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/baf2af6b-277e-4613-b066-1f2acda56602/classified-listing","title":"Classified Listing <= 5.0.0 - Authenticated (Contributor+) Content Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"baf2af6b-277e-4613-b066-1f2acda56602"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/baf2af6b-277e-4613-b066-1f2acda56602?source=api-prod","cve":"CVE-2025-54698","affectedVersions":"<=5.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/cbb25a81-a92b-4773-9194-9aa355750817/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"cbb25a81-a92b-4773-9194-9aa355750817"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cbb25a81-a92b-4773-9194-9aa355750817?source=api-prod","cve":"CVE-2026-42640","affectedVersions":"<=5.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/d67a5bf3-37fc-4739-8e08-ef60e547d378/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"d67a5bf3-37fc-4739-8e08-ef60e547d378"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d67a5bf3-37fc-4739-8e08-ef60e547d378?source=api-prod","cve":"CVE-2026-96351","affectedVersions":"<=6.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/d8c99ca9-74dc-4dca-8fa2-f637e98a32a8/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory < 6.1.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"d8c99ca9-74dc-4dca-8fa2-f637e98a32a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d8c99ca9-74dc-4dca-8fa2-f637e98a32a8?source=api-prod","cve":"CVE-2026-106646","affectedVersions":"<6.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d9b10db9-0c7c-4f13-9d98-6d407446cfb8/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-17 09:59:24","sources":[{"name":"Wordfence","remoteId":"d9b10db9-0c7c-4f13-9d98-6d407446cfb8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d9b10db9-0c7c-4f13-9d98-6d407446cfb8?source=api-prod","cve":"CVE-2025-7711","affectedVersions":"<=5.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e00672e0-ce3a-45ac-9901-7497eb1cc1a2/classified-listing","title":"Classified Listing <= 5.4.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"e00672e0-ce3a-45ac-9901-7497eb1cc1a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e00672e0-ce3a-45ac-9901-7497eb1cc1a2?source=api-prod","cve":"CVE-2026-16274","affectedVersions":"<=5.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e701b771-59f2-4783-b0a1-bea4d6c3d245/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"e701b771-59f2-4783-b0a1-bea4d6c3d245"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e701b771-59f2-4783-b0a1-bea4d6c3d245?source=api-prod","cve":"CVE-2025-1063","affectedVersions":"<=4.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/e7113b1c-78dc-4648-b14a-52ff6668fd1d/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"e7113b1c-78dc-4648-b14a-52ff6668fd1d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e7113b1c-78dc-4648-b14a-52ff6668fd1d?source=api-prod","cve":"CVE-2024-3893","affectedVersions":"<=3.0.10.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f0e6b405-0843-4469-ae60-7023dea0786f/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f0e6b405-0843-4469-ae60-7023dea0786f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f0e6b405-0843-4469-ae60-7023dea0786f?source=api-prod","cve":"CVE-2026-42658","affectedVersions":"<=5.3.8","severity":"high"},{"advisoryId":"WPSECADV/WF/f2fb18eb-a5ce-463f-aae2-55dc0bb3e9c7/classified-listing","title":"Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2fb18eb-a5ce-463f-aae2-55dc0bb3e9c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2fb18eb-a5ce-463f-aae2-55dc0bb3e9c7?source=api-prod","cve":"CVE-2026-57355","affectedVersions":"<=5.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f5da4cdd-15c7-41a6-be2f-e31bd407ae05/classified-listing","title":"Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"f5da4cdd-15c7-41a6-be2f-e31bd407ae05"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f5da4cdd-15c7-41a6-be2f-e31bd407ae05?source=api-prod","cve":"CVE-2024-1352","affectedVersions":"<=3.0.4","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_636d702d636f6d696e672d736f6f6e2d6d61696e74656e616e6365811c9dc5_gen.json b/internal/data/assets/plugin_636d702d636f6d696e672d736f6f6e2d6d61696e74656e616e6365811c9dc5_gen.json
index 0990c023..3c75ee7c 100644
--- a/internal/data/assets/plugin_636d702d636f6d696e672d736f6f6e2d6d61696e74656e616e6365811c9dc5_gen.json
+++ b/internal/data/assets/plugin_636d702d636f6d696e672d736f6f6e2d6d61696e74656e616e6365811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0fdc2dac-b3ea-40bd-987b-e6c47e74aefc/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance <= 4.1.10 - Authenticated (Admin+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0fdc2dac-b3ea-40bd-987b-e6c47e74aefc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fdc2dac-b3ea-40bd-987b-e6c47e74aefc?source=api-prod","cve":"CVE-2023-50374","affectedVersions":"<=4.1.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/13fcfae2-33ad-44a7-885c-70e64b0074d8/cmp-coming-soon-maintenance","title":"CMP - Coming Soon & Maintenance <= 4.1.19 - Unauthenticated Maintenance Mode Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"13fcfae2-33ad-44a7-885c-70e64b0074d8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13fcfae2-33ad-44a7-885c-70e64b0074d8?source=api-prod","cve":"CVE-2026-13413","affectedVersions":"<=4.1.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/20e2f410-72a9-4d94-b80d-1cb625c08962/cmp-coming-soon-maintenance","title":"CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-21 16:45:20","sources":[{"name":"Wordfence","remoteId":"20e2f410-72a9-4d94-b80d-1cb625c08962"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20e2f410-72a9-4d94-b80d-1cb625c08962?source=api-prod","cve":"CVE-2026-12470","affectedVersions":"<=4.1.17","severity":"high"},{"advisoryId":"WPSECADV/WF/587e8fb5-6f89-45ee-959c-78f323b157b5/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Missing Authorization to Unauthenticated Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"587e8fb5-6f89-45ee-959c-78f323b157b5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/587e8fb5-6f89-45ee-959c-78f323b157b5?source=api-prod","cve":"CVE-2026-13414","affectedVersions":"<4.1.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/af955f69-b18c-446e-b05e-6a57a5f16dfa/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"af955f69-b18c-446e-b05e-6a57a5f16dfa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af955f69-b18c-446e-b05e-6a57a5f16dfa?source=api-prod","cve":"CVE-2023-2159","affectedVersions":"<=4.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/b18477b2-7b59-4ca2-aa26-d107f83df5a9/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance <= 4.1.13 - Authenticated (Admin+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"b18477b2-7b59-4ca2-aa26-d107f83df5a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b18477b2-7b59-4ca2-aa26-d107f83df5a9?source=api-prod","cve":"CVE-2025-32118","affectedVersions":"<=4.1.13","severity":"high"},{"advisoryId":"WPSECADV/WF/b4956173-b306-401c-b966-df884e8979e0/cmp-coming-soon-maintenance","title":"CMP - Coming Soon & Maintenance Plugin <= 4.0.18 - Unauthenticated Arbitrary CSS Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4956173-b306-401c-b966-df884e8979e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4956173-b306-401c-b966-df884e8979e0?source=api-prod","cve":"CVE-2022-0188","affectedVersions":"<4.0.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3917e62-6d94-4dc6-9324-1188fc072250/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3917e62-6d94-4dc6-9324-1188fc072250"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3917e62-6d94-4dc6-9324-1188fc072250?source=api-prod","cve":"CVE-2026-13416","affectedVersions":"<4.1.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6fb275b-dbba-46df-b170-977ef4a84c4c/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-17 15:02:18","sources":[{"name":"Wordfence","remoteId":"d6fb275b-dbba-46df-b170-977ef4a84c4c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6fb275b-dbba-46df-b170-977ef4a84c4c?source=api-prod","cve":"CVE-2026-6518","affectedVersions":"<=4.1.16","severity":"high"},{"advisoryId":"WPSECADV/WF/dc54e6dd-1529-4ab9-ae56-229d032ad5c6/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Authenticated (Editor+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"dc54e6dd-1529-4ab9-ae56-229d032ad5c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc54e6dd-1529-4ab9-ae56-229d032ad5c6?source=api-prod","cve":"CVE-2026-13415","affectedVersions":"<4.1.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/e01b4259-ed8d-44a4-9771-470de45b14a8/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"e01b4259-ed8d-44a4-9771-470de45b14a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e01b4259-ed8d-44a4-9771-470de45b14a8?source=api-prod","cve":"CVE-2023-1263","affectedVersions":"<=4.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f1ef067b-e4b4-4174-b6ff-ec94a7afd55d/cmp-coming-soon-maintenance","title":"CMP <= 3.8.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"f1ef067b-e4b4-4174-b6ff-ec94a7afd55d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f1ef067b-e4b4-4174-b6ff-ec94a7afd55d?source=api-prod","cve":"CVE-2020-36730","affectedVersions":"<=3.8.1","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0fdc2dac-b3ea-40bd-987b-e6c47e74aefc/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance <= 4.1.10 - Authenticated (Admin+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0fdc2dac-b3ea-40bd-987b-e6c47e74aefc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fdc2dac-b3ea-40bd-987b-e6c47e74aefc?source=api-prod","cve":"CVE-2023-50374","affectedVersions":"<=4.1.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/13fcfae2-33ad-44a7-885c-70e64b0074d8/cmp-coming-soon-maintenance","title":"CMP - Coming Soon & Maintenance <= 4.1.19 - Unauthenticated Maintenance Mode Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"13fcfae2-33ad-44a7-885c-70e64b0074d8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13fcfae2-33ad-44a7-885c-70e64b0074d8?source=api-prod","cve":"CVE-2026-13413","affectedVersions":"<=4.1.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/20e2f410-72a9-4d94-b80d-1cb625c08962/cmp-coming-soon-maintenance","title":"CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-21 16:45:20","sources":[{"name":"Wordfence","remoteId":"20e2f410-72a9-4d94-b80d-1cb625c08962"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20e2f410-72a9-4d94-b80d-1cb625c08962?source=api-prod","cve":"CVE-2026-12470","affectedVersions":"<=4.1.17","severity":"high"},{"advisoryId":"WPSECADV/WF/2e249525-ba74-4a4c-89f1-6996711c827f/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes 4.1.19 - 4.1.20 - Missing Authorization to Unauthenticated Maintenance Mode Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"2e249525-ba74-4a4c-89f1-6996711c827f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2e249525-ba74-4a4c-89f1-6996711c827f?source=api-prod","cve":"CVE-2026-101138","affectedVersions":">=4.1.19,<=4.1.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/587e8fb5-6f89-45ee-959c-78f323b157b5/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Missing Authorization to Unauthenticated Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"587e8fb5-6f89-45ee-959c-78f323b157b5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/587e8fb5-6f89-45ee-959c-78f323b157b5?source=api-prod","cve":"CVE-2026-13414","affectedVersions":"<4.1.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/af955f69-b18c-446e-b05e-6a57a5f16dfa/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"af955f69-b18c-446e-b05e-6a57a5f16dfa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af955f69-b18c-446e-b05e-6a57a5f16dfa?source=api-prod","cve":"CVE-2023-2159","affectedVersions":"<=4.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/b18477b2-7b59-4ca2-aa26-d107f83df5a9/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance <= 4.1.13 - Authenticated (Admin+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"b18477b2-7b59-4ca2-aa26-d107f83df5a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b18477b2-7b59-4ca2-aa26-d107f83df5a9?source=api-prod","cve":"CVE-2025-32118","affectedVersions":"<=4.1.13","severity":"high"},{"advisoryId":"WPSECADV/WF/b4956173-b306-401c-b966-df884e8979e0/cmp-coming-soon-maintenance","title":"CMP - Coming Soon & Maintenance Plugin <= 4.0.18 - Unauthenticated Arbitrary CSS Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4956173-b306-401c-b966-df884e8979e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4956173-b306-401c-b966-df884e8979e0?source=api-prod","cve":"CVE-2022-0188","affectedVersions":"<4.0.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3917e62-6d94-4dc6-9324-1188fc072250/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3917e62-6d94-4dc6-9324-1188fc072250"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3917e62-6d94-4dc6-9324-1188fc072250?source=api-prod","cve":"CVE-2026-13416","affectedVersions":"<4.1.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6fb275b-dbba-46df-b170-977ef4a84c4c/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-17 15:02:18","sources":[{"name":"Wordfence","remoteId":"d6fb275b-dbba-46df-b170-977ef4a84c4c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6fb275b-dbba-46df-b170-977ef4a84c4c?source=api-prod","cve":"CVE-2026-6518","affectedVersions":"<=4.1.16","severity":"high"},{"advisoryId":"WPSECADV/WF/dc54e6dd-1529-4ab9-ae56-229d032ad5c6/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Authenticated (Editor+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"dc54e6dd-1529-4ab9-ae56-229d032ad5c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc54e6dd-1529-4ab9-ae56-229d032ad5c6?source=api-prod","cve":"CVE-2026-13415","affectedVersions":"<4.1.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/e01b4259-ed8d-44a4-9771-470de45b14a8/cmp-coming-soon-maintenance","title":"CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"e01b4259-ed8d-44a4-9771-470de45b14a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e01b4259-ed8d-44a4-9771-470de45b14a8?source=api-prod","cve":"CVE-2023-1263","affectedVersions":"<=4.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f1ef067b-e4b4-4174-b6ff-ec94a7afd55d/cmp-coming-soon-maintenance","title":"CMP <= 3.8.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"f1ef067b-e4b4-4174-b6ff-ec94a7afd55d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f1ef067b-e4b4-4174-b6ff-ec94a7afd55d?source=api-prod","cve":"CVE-2020-36730","affectedVersions":"<=3.8.1","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_636f6d6d657263652d636f696e626173652d666f722d776f6f636f6d6d65726365811c9dc5_gen.json b/internal/data/assets/plugin_636f6d6d657263652d636f696e626173652d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
index d5d5ed50..b679f6bc 100644
--- a/internal/data/assets/plugin_636f6d6d657263652d636f696e626173652d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
+++ b/internal/data/assets/plugin_636f6d6d657263652d636f696e626173652d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/commerce-coinbase-for-woocommerce","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/commerce-coinbase-for-woocommerce","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=1.4.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/6dadad7d-0ea9-4ac0-8d22-0acaa3fb5881/commerce-coinbase-for-woocommerce","title":"Coinbase Commerce – Crypto Gateway for WooCommerce <= 1.6.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"6dadad7d-0ea9-4ac0-8d22-0acaa3fb5881"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6dadad7d-0ea9-4ac0-8d22-0acaa3fb5881?source=api-prod","cve":"CVE-2026-25396","affectedVersions":"<=1.6.6","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/commerce-coinbase-for-woocommerce","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/commerce-coinbase-for-woocommerce","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=1.4.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/6dadad7d-0ea9-4ac0-8d22-0acaa3fb5881/commerce-coinbase-for-woocommerce","title":"Coinbase Commerce – Crypto Gateway for WooCommerce < 2.0.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"6dadad7d-0ea9-4ac0-8d22-0acaa3fb5881"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6dadad7d-0ea9-4ac0-8d22-0acaa3fb5881?source=api-prod","cve":"CVE-2026-25396","affectedVersions":"<2.0.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_636f6e746163742d666f726d2d62792d737570737973746963811c9dc5_gen.json b/internal/data/assets/plugin_636f6e746163742d666f726d2d62792d737570737973746963811c9dc5_gen.json
index fede0971..4833f8c0 100644
--- a/internal/data/assets/plugin_636f6e746163742d666f726d2d62792d737570737973746963811c9dc5_gen.json
+++ b/internal/data/assets/plugin_636f6e746163742d666f726d2d62792d737570737973746963811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/16dc1927-2171-4234-805b-6e4eed99fa90/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.27 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"16dc1927-2171-4234-805b-6e4eed99fa90"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16dc1927-2171-4234-805b-6e4eed99fa90?source=api-prod","cve":"CVE-2023-45068","affectedVersions":"<=1.7.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/1c387b07-baf6-4c62-943e-4bd121160ceb/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"1c387b07-baf6-4c62-943e-4bd121160ceb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1c387b07-baf6-4c62-943e-4bd121160ceb?source=api-prod","cve":"CVE-2023-2528","affectedVersions":"<=1.7.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/20d30931-bfaf-47bb-9265-b326c959b871/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.28 - Authenticated (Admin+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"20d30931-bfaf-47bb-9265-b326c959b871"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20d30931-bfaf-47bb-9265-b326c959b871?source=api-prod","cve":"CVE-2024-48042","affectedVersions":"<=1.7.28","severity":"high"},{"advisoryId":"WPSECADV/WF/3d6629e9-ab43-4eca-9340-5691421ab19d/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.10 - SQL Injections\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-02-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d6629e9-ab43-4eca-9340-5691421ab19d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d6629e9-ab43-4eca-9340-5691421ab19d?source=api-prod","affectedVersions":"<=1.7.10","severity":"high"},{"advisoryId":"WPSECADV/WF/415c9658-bfb2-453b-a697-c63c08b0ca61/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-30 09:13:47","sources":[{"name":"Wordfence","remoteId":"415c9658-bfb2-453b-a697-c63c08b0ca61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/415c9658-bfb2-453b-a697-c63c08b0ca61?source=api-prod","cve":"CVE-2026-4257","affectedVersions":"<=1.7.36","severity":"critical"},{"advisoryId":"WPSECADV/WF/59833e1f-abb5-453d-ac8d-352ebe0f11df/contact-form-by-supsystic","title":"Contact Form by Supsystic < 1.10.0 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"59833e1f-abb5-453d-ac8d-352ebe0f11df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/59833e1f-abb5-453d-ac8d-352ebe0f11df?source=api-prod","cve":"CVE-2026-73378","affectedVersions":"<1.10.0","severity":"high"},{"advisoryId":"WPSECADV/WF/5b48e0cc-5691-4df0-81ef-72f47d29ce30/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.14 - Reflected Cross-Site scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"5b48e0cc-5691-4df0-81ef-72f47d29ce30"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b48e0cc-5691-4df0-81ef-72f47d29ce30?source=api-prod","cve":"CVE-2021-24276","affectedVersions":"<=1.7.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e53e70f-45fc-41a6-8436-a8b14f7685d0/contact-form-by-supsystic","title":"Contact Form by Supsystic < 1.7.20 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e53e70f-45fc-41a6-8436-a8b14f7685d0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e53e70f-45fc-41a6-8436-a8b14f7685d0?source=api-prod","affectedVersions":"<1.7.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/73167e7c-a790-4c08-ab4d-59a684bab68f/contact-form-by-supsystic","title":"Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics <= 1.10.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:35:00","sources":[{"name":"Wordfence","remoteId":"73167e7c-a790-4c08-ab4d-59a684bab68f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/73167e7c-a790-4c08-ab4d-59a684bab68f?source=api-prod","cve":"CVE-2026-115595","affectedVersions":"<=1.10.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1eed70b-d12e-4b7f-afc1-7037f5c406b8/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.36 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1eed70b-d12e-4b7f-afc1-7037f5c406b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1eed70b-d12e-4b7f-afc1-7037f5c406b8?source=api-prod","cve":"CVE-2025-52753","affectedVersions":"<=1.7.36","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa65bced-a449-4ba5-accf-40a824ee464d/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 19:31:56","sources":[{"name":"Wordfence","remoteId":"aa65bced-a449-4ba5-accf-40a824ee464d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa65bced-a449-4ba5-accf-40a824ee464d?source=api-prod","cve":"CVE-2026-83625","affectedVersions":"<=1.10.2","severity":"high"},{"advisoryId":"WPSECADV/WF/aa85e614-b0e0-4d54-a9f0-27c99e898b7d/contact-form-by-supsystic","title":"Contact Form by Supsystic < 1.10.0 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa85e614-b0e0-4d54-a9f0-27c99e898b7d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa85e614-b0e0-4d54-a9f0-27c99e898b7d?source=api-prod","cve":"CVE-2026-73379","affectedVersions":"<1.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2dbf510-d99f-4918-8462-66696b68003c/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-15 14:00:54","sources":[{"name":"Wordfence","remoteId":"b2dbf510-d99f-4918-8462-66696b68003c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2dbf510-d99f-4918-8462-66696b68003c?source=api-prod","cve":"CVE-2024-13452","affectedVersions":"<=1.7.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/c312f915-fca6-4624-bfb9-8d8fd54d1b3c/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.28 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"c312f915-fca6-4624-bfb9-8d8fd54d1b3c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c312f915-fca6-4624-bfb9-8d8fd54d1b3c?source=api-prod","cve":"CVE-2024-48046","affectedVersions":"<=1.7.28","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/16dc1927-2171-4234-805b-6e4eed99fa90/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.27 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"16dc1927-2171-4234-805b-6e4eed99fa90"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16dc1927-2171-4234-805b-6e4eed99fa90?source=api-prod","cve":"CVE-2023-45068","affectedVersions":"<=1.7.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/1c387b07-baf6-4c62-943e-4bd121160ceb/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"1c387b07-baf6-4c62-943e-4bd121160ceb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1c387b07-baf6-4c62-943e-4bd121160ceb?source=api-prod","cve":"CVE-2023-2528","affectedVersions":"<=1.7.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/20d30931-bfaf-47bb-9265-b326c959b871/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.28 - Authenticated (Admin+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"20d30931-bfaf-47bb-9265-b326c959b871"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20d30931-bfaf-47bb-9265-b326c959b871?source=api-prod","cve":"CVE-2024-48042","affectedVersions":"<=1.7.28","severity":"high"},{"advisoryId":"WPSECADV/WF/3d6629e9-ab43-4eca-9340-5691421ab19d/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.10 - SQL Injections\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-02-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d6629e9-ab43-4eca-9340-5691421ab19d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d6629e9-ab43-4eca-9340-5691421ab19d?source=api-prod","affectedVersions":"<=1.7.10","severity":"high"},{"advisoryId":"WPSECADV/WF/415c9658-bfb2-453b-a697-c63c08b0ca61/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-30 09:13:47","sources":[{"name":"Wordfence","remoteId":"415c9658-bfb2-453b-a697-c63c08b0ca61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/415c9658-bfb2-453b-a697-c63c08b0ca61?source=api-prod","cve":"CVE-2026-4257","affectedVersions":"<=1.7.36","severity":"critical"},{"advisoryId":"WPSECADV/WF/59833e1f-abb5-453d-ac8d-352ebe0f11df/contact-form-by-supsystic","title":"Contact Form by Supsystic < 1.10.0 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"59833e1f-abb5-453d-ac8d-352ebe0f11df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/59833e1f-abb5-453d-ac8d-352ebe0f11df?source=api-prod","cve":"CVE-2026-73378","affectedVersions":"<1.10.0","severity":"high"},{"advisoryId":"WPSECADV/WF/5b48e0cc-5691-4df0-81ef-72f47d29ce30/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.14 - Reflected Cross-Site scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"5b48e0cc-5691-4df0-81ef-72f47d29ce30"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b48e0cc-5691-4df0-81ef-72f47d29ce30?source=api-prod","cve":"CVE-2021-24276","affectedVersions":"<=1.7.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e53e70f-45fc-41a6-8436-a8b14f7685d0/contact-form-by-supsystic","title":"Contact Form by Supsystic < 1.7.20 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e53e70f-45fc-41a6-8436-a8b14f7685d0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e53e70f-45fc-41a6-8436-a8b14f7685d0?source=api-prod","affectedVersions":"<1.7.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/73167e7c-a790-4c08-ab4d-59a684bab68f/contact-form-by-supsystic","title":"Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics <= 1.10.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:35:00","sources":[{"name":"Wordfence","remoteId":"73167e7c-a790-4c08-ab4d-59a684bab68f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/73167e7c-a790-4c08-ab4d-59a684bab68f?source=api-prod","cve":"CVE-2026-115595","affectedVersions":"<=1.10.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1eed70b-d12e-4b7f-afc1-7037f5c406b8/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.36 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1eed70b-d12e-4b7f-afc1-7037f5c406b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1eed70b-d12e-4b7f-afc1-7037f5c406b8?source=api-prod","cve":"CVE-2025-52753","affectedVersions":"<=1.7.36","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa65bced-a449-4ba5-accf-40a824ee464d/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 19:31:56","sources":[{"name":"Wordfence","remoteId":"aa65bced-a449-4ba5-accf-40a824ee464d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa65bced-a449-4ba5-accf-40a824ee464d?source=api-prod","cve":"CVE-2026-83625","affectedVersions":"<=1.10.2","severity":"high"},{"advisoryId":"WPSECADV/WF/aa85e614-b0e0-4d54-a9f0-27c99e898b7d/contact-form-by-supsystic","title":"Contact Form by Supsystic < 1.10.0 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa85e614-b0e0-4d54-a9f0-27c99e898b7d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa85e614-b0e0-4d54-a9f0-27c99e898b7d?source=api-prod","cve":"CVE-2026-73379","affectedVersions":"<1.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2dbf510-d99f-4918-8462-66696b68003c/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-15 14:00:54","sources":[{"name":"Wordfence","remoteId":"b2dbf510-d99f-4918-8462-66696b68003c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2dbf510-d99f-4918-8462-66696b68003c?source=api-prod","cve":"CVE-2024-13452","affectedVersions":"<=1.7.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/c312f915-fca6-4624-bfb9-8d8fd54d1b3c/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.28 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"c312f915-fca6-4624-bfb9-8d8fd54d1b3c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c312f915-fca6-4624-bfb9-8d8fd54d1b3c?source=api-prod","cve":"CVE-2024-48046","affectedVersions":"<=1.7.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/defebc39-ec6a-4116-ac0d-5a6c998fd4e9/contact-form-by-supsystic","title":"Contact Form by Supsystic <= 1.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"defebc39-ec6a-4116-ac0d-5a6c998fd4e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/defebc39-ec6a-4116-ac0d-5a6c998fd4e9?source=api-prod","cve":"CVE-2025-15705","affectedVersions":"<=1.7.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_636f70792d7468652d636f6465811c9dc5_gen.json b/internal/data/assets/plugin_636f70792d7468652d636f6465811c9dc5_gen.json
index 3d56c25d..5e34d252 100644
--- a/internal/data/assets/plugin_636f70792d7468652d636f6465811c9dc5_gen.json
+++ b/internal/data/assets/plugin_636f70792d7468652d636f6465811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/copy-the-code","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":">=1.3.0,<=2.6.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/76346f96-d2cd-44de-beb0-c15536a7305c/copy-the-code","title":"Copy Anything to Clipboard <= 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"76346f96-d2cd-44de-beb0-c15536a7305c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76346f96-d2cd-44de-beb0-c15536a7305c?source=api-prod","cve":"CVE-2024-52419","affectedVersions":"<=4.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e834a211-ccc8-4a30-a15d-879ba34184e9/copy-the-code","title":"Copy Anything to Clipboard <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"e834a211-ccc8-4a30-a15d-879ba34184e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e834a211-ccc8-4a30-a15d-879ba34184e9?source=api-prod","cve":"CVE-2023-5086","affectedVersions":"<=2.6.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/copy-the-code","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":">=1.3.0,<=2.6.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/76346f96-d2cd-44de-beb0-c15536a7305c/copy-the-code","title":"Copy Anything to Clipboard <= 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"76346f96-d2cd-44de-beb0-c15536a7305c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76346f96-d2cd-44de-beb0-c15536a7305c?source=api-prod","cve":"CVE-2024-52419","affectedVersions":"<=4.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/83f1777b-aa44-40a3-84d5-5743d64b1533/copy-the-code","title":"Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code < 5.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"83f1777b-aa44-40a3-84d5-5743d64b1533"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83f1777b-aa44-40a3-84d5-5743d64b1533?source=api-prod","cve":"CVE-2026-110524","affectedVersions":"<5.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/e834a211-ccc8-4a30-a15d-879ba34184e9/copy-the-code","title":"Copy Anything to Clipboard <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"e834a211-ccc8-4a30-a15d-879ba34184e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e834a211-ccc8-4a30-a15d-879ba34184e9?source=api-prod","cve":"CVE-2023-5086","affectedVersions":"<=2.6.4","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_636f7572742d7265736572766174696f6e811c9dc5_gen.json b/internal/data/assets/plugin_636f7572742d7265736572766174696f6e811c9dc5_gen.json
index f62d7ddb..72c08278 100644
--- a/internal/data/assets/plugin_636f7572742d7265736572766174696f6e811c9dc5_gen.json
+++ b/internal/data/assets/plugin_636f7572742d7265736572766174696f6e811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/court-reservation","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a482f6bb-5277-480b-8ec9-230dd4135f7c/court-reservation","title":"Court Reservation – Manage Your Court Bookings Online <= 1.10.11 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-12 10:05:08","sources":[{"name":"Wordfence","remoteId":"a482f6bb-5277-480b-8ec9-230dd4135f7c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a482f6bb-5277-480b-8ec9-230dd4135f7c?source=api-prod","cve":"CVE-2026-1250","affectedVersions":"<=1.10.11","severity":"high"},{"advisoryId":"WPSECADV/WF/a4afee53-9bce-4534-aa7e-119504cadc8a/court-reservation","title":"Court Reservation <= 1.10.11 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"a4afee53-9bce-4534-aa7e-119504cadc8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a4afee53-9bce-4534-aa7e-119504cadc8a?source=api-prod","cve":"CVE-2026-39675","affectedVersions":"<=1.10.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/b6c08ff0-1f36-4b39-80b1-5b6d7ac9e96e/court-reservation","title":"Court Reservation <= 1.10.8 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"b6c08ff0-1f36-4b39-80b1-5b6d7ac9e96e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b6c08ff0-1f36-4b39-80b1-5b6d7ac9e96e?source=api-prod","cve":"CVE-2025-68852","affectedVersions":"<=1.10.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8fecebd-c884-4124-96d6-106351e0c7a7/court-reservation","title":"Court Reservation – Manage Your Court Bookings Online < 1.10.9 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8fecebd-c884-4124-96d6-106351e0c7a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8fecebd-c884-4124-96d6-106351e0c7a7?source=api-prod","cve":"CVE-2026-1508","affectedVersions":"<1.10.9","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/court-reservation","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/56e249ad-672d-4f8c-b8a1-7c1f03eed931/court-reservation","title":"Court Reservation – Tennis, Padel & Sports Court Booking < 1.12.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"56e249ad-672d-4f8c-b8a1-7c1f03eed931"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/56e249ad-672d-4f8c-b8a1-7c1f03eed931?source=api-prod","cve":"CVE-2026-106003","affectedVersions":"<1.12.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/70f548f4-b783-4f7e-9a47-86ecbdb51e64/court-reservation","title":"Court Reservation – Tennis, Padel & Sports Court Booking < 1.12.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"70f548f4-b783-4f7e-9a47-86ecbdb51e64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70f548f4-b783-4f7e-9a47-86ecbdb51e64?source=api-prod","cve":"CVE-2026-106002","affectedVersions":"<1.12.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/a482f6bb-5277-480b-8ec9-230dd4135f7c/court-reservation","title":"Court Reservation – Manage Your Court Bookings Online <= 1.10.11 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-12 10:05:08","sources":[{"name":"Wordfence","remoteId":"a482f6bb-5277-480b-8ec9-230dd4135f7c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a482f6bb-5277-480b-8ec9-230dd4135f7c?source=api-prod","cve":"CVE-2026-1250","affectedVersions":"<=1.10.11","severity":"high"},{"advisoryId":"WPSECADV/WF/a4afee53-9bce-4534-aa7e-119504cadc8a/court-reservation","title":"Court Reservation <= 1.11.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"a4afee53-9bce-4534-aa7e-119504cadc8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a4afee53-9bce-4534-aa7e-119504cadc8a?source=api-prod","cve":"CVE-2026-39675","affectedVersions":"<=1.11.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b6c08ff0-1f36-4b39-80b1-5b6d7ac9e96e/court-reservation","title":"Court Reservation <= 1.11.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"b6c08ff0-1f36-4b39-80b1-5b6d7ac9e96e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b6c08ff0-1f36-4b39-80b1-5b6d7ac9e96e?source=api-prod","cve":"CVE-2025-68852","affectedVersions":"<=1.11.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8fecebd-c884-4124-96d6-106351e0c7a7/court-reservation","title":"Court Reservation – Manage Your Court Bookings Online < 1.10.9 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8fecebd-c884-4124-96d6-106351e0c7a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8fecebd-c884-4124-96d6-106351e0c7a7?source=api-prod","cve":"CVE-2026-1508","affectedVersions":"<1.10.9","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_646f776e6c6f61642d6d616e61676572811c9dc5_gen.json b/internal/data/assets/plugin_646f776e6c6f61642d6d616e61676572811c9dc5_gen.json
index 7123bbcc..4b41006b 100644
--- a/internal/data/assets/plugin_646f776e6c6f61642d6d616e61676572811c9dc5_gen.json
+++ b/internal/data/assets/plugin_646f776e6c6f61642d6d616e61676572811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0184b2b5-0b50-407e-8911-b0845714ea17/download-manager","title":"Download Manager <= 3.3.53 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"0184b2b5-0b50-407e-8911-b0845714ea17"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0184b2b5-0b50-407e-8911-b0845714ea17?source=api-prod","cve":"CVE-2026-39615","affectedVersions":"<=3.3.53","severity":"medium"},{"advisoryId":"WPSECADV/WF/029956d7-6e3f-4159-9f53-05691e0262fc/download-manager","title":"Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-18 15:05:22","sources":[{"name":"Wordfence","remoteId":"029956d7-6e3f-4159-9f53-05691e0262fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/029956d7-6e3f-4159-9f53-05691e0262fc?source=api-prod","cve":"CVE-2025-4367","affectedVersions":"<=3.3.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/067031e8-6aa8-451c-a318-b1848c7a4f92/download-manager","title":"Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-05 13:11:34","sources":[{"name":"Wordfence","remoteId":"067031e8-6aa8-451c-a318-b1848c7a4f92"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/067031e8-6aa8-451c-a318-b1848c7a4f92?source=api-prod","cve":"CVE-2025-15364","affectedVersions":"<=3.3.40","severity":"high"},{"advisoryId":"WPSECADV/WF/06738434-ccd4-4e87-8163-d56ff3b4b5c8/download-manager","title":"Download Manager <= 3.1.17 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"06738434-ccd4-4e87-8163-d56ff3b4b5c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06738434-ccd4-4e87-8163-d56ff3b4b5c8?source=api-prod","affectedVersions":"<3.1.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/07a31d5c-b8c5-4523-8883-ba1e919c0ab1/download-manager","title":"Download Manager <= 3.2.61 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"07a31d5c-b8c5-4523-8883-ba1e919c0ab1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/07a31d5c-b8c5-4523-8883-ba1e919c0ab1?source=api-prod","cve":"CVE-2022-4476","affectedVersions":"<=3.2.61","severity":"medium"},{"advisoryId":"WPSECADV/WF/0a73d326-cd27-4719-8c26-3aa5dce837c0/download-manager","title":"WordPress Download Manager <= 3.2.15 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a73d326-cd27-4719-8c26-3aa5dce837c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a73d326-cd27-4719-8c26-3aa5dce837c0?source=api-prod","cve":"CVE-2021-24773","affectedVersions":"<3.2.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/10b46c11-1b34-4da4-a24d-103c663ca315/download-manager","title":"Download Manager <= 3.2.59 - Refleced Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"10b46c11-1b34-4da4-a24d-103c663ca315"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10b46c11-1b34-4da4-a24d-103c663ca315?source=api-prod","cve":"CVE-2022-45836","affectedVersions":"<=3.2.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/1301c8af-d81a-40f1-96fa-e8252309d8a4/download-manager","title":"Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"1301c8af-d81a-40f1-96fa-e8252309d8a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1301c8af-d81a-40f1-96fa-e8252309d8a4?source=api-prod","cve":"CVE-2024-2098","affectedVersions":"<=3.2.89","severity":"high"},{"advisoryId":"WPSECADV/WF/17d5253c-5000-40c7-a7fd-f75d4badfb5e/download-manager","title":"Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"17d5253c-5000-40c7-a7fd-f75d4badfb5e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/17d5253c-5000-40c7-a7fd-f75d4badfb5e?source=api-prod","cve":"CVE-2025-12177","affectedVersions":"<=3.3.30","severity":"medium"},{"advisoryId":"WPSECADV/WF/2105a26a-0813-4f63-a28d-6b3bd68ea9a1/download-manager","title":"Download Manager < 3.3.66 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"2105a26a-0813-4f63-a28d-6b3bd68ea9a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2105a26a-0813-4f63-a28d-6b3bd68ea9a1?source=api-prod","cve":"CVE-2026-14292","affectedVersions":"<3.3.66","severity":"high"},{"advisoryId":"WPSECADV/WF/21f8f5be-b513-4040-af39-c1a61d7e313f/download-manager","title":"Download Manager <= 3.3.12 - Authenticated (Author+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-18 18:52:05","sources":[{"name":"Wordfence","remoteId":"21f8f5be-b513-4040-af39-c1a61d7e313f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21f8f5be-b513-4040-af39-c1a61d7e313f?source=api-prod","cve":"CVE-2025-3404","affectedVersions":"<=3.3.12","severity":"high"},{"advisoryId":"WPSECADV/WF/228147c2-97c6-4910-b9b2-d6ca62fc1760/download-manager","title":"Download Manager <= 3.2.48 - Cross-Site Request Forgery to Plugin Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"228147c2-97c6-4910-b9b2-d6ca62fc1760"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/228147c2-97c6-4910-b9b2-d6ca62fc1760?source=api-prod","cve":"CVE-2022-34347","affectedVersions":"<=3.2.48","severity":"high"},{"advisoryId":"WPSECADV/WF/244eba91-343a-4e91-96b8-207686d02ce6/download-manager","title":"Download Manager <= 3.3.32 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"244eba91-343a-4e91-96b8-207686d02ce6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/244eba91-343a-4e91-96b8-207686d02ce6?source=api-prod","cve":"CVE-2025-63070","affectedVersions":"<=3.3.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/25f0615b-17a1-4bf8-9f77-4703c39baca5/download-manager","title":"Download Manager <= 3.3.03 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"25f0615b-17a1-4bf8-9f77-4703c39baca5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/25f0615b-17a1-4bf8-9f77-4703c39baca5?source=api-prod","cve":"CVE-2024-56217","affectedVersions":"<=3.3.03","severity":"medium"},{"advisoryId":"WPSECADV/WF/27fc81b0-c03a-4de7-bc38-791401d1685b/download-manager","title":"Download Manager <= 3.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-08 13:33:28","sources":[{"name":"Wordfence","remoteId":"27fc81b0-c03a-4de7-bc38-791401d1685b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/27fc81b0-c03a-4de7-bc38-791401d1685b?source=api-prod","cve":"CVE-2026-5357","affectedVersions":"<=3.3.52","severity":"medium"},{"advisoryId":"WPSECADV/WF/2cde1f4d-0212-48b1-a0ef-ba923c37ab50/download-manager","title":"WordPress Download Manager <= 3.1.24 - Authenticated File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"2cde1f4d-0212-48b1-a0ef-ba923c37ab50"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2cde1f4d-0212-48b1-a0ef-ba923c37ab50?source=api-prod","cve":"CVE-2021-34639","affectedVersions":"<=3.1.24","severity":"high"},{"advisoryId":"WPSECADV/WF/332b8d96-89b2-473b-9186-239e49f5b064/download-manager","title":"Download Manager <= 3.2.53 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"332b8d96-89b2-473b-9186-239e49f5b064"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/332b8d96-89b2-473b-9186-239e49f5b064?source=api-prod","affectedVersions":"<=3.2.53","severity":"medium"},{"advisoryId":"WPSECADV/WF/3cb84ba3-b403-4a9d-b1a7-92aa947310ac/download-manager","title":"Download Manager <= 3.3.46 - Reflected Cross-Site Scripting via 'redirect_to' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-17 17:51:30","sources":[{"name":"Wordfence","remoteId":"3cb84ba3-b403-4a9d-b1a7-92aa947310ac"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3cb84ba3-b403-4a9d-b1a7-92aa947310ac?source=api-prod","cve":"CVE-2026-1666","affectedVersions":"<=3.3.46","severity":"medium"},{"advisoryId":"WPSECADV/WF/41b2a584-b741-4265-a878-9434140070dc/download-manager","title":"Download Manager <= 3.3.70 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 09:30:00","sources":[{"name":"Wordfence","remoteId":"41b2a584-b741-4265-a878-9434140070dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41b2a584-b741-4265-a878-9434140070dc?source=api-prod","cve":"CVE-2026-94405","affectedVersions":"<=3.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/41b3a62c-9586-4c87-828a-584dfe386a37/download-manager","title":"Download Manager <= 3.2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"41b3a62c-9586-4c87-828a-584dfe386a37"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41b3a62c-9586-4c87-828a-584dfe386a37?source=api-prod","cve":"CVE-2022-34658","affectedVersions":"<=3.2.48","severity":"medium"},{"advisoryId":"WPSECADV/WF/446b160a-299e-4f91-bd49-02a7a16b6e5f/download-manager","title":"Download Manager < 2.5.9 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-12-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"446b160a-299e-4f91-bd49-02a7a16b6e5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/446b160a-299e-4f91-bd49-02a7a16b6e5f?source=api-prod","cve":"CVE-2013-7319","affectedVersions":"<=2.5.8","severity":"high"},{"advisoryId":"WPSECADV/WF/44c31db3-6dfa-4d42-9c3b-73dde9bc49b9/download-manager","title":"WordPress Download Manager <= 2.9.51 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-06-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"44c31db3-6dfa-4d42-9c3b-73dde9bc49b9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44c31db3-6dfa-4d42-9c3b-73dde9bc49b9?source=api-prod","cve":"CVE-2017-18032","affectedVersions":"<=2.9.51","severity":"medium"},{"advisoryId":"WPSECADV/WF/4654609e-ed3e-4268-a9a4-80bc563e0a64/download-manager","title":"Download Manager <= 3.2.48 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"4654609e-ed3e-4268-a9a4-80bc563e0a64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4654609e-ed3e-4268-a9a4-80bc563e0a64?source=api-prod","cve":"CVE-2022-36288","affectedVersions":"<=3.2.48","severity":"high"},{"advisoryId":"WPSECADV/WF/471957f6-54c1-4268-b2e1-8efa391dcaec/download-manager","title":"Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"471957f6-54c1-4268-b2e1-8efa391dcaec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/471957f6-54c1-4268-b2e1-8efa391dcaec?source=api-prod","cve":"CVE-2022-2436","affectedVersions":"<=3.2.49","severity":"high"},{"advisoryId":"WPSECADV/WF/4a7be578-5883-4cd3-963d-bf81c3af2003/download-manager","title":"Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-18 16:22:49","sources":[{"name":"Wordfence","remoteId":"4a7be578-5883-4cd3-963d-bf81c3af2003"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a7be578-5883-4cd3-963d-bf81c3af2003?source=api-prod","cve":"CVE-2024-11740","affectedVersions":"<=3.3.03","severity":"high"},{"advisoryId":"WPSECADV/WF/4ccc8f3b-9028-45db-8db2-574736fe3ccb/download-manager","title":"WordPress Download Manager < 3.1.22 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"4ccc8f3b-9028-45db-8db2-574736fe3ccb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ccc8f3b-9028-45db-8db2-574736fe3ccb?source=api-prod","affectedVersions":"<3.1.22","severity":"high"},{"advisoryId":"WPSECADV/WF/4e2527d4-750d-4e36-ae27-920105958c21/download-manager","title":"Download Manager <= 3.2.54 - Authenticated (Admin+) Path Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e2527d4-750d-4e36-ae27-920105958c21"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e2527d4-750d-4e36-ae27-920105958c21?source=api-prod","cve":"CVE-2022-2926","affectedVersions":"<3.2.55","severity":"medium"},{"advisoryId":"WPSECADV/WF/4eca64cc-75c2-46ba-a086-15a952a20026/download-manager","title":"Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 18:30:10","sources":[{"name":"Wordfence","remoteId":"4eca64cc-75c2-46ba-a086-15a952a20026"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4eca64cc-75c2-46ba-a086-15a952a20026?source=api-prod","cve":"CVE-2026-92714","affectedVersions":"<=3.3.68","severity":"medium"},{"advisoryId":"WPSECADV/WF/4f5985b0-0e6c-4dd8-b5f8-53be62adc8dd/download-manager","title":"Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:29:40","sources":[{"name":"Wordfence","remoteId":"4f5985b0-0e6c-4dd8-b5f8-53be62adc8dd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4f5985b0-0e6c-4dd8-b5f8-53be62adc8dd?source=api-prod","cve":"CVE-2026-102401","affectedVersions":"<=3.3.71","severity":"medium"},{"advisoryId":"WPSECADV/WF/567782f9-a050-4e68-9491-e038d7e383f5/download-manager","title":"WordPress Download Manager <= 2.7.2 - Authenticated Arbitrary Options Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"567782f9-a050-4e68-9491-e038d7e383f5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/567782f9-a050-4e68-9491-e038d7e383f5?source=api-prod","cve":"CVE-2014-9260","affectedVersions":"<2.7.3","severity":"high"},{"advisoryId":"WPSECADV/WF/5cdd64a4-040b-4dc9-a8df-dbecfeb928c8/download-manager","title":"Download Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5cdd64a4-040b-4dc9-a8df-dbecfeb928c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5cdd64a4-040b-4dc9-a8df-dbecfeb928c8?source=api-prod","cve":"CVE-2023-6954","affectedVersions":"<=3.2.85","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e491592-a17f-4789-8faa-d2a60b8ced70/download-manager","title":"WordPress Download Manager <= 2.7.4 - Remote Code Execution\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"5e491592-a17f-4789-8faa-d2a60b8ced70"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e491592-a17f-4789-8faa-d2a60b8ced70?source=api-prod","affectedVersions":"<2.7.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/5f9cece7-a158-41ae-816b-1054da830724/download-manager","title":"Download Manager <= 3.2.82 - Unauthenticated Password Leak\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f9cece7-a158-41ae-816b-1054da830724"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f9cece7-a158-41ae-816b-1054da830724?source=api-prod","cve":"CVE-2023-6421","affectedVersions":"<=3.2.82","severity":"medium"},{"advisoryId":"WPSECADV/WF/639bf20c-04d4-49e5-8da1-685421a6f63a/download-manager","title":"Download Manager <= 2.8.7 - Sensitive Information Disclosure via Directory Listing\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"639bf20c-04d4-49e5-8da1-685421a6f63a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/639bf20c-04d4-49e5-8da1-685421a6f63a?source=api-prod","affectedVersions":"<2.8.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/6a6390d2-58cd-468e-9936-e16954e2d3ee/download-manager","title":"Download Manager <= 2.2.2 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"6a6390d2-58cd-468e-9936-e16954e2d3ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6a6390d2-58cd-468e-9936-e16954e2d3ee?source=api-prod","affectedVersions":"<=2.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6d700580-1374-4a17-a6b3-59ba1d063030/download-manager","title":"WordPress Download Manager < 3.1.23 -  Arbitrary Asset Manager Usage\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"6d700580-1374-4a17-a6b3-59ba1d063030"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d700580-1374-4a17-a6b3-59ba1d063030?source=api-prod","affectedVersions":"<3.1.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e363a62-8d31-4140-878b-5034d6c7b6a1/download-manager","title":"Download Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-11 19:58:22","sources":[{"name":"Wordfence","remoteId":"6e363a62-8d31-4140-878b-5034d6c7b6a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e363a62-8d31-4140-878b-5034d6c7b6a1?source=api-prod","cve":"CVE-2024-5266","affectedVersions":"<=3.2.92","severity":"medium"},{"advisoryId":"WPSECADV/WF/74cd34be-008c-4ff3-ae3c-417cfd2fee9b/download-manager","title":"Download Manager <= 3.3.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_before' and 'note_after' Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-08 18:12:21","sources":[{"name":"Wordfence","remoteId":"74cd34be-008c-4ff3-ae3c-417cfd2fee9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/74cd34be-008c-4ff3-ae3c-417cfd2fee9b?source=api-prod","cve":"CVE-2026-14343","affectedVersions":"<=3.3.61","severity":"medium"},{"advisoryId":"WPSECADV/WF/776fc47e-a86c-43dc-8d5e-50273c4411b2/download-manager","title":"WordPress Download Manager <= 3.1.24 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"776fc47e-a86c-43dc-8d5e-50273c4411b2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/776fc47e-a86c-43dc-8d5e-50273c4411b2?source=api-prod","cve":"CVE-2021-34638","affectedVersions":"<=3.1.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/79b5883b-a3be-497e-b911-7dc39e7fb418/download-manager","title":"WordPress Download Manager <= 2.9.6 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-01-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"79b5883b-a3be-497e-b911-7dc39e7fb418"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/79b5883b-a3be-497e-b911-7dc39e7fb418?source=api-prod","affectedVersions":"<=2.9.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/79fcf18e-39f7-42f2-90e4-3a5bac3382e0/download-manager","title":"Download Manager <= 3.2.42 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"79fcf18e-39f7-42f2-90e4-3a5bac3382e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/79fcf18e-39f7-42f2-90e4-3a5bac3382e0?source=api-prod","cve":"CVE-2022-1985","affectedVersions":"<=3.2.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/7a32393e-f233-4ab6-addc-9dd1e04c0e0a/download-manager","title":"Download Manager <= 3.3.66 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 19:29:43","sources":[{"name":"Wordfence","remoteId":"7a32393e-f233-4ab6-addc-9dd1e04c0e0a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a32393e-f233-4ab6-addc-9dd1e04c0e0a?source=api-prod","cve":"CVE-2026-16685","affectedVersions":"<=3.3.66","severity":"medium"},{"advisoryId":"WPSECADV/WF/7b3608ca-8ed6-46ff-8e57-d8b68f91b9f2/download-manager","title":"Download Manager <= 3.2.84 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b3608ca-8ed6-46ff-8e57-d8b68f91b9f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b3608ca-8ed6-46ff-8e57-d8b68f91b9f2?source=api-prod","cve":"CVE-2023-6785","affectedVersions":"<=3.2.84","severity":"medium"},{"advisoryId":"WPSECADV/WF/7c67d2f8-d918-42ef-a301-27eed7fa41b2/download-manager","title":"Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"7c67d2f8-d918-42ef-a301-27eed7fa41b2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7c67d2f8-d918-42ef-a301-27eed7fa41b2?source=api-prod","cve":"CVE-2024-6208","affectedVersions":"<=3.2.97","severity":"medium"},{"advisoryId":"WPSECADV/WF/834bedf0-a2bc-4396-a160-3d3f399c1897/download-manager","title":"Download Manager <= 3.2.98 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"834bedf0-a2bc-4396-a160-3d3f399c1897"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/834bedf0-a2bc-4396-a160-3d3f399c1897?source=api-prod","cve":"CVE-2024-8284","affectedVersions":"<=3.2.98","severity":"medium"},{"advisoryId":"WPSECADV/WF/84791a83-197b-4a73-826d-517bf47bc5c9/download-manager","title":"Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:29:44","sources":[{"name":"Wordfence","remoteId":"84791a83-197b-4a73-826d-517bf47bc5c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84791a83-197b-4a73-826d-517bf47bc5c9?source=api-prod","cve":"CVE-2026-103964","affectedVersions":"<=3.3.71","severity":"medium"},{"advisoryId":"WPSECADV/WF/88d80702-a987-4b12-a003-2fa564fda409/download-manager","title":"Download Manager Pro <= 6.2.9 - Unauthenticated Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"88d80702-a987-4b12-a003-2fa564fda409"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88d80702-a987-4b12-a003-2fa564fda409?source=api-prod","cve":"CVE-2023-1809","affectedVersions":">=4.0,<6.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8b602f33-ae2f-4349-a8be-901a9eec91c3/download-manager","title":"WordPress Download Manager <= 2.9.93 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"8b602f33-ae2f-4349-a8be-901a9eec91c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8b602f33-ae2f-4349-a8be-901a9eec91c3?source=api-prod","cve":"CVE-2019-15889","affectedVersions":"<2.9.94","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d07b7c1-8180-4b2a-bf35-2c5b3d419152/download-manager","title":"Download Manager <= 3.3.06 - Unauthenticated Information Disclosure via Unprotected Directory\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d07b7c1-8180-4b2a-bf35-2c5b3d419152"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d07b7c1-8180-4b2a-bf35-2c5b3d419152?source=api-prod","cve":"CVE-2024-13126","affectedVersions":"<=3.3.06","severity":"medium"},{"advisoryId":"WPSECADV/WF/97690bde-f2c6-429b-8d5a-51bee4a981ca/download-manager","title":"WordPress Download Manager < 2.9.51 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"97690bde-f2c6-429b-8d5a-51bee4a981ca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/97690bde-f2c6-429b-8d5a-51bee4a981ca?source=api-prod","cve":"CVE-2017-2217","affectedVersions":"<2.9.51","severity":"medium"},{"advisoryId":"WPSECADV/WF/9774c999-acb6-4c5f-ad6c-10979660b164/download-manager","title":"Download Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"9774c999-acb6-4c5f-ad6c-10979660b164"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9774c999-acb6-4c5f-ad6c-10979660b164?source=api-prod","cve":"CVE-2024-1766","affectedVersions":"<=3.2.86","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d72604e-23ef-4a69-8839-cf8ff4aef3bc/download-manager","title":"Download Manager <= 3.2.43 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"9d72604e-23ef-4a69-8839-cf8ff4aef3bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d72604e-23ef-4a69-8839-cf8ff4aef3bc?source=api-prod","affectedVersions":"<=3.2.43","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f51258a-e228-412f-9d97-28ab679136d7/download-manager","title":"Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-30 20:30:54","sources":[{"name":"Wordfence","remoteId":"9f51258a-e228-412f-9d97-28ab679136d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f51258a-e228-412f-9d97-28ab679136d7?source=api-prod","cve":"CVE-2024-4160","affectedVersions":"<=3.2.90","severity":"medium"},{"advisoryId":"WPSECADV/WF/a5a03e67-f36f-441a-a2fd-a545efa06c00/download-manager","title":"WordPress Download Manager <= 3.2.21 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"a5a03e67-f36f-441a-a2fd-a545efa06c00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a5a03e67-f36f-441a-a2fd-a545efa06c00?source=api-prod","cve":"CVE-2021-24969","affectedVersions":"<3.2.22","severity":"medium"},{"advisoryId":"WPSECADV/WF/a66bc196-e5f8-46b4-a81c-c888eb64021c/download-manager","title":"Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a66bc196-e5f8-46b4-a81c-c888eb64021c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a66bc196-e5f8-46b4-a81c-c888eb64021c?source=api-prod","cve":"CVE-2023-2305","affectedVersions":"<=3.2.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/a6b02846-61be-4571-921d-53df5493f856/download-manager","title":"Download Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection Removal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-09 12:00:41","sources":[{"name":"Wordfence","remoteId":"a6b02846-61be-4571-921d-53df5493f856"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a6b02846-61be-4571-921d-53df5493f856?source=api-prod","cve":"CVE-2026-4057","affectedVersions":"<=3.3.51","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0d8499a-a630-4c2b-9381-78ac83da119d/download-manager","title":"WordPress Download Manager <= 3.2.12 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0d8499a-a630-4c2b-9381-78ac83da119d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0d8499a-a630-4c2b-9381-78ac83da119d?source=api-prod","affectedVersions":"<3.2.13","severity":"high"},{"advisoryId":"WPSECADV/WF/b1adb414-8945-4e11-8770-dab3285d608e/download-manager","title":"Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-18 16:25:25","sources":[{"name":"Wordfence","remoteId":"b1adb414-8945-4e11-8770-dab3285d608e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b1adb414-8945-4e11-8770-dab3285d608e?source=api-prod","cve":"CVE-2025-10146","affectedVersions":"<=3.3.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3247bb3-3d9a-49b5-99ec-f4b305d37ae5/download-manager","title":"WordPress Download Manager <= 2.7.94 - Stored Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3247bb3-3d9a-49b5-99ec-f4b305d37ae5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3247bb3-3d9a-49b5-99ec-f4b305d37ae5?source=api-prod","affectedVersions":"<=2.7.94","severity":"medium"},{"advisoryId":"WPSECADV/WF/b399929a-db33-419f-9218-b86ee88a9f1a/download-manager","title":"Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b399929a-db33-419f-9218-b86ee88a9f1a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b399929a-db33-419f-9218-b86ee88a9f1a?source=api-prod","cve":"CVE-2022-2101","affectedVersions":"<=3.2.46","severity":"medium"},{"advisoryId":"WPSECADV/WF/b478d88d-1423-4a33-b8ef-08b9e66a5d98/download-manager","title":"Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"b478d88d-1423-4a33-b8ef-08b9e66a5d98"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b478d88d-1423-4a33-b8ef-08b9e66a5d98?source=api-prod","cve":"CVE-2024-4001","affectedVersions":"<=3.2.93","severity":"medium"},{"advisoryId":"WPSECADV/WF/b48bc632-c825-48e0-8766-3ac59e5b87c6/download-manager","title":"Download Manager <= 3.2.70 - Insufficient Authorization to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"b48bc632-c825-48e0-8766-3ac59e5b87c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b48bc632-c825-48e0-8766-3ac59e5b87c6?source=api-prod","cve":"CVE-2023-1524","affectedVersions":"<=3.2.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/b8f24fae-6a8b-4c67-a204-c085ae43552f/download-manager","title":"Download Manager <= 3.2.34 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8f24fae-6a8b-4c67-a204-c085ae43552f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8f24fae-6a8b-4c67-a204-c085ae43552f?source=api-prod","cve":"CVE-2021-25087","affectedVersions":"<3.2.35","severity":"high"},{"advisoryId":"WPSECADV/WF/bc5c7974-4c10-4880-8823-2accee3c0da4/download-manager","title":"Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc5c7974-4c10-4880-8823-2accee3c0da4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc5c7974-4c10-4880-8823-2accee3c0da4?source=api-prod","cve":"CVE-2025-1785","affectedVersions":"<=3.3.08","severity":"medium"},{"advisoryId":"WPSECADV/WF/bd7c442f-5c91-4c52-933a-8a6fb7adca8c/download-manager","title":"Download Manager <= 2.5.8 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-12-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd7c442f-5c91-4c52-933a-8a6fb7adca8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd7c442f-5c91-4c52-933a-8a6fb7adca8c?source=api-prod","affectedVersions":"<=2.5.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/bf90d284-9db8-464b-ae01-f1979408b351/download-manager","title":"WordPress Download Manager <= 2.9.49 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-06-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"bf90d284-9db8-464b-ae01-f1979408b351"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bf90d284-9db8-464b-ae01-f1979408b351?source=api-prod","cve":"CVE-2017-2216","affectedVersions":"<2.9.50","severity":"medium"},{"advisoryId":"WPSECADV/WF/c59cddfb-c434-4a69-9c1c-7d58f022c1aa/download-manager","title":"Download Manager <= 2.8.7 - Privilege Escalation\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"c59cddfb-c434-4a69-9c1c-7d58f022c1aa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c59cddfb-c434-4a69-9c1c-7d58f022c1aa?source=api-prod","affectedVersions":"<2.8.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/cace29fd-95d0-48ea-8dfa-6fd12dd9ccbf/download-manager","title":"Download Manager <= 3.2.43 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"cace29fd-95d0-48ea-8dfa-6fd12dd9ccbf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cace29fd-95d0-48ea-8dfa-6fd12dd9ccbf?source=api-prod","cve":"CVE-2022-2168","affectedVersions":"<=3.2.43","severity":"medium"},{"advisoryId":"WPSECADV/WF/cad5274f-0d73-425d-bdfb-478c77d55d6c/download-manager","title":"WordPress Download Manager <= 2.9.96 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-06-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"cad5274f-0d73-425d-bdfb-478c77d55d6c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cad5274f-0d73-425d-bdfb-478c77d55d6c?source=api-prod","affectedVersions":"<2.9.97","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3efaa0d-8af6-4cdf-9225-8bbcfdbb73d3/download-manager","title":"Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3efaa0d-8af6-4cdf-9225-8bbcfdbb73d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3efaa0d-8af6-4cdf-9225-8bbcfdbb73d3?source=api-prod","cve":"CVE-2026-2571","affectedVersions":"<=3.3.49","severity":"medium"},{"advisoryId":"WPSECADV/WF/d57e11e8-de23-469e-9b96-3fc24b03bf98/download-manager","title":"Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:57:15","sources":[{"name":"Wordfence","remoteId":"d57e11e8-de23-469e-9b96-3fc24b03bf98"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d57e11e8-de23-469e-9b96-3fc24b03bf98?source=api-prod","cve":"CVE-2026-9696","affectedVersions":"<=3.3.58","severity":"medium"},{"advisoryId":"WPSECADV/WF/d5c652be-ea24-4fbe-aa88-ea1f8814d34a/download-manager","title":"Download Manager <= 3.3.52 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d5c652be-ea24-4fbe-aa88-ea1f8814d34a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d5c652be-ea24-4fbe-aa88-ea1f8814d34a?source=api-prod","cve":"CVE-2026-39676","affectedVersions":"<=3.3.52","severity":"medium"},{"advisoryId":"WPSECADV/WF/d7d381af-bb2a-43cb-9e5d-0b3d0e5f88f0/download-manager","title":"Download Manager <= 2.8.7 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d7d381af-bb2a-43cb-9e5d-0b3d0e5f88f0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7d381af-bb2a-43cb-9e5d-0b3d0e5f88f0?source=api-prod","affectedVersions":"<2.8.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/dd9e6ba7-f107-4d7c-a7da-35e603f3a1a8/download-manager","title":"Download Manager <= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-17 19:29:16","sources":[{"name":"Wordfence","remoteId":"dd9e6ba7-f107-4d7c-a7da-35e603f3a1a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dd9e6ba7-f107-4d7c-a7da-35e603f3a1a8?source=api-prod","cve":"CVE-2025-3056","affectedVersions":"<=3.3.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/df93727c-2d2f-4e13-8c89-3ffb93975180/download-manager","title":"Download Manager <= 3.2.99 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"df93727c-2d2f-4e13-8c89-3ffb93975180"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/df93727c-2d2f-4e13-8c89-3ffb93975180?source=api-prod","cve":"CVE-2024-8444","affectedVersions":"<=3.2.99","severity":"medium"},{"advisoryId":"WPSECADV/WF/dfb0da20-99f1-4bf1-8b30-3c8d15bf9679/download-manager","title":"Download Manager <= 3.2.84 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"dfb0da20-99f1-4bf1-8b30-3c8d15bf9679"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dfb0da20-99f1-4bf1-8b30-3c8d15bf9679?source=api-prod","cve":"CVE-2024-29114","affectedVersions":"<=3.2.84","severity":"medium"},{"advisoryId":"WPSECADV/WF/e04b75d4-9bf5-4b26-ac3a-88a10d200c50/download-manager","title":"Download Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 18:53:39","sources":[{"name":"Wordfence","remoteId":"e04b75d4-9bf5-4b26-ac3a-88a10d200c50"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e04b75d4-9bf5-4b26-ac3a-88a10d200c50?source=api-prod","cve":"CVE-2026-97338","affectedVersions":"<=3.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3991601-a96c-4f98-a0f6-04a134ec6feb/download-manager","title":"Download Manager <= 3.3.25 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3991601-a96c-4f98-a0f6-04a134ec6feb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3991601-a96c-4f98-a0f6-04a134ec6feb?source=api-prod","cve":"CVE-2025-60092","affectedVersions":"<=3.3.25","severity":"medium"},{"advisoryId":"WPSECADV/WF/ebf96aa9-2ee7-4411-8f43-3e8d023197bd/download-manager","title":"Download Manager <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 18:55:18","sources":[{"name":"Wordfence","remoteId":"ebf96aa9-2ee7-4411-8f43-3e8d023197bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ebf96aa9-2ee7-4411-8f43-3e8d023197bd?source=api-prod","cve":"CVE-2026-13733","affectedVersions":"<=3.3.60","severity":"medium"},{"advisoryId":"WPSECADV/WF/ed40b874-68e2-49f3-95b0-653600394e78/download-manager","title":"WordPress Download Manager < 3.1.19 - Arbitrary File Upload\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed40b874-68e2-49f3-95b0-653600394e78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed40b874-68e2-49f3-95b0-653600394e78?source=api-prod","affectedVersions":"<3.1.19","severity":"high"},{"advisoryId":"WPSECADV/WF/ed6e0136-f4fa-4739-b02d-b53091991e58/download-manager","title":"WordPress Download Manager <= 3.2.33 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed6e0136-f4fa-4739-b02d-b53091991e58"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed6e0136-f4fa-4739-b02d-b53091991e58?source=api-prod","cve":"CVE-2021-25069","affectedVersions":"<3.2.34","severity":"high"},{"advisoryId":"WPSECADV/WF/f0165bf4-03ed-4021-8f45-6beef4ef3140/download-manager","title":"Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 16:40:06","sources":[{"name":"Wordfence","remoteId":"f0165bf4-03ed-4021-8f45-6beef4ef3140"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f0165bf4-03ed-4021-8f45-6beef4ef3140?source=api-prod","cve":"CVE-2026-12054","affectedVersions":"<=3.3.57","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2a475f5-aafa-4717-b1a3-43f2ab8bce46/download-manager","title":"Download Manager <= 3.3.02 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2a475f5-aafa-4717-b1a3-43f2ab8bce46"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2a475f5-aafa-4717-b1a3-43f2ab8bce46?source=api-prod","cve":"CVE-2024-10706","affectedVersions":"<=3.3.02","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2cdd50d-6290-4cef-a72c-2e9d680d4f1f/download-manager","title":"Download Manager <= 3.3.32 - Missing Authorization to Authenticated (Subscriber+) Media Attachment Password Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2cdd50d-6290-4cef-a72c-2e9d680d4f1f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2cdd50d-6290-4cef-a72c-2e9d680d4f1f?source=api-prod","cve":"CVE-2025-13498","affectedVersions":"<=3.3.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3c9c798-8545-475e-879b-7e44dac493f0/download-manager","title":"Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3c9c798-8545-475e-879b-7e44dac493f0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3c9c798-8545-475e-879b-7e44dac493f0?source=api-prod","cve":"CVE-2022-2431","affectedVersions":"<=3.2.50","severity":"high"},{"advisoryId":"WPSECADV/WF/f52aede5-21c3-46b9-800e-860a677a4b90/download-manager","title":"WordPress Download Manager <= 2.9.45 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"f52aede5-21c3-46b9-800e-860a677a4b90"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f52aede5-21c3-46b9-800e-860a677a4b90?source=api-prod","affectedVersions":"<=2.9.45","severity":"high"},{"advisoryId":"WPSECADV/WF/f9611732-67aa-4940-8df1-c0ed7baad985/download-manager","title":"Download Manager <= 3.2.49 - IP Blocking Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9611732-67aa-4940-8df1-c0ed7baad985"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9611732-67aa-4940-8df1-c0ed7baad985?source=api-prod","cve":"CVE-2022-2362","affectedVersions":"<=3.2.49","severity":"medium"},{"advisoryId":"WPSECADV/WF/feb056b0-5ea0-4257-8d58-0e29b3c304bd/download-manager","title":"Download Manager <= 3.2.38 - Unauthenticated Brute Force of File Master Key\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"feb056b0-5ea0-4257-8d58-0e29b3c304bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/feb056b0-5ea0-4257-8d58-0e29b3c304bd?source=api-prod","cve":"CVE-2022-0828","affectedVersions":"<3.2.39","severity":"high"},{"advisoryId":"WPSECADV/WF/feb915f4-66d6-4f46-949c-5354e414319b/download-manager","title":"Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-18 16:22:49","sources":[{"name":"Wordfence","remoteId":"feb915f4-66d6-4f46-949c-5354e414319b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/feb915f4-66d6-4f46-949c-5354e414319b?source=api-prod","cve":"CVE-2024-11768","affectedVersions":"<=3.3.03","severity":"medium"},{"advisoryId":"WPSECADV/WF/ffa54d4e-a633-48a4-83c0-33b7cbd2229a/download-manager","title":"Download Manager <= 3.3.24 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"ffa54d4e-a633-48a4-83c0-33b7cbd2229a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ffa54d4e-a633-48a4-83c0-33b7cbd2229a?source=api-prod","cve":"CVE-2025-60093","affectedVersions":"<=3.3.24","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0184b2b5-0b50-407e-8911-b0845714ea17/download-manager","title":"Download Manager <= 3.3.53 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"0184b2b5-0b50-407e-8911-b0845714ea17"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0184b2b5-0b50-407e-8911-b0845714ea17?source=api-prod","cve":"CVE-2026-39615","affectedVersions":"<=3.3.53","severity":"medium"},{"advisoryId":"WPSECADV/WF/029956d7-6e3f-4159-9f53-05691e0262fc/download-manager","title":"Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-18 15:05:22","sources":[{"name":"Wordfence","remoteId":"029956d7-6e3f-4159-9f53-05691e0262fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/029956d7-6e3f-4159-9f53-05691e0262fc?source=api-prod","cve":"CVE-2025-4367","affectedVersions":"<=3.3.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/067031e8-6aa8-451c-a318-b1848c7a4f92/download-manager","title":"Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-05 13:11:34","sources":[{"name":"Wordfence","remoteId":"067031e8-6aa8-451c-a318-b1848c7a4f92"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/067031e8-6aa8-451c-a318-b1848c7a4f92?source=api-prod","cve":"CVE-2025-15364","affectedVersions":"<=3.3.40","severity":"high"},{"advisoryId":"WPSECADV/WF/06738434-ccd4-4e87-8163-d56ff3b4b5c8/download-manager","title":"Download Manager <= 3.1.17 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"06738434-ccd4-4e87-8163-d56ff3b4b5c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06738434-ccd4-4e87-8163-d56ff3b4b5c8?source=api-prod","affectedVersions":"<3.1.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/07a31d5c-b8c5-4523-8883-ba1e919c0ab1/download-manager","title":"Download Manager <= 3.2.61 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"07a31d5c-b8c5-4523-8883-ba1e919c0ab1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/07a31d5c-b8c5-4523-8883-ba1e919c0ab1?source=api-prod","cve":"CVE-2022-4476","affectedVersions":"<=3.2.61","severity":"medium"},{"advisoryId":"WPSECADV/WF/0a73d326-cd27-4719-8c26-3aa5dce837c0/download-manager","title":"WordPress Download Manager <= 3.2.15 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a73d326-cd27-4719-8c26-3aa5dce837c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a73d326-cd27-4719-8c26-3aa5dce837c0?source=api-prod","cve":"CVE-2021-24773","affectedVersions":"<3.2.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/10b46c11-1b34-4da4-a24d-103c663ca315/download-manager","title":"Download Manager <= 3.2.59 - Refleced Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"10b46c11-1b34-4da4-a24d-103c663ca315"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10b46c11-1b34-4da4-a24d-103c663ca315?source=api-prod","cve":"CVE-2022-45836","affectedVersions":"<=3.2.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/1301c8af-d81a-40f1-96fa-e8252309d8a4/download-manager","title":"Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"1301c8af-d81a-40f1-96fa-e8252309d8a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1301c8af-d81a-40f1-96fa-e8252309d8a4?source=api-prod","cve":"CVE-2024-2098","affectedVersions":"<=3.2.89","severity":"high"},{"advisoryId":"WPSECADV/WF/17d5253c-5000-40c7-a7fd-f75d4badfb5e/download-manager","title":"Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"17d5253c-5000-40c7-a7fd-f75d4badfb5e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/17d5253c-5000-40c7-a7fd-f75d4badfb5e?source=api-prod","cve":"CVE-2025-12177","affectedVersions":"<=3.3.30","severity":"medium"},{"advisoryId":"WPSECADV/WF/2105a26a-0813-4f63-a28d-6b3bd68ea9a1/download-manager","title":"Download Manager < 3.3.66 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"2105a26a-0813-4f63-a28d-6b3bd68ea9a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2105a26a-0813-4f63-a28d-6b3bd68ea9a1?source=api-prod","cve":"CVE-2026-14292","affectedVersions":"<3.3.66","severity":"high"},{"advisoryId":"WPSECADV/WF/21f8f5be-b513-4040-af39-c1a61d7e313f/download-manager","title":"Download Manager <= 3.3.12 - Authenticated (Author+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-18 18:52:05","sources":[{"name":"Wordfence","remoteId":"21f8f5be-b513-4040-af39-c1a61d7e313f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21f8f5be-b513-4040-af39-c1a61d7e313f?source=api-prod","cve":"CVE-2025-3404","affectedVersions":"<=3.3.12","severity":"high"},{"advisoryId":"WPSECADV/WF/228147c2-97c6-4910-b9b2-d6ca62fc1760/download-manager","title":"Download Manager <= 3.2.48 - Cross-Site Request Forgery to Plugin Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"228147c2-97c6-4910-b9b2-d6ca62fc1760"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/228147c2-97c6-4910-b9b2-d6ca62fc1760?source=api-prod","cve":"CVE-2022-34347","affectedVersions":"<=3.2.48","severity":"high"},{"advisoryId":"WPSECADV/WF/244eba91-343a-4e91-96b8-207686d02ce6/download-manager","title":"Download Manager <= 3.3.32 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"244eba91-343a-4e91-96b8-207686d02ce6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/244eba91-343a-4e91-96b8-207686d02ce6?source=api-prod","cve":"CVE-2025-63070","affectedVersions":"<=3.3.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/25f0615b-17a1-4bf8-9f77-4703c39baca5/download-manager","title":"Download Manager <= 3.3.03 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"25f0615b-17a1-4bf8-9f77-4703c39baca5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/25f0615b-17a1-4bf8-9f77-4703c39baca5?source=api-prod","cve":"CVE-2024-56217","affectedVersions":"<=3.3.03","severity":"medium"},{"advisoryId":"WPSECADV/WF/27fc81b0-c03a-4de7-bc38-791401d1685b/download-manager","title":"Download Manager <= 3.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-08 13:33:28","sources":[{"name":"Wordfence","remoteId":"27fc81b0-c03a-4de7-bc38-791401d1685b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/27fc81b0-c03a-4de7-bc38-791401d1685b?source=api-prod","cve":"CVE-2026-5357","affectedVersions":"<=3.3.52","severity":"medium"},{"advisoryId":"WPSECADV/WF/2cde1f4d-0212-48b1-a0ef-ba923c37ab50/download-manager","title":"WordPress Download Manager <= 3.1.24 - Authenticated File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"2cde1f4d-0212-48b1-a0ef-ba923c37ab50"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2cde1f4d-0212-48b1-a0ef-ba923c37ab50?source=api-prod","cve":"CVE-2021-34639","affectedVersions":"<=3.1.24","severity":"high"},{"advisoryId":"WPSECADV/WF/332b8d96-89b2-473b-9186-239e49f5b064/download-manager","title":"Download Manager <= 3.2.53 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"332b8d96-89b2-473b-9186-239e49f5b064"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/332b8d96-89b2-473b-9186-239e49f5b064?source=api-prod","affectedVersions":"<=3.2.53","severity":"medium"},{"advisoryId":"WPSECADV/WF/3cb84ba3-b403-4a9d-b1a7-92aa947310ac/download-manager","title":"Download Manager <= 3.3.46 - Reflected Cross-Site Scripting via 'redirect_to' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-17 17:51:30","sources":[{"name":"Wordfence","remoteId":"3cb84ba3-b403-4a9d-b1a7-92aa947310ac"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3cb84ba3-b403-4a9d-b1a7-92aa947310ac?source=api-prod","cve":"CVE-2026-1666","affectedVersions":"<=3.3.46","severity":"medium"},{"advisoryId":"WPSECADV/WF/41b2a584-b741-4265-a878-9434140070dc/download-manager","title":"Download Manager <= 3.3.70 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 09:30:00","sources":[{"name":"Wordfence","remoteId":"41b2a584-b741-4265-a878-9434140070dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41b2a584-b741-4265-a878-9434140070dc?source=api-prod","cve":"CVE-2026-94405","affectedVersions":"<=3.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/41b3a62c-9586-4c87-828a-584dfe386a37/download-manager","title":"Download Manager <= 3.2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"41b3a62c-9586-4c87-828a-584dfe386a37"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41b3a62c-9586-4c87-828a-584dfe386a37?source=api-prod","cve":"CVE-2022-34658","affectedVersions":"<=3.2.48","severity":"medium"},{"advisoryId":"WPSECADV/WF/446b160a-299e-4f91-bd49-02a7a16b6e5f/download-manager","title":"Download Manager < 2.5.9 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-12-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"446b160a-299e-4f91-bd49-02a7a16b6e5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/446b160a-299e-4f91-bd49-02a7a16b6e5f?source=api-prod","cve":"CVE-2013-7319","affectedVersions":"<=2.5.8","severity":"high"},{"advisoryId":"WPSECADV/WF/44c31db3-6dfa-4d42-9c3b-73dde9bc49b9/download-manager","title":"WordPress Download Manager <= 2.9.51 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-06-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"44c31db3-6dfa-4d42-9c3b-73dde9bc49b9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44c31db3-6dfa-4d42-9c3b-73dde9bc49b9?source=api-prod","cve":"CVE-2017-18032","affectedVersions":"<=2.9.51","severity":"medium"},{"advisoryId":"WPSECADV/WF/4654609e-ed3e-4268-a9a4-80bc563e0a64/download-manager","title":"Download Manager <= 3.2.48 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"4654609e-ed3e-4268-a9a4-80bc563e0a64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4654609e-ed3e-4268-a9a4-80bc563e0a64?source=api-prod","cve":"CVE-2022-36288","affectedVersions":"<=3.2.48","severity":"high"},{"advisoryId":"WPSECADV/WF/471957f6-54c1-4268-b2e1-8efa391dcaec/download-manager","title":"Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"471957f6-54c1-4268-b2e1-8efa391dcaec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/471957f6-54c1-4268-b2e1-8efa391dcaec?source=api-prod","cve":"CVE-2022-2436","affectedVersions":"<=3.2.49","severity":"high"},{"advisoryId":"WPSECADV/WF/4a7be578-5883-4cd3-963d-bf81c3af2003/download-manager","title":"Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-18 16:22:49","sources":[{"name":"Wordfence","remoteId":"4a7be578-5883-4cd3-963d-bf81c3af2003"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a7be578-5883-4cd3-963d-bf81c3af2003?source=api-prod","cve":"CVE-2024-11740","affectedVersions":"<=3.3.03","severity":"high"},{"advisoryId":"WPSECADV/WF/4ccc8f3b-9028-45db-8db2-574736fe3ccb/download-manager","title":"WordPress Download Manager < 3.1.22 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"4ccc8f3b-9028-45db-8db2-574736fe3ccb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ccc8f3b-9028-45db-8db2-574736fe3ccb?source=api-prod","affectedVersions":"<3.1.22","severity":"high"},{"advisoryId":"WPSECADV/WF/4e2527d4-750d-4e36-ae27-920105958c21/download-manager","title":"Download Manager <= 3.2.54 - Authenticated (Admin+) Path Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e2527d4-750d-4e36-ae27-920105958c21"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e2527d4-750d-4e36-ae27-920105958c21?source=api-prod","cve":"CVE-2022-2926","affectedVersions":"<3.2.55","severity":"medium"},{"advisoryId":"WPSECADV/WF/4eca64cc-75c2-46ba-a086-15a952a20026/download-manager","title":"Download Manager <= 3.3.68 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'wpdm_duplicate' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 18:30:10","sources":[{"name":"Wordfence","remoteId":"4eca64cc-75c2-46ba-a086-15a952a20026"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4eca64cc-75c2-46ba-a086-15a952a20026?source=api-prod","cve":"CVE-2026-92714","affectedVersions":"<=3.3.68","severity":"medium"},{"advisoryId":"WPSECADV/WF/4f5985b0-0e6c-4dd8-b5f8-53be62adc8dd/download-manager","title":"Download Manager <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regurl' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:29:40","sources":[{"name":"Wordfence","remoteId":"4f5985b0-0e6c-4dd8-b5f8-53be62adc8dd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4f5985b0-0e6c-4dd8-b5f8-53be62adc8dd?source=api-prod","cve":"CVE-2026-102401","affectedVersions":"<=3.3.71","severity":"medium"},{"advisoryId":"WPSECADV/WF/567782f9-a050-4e68-9491-e038d7e383f5/download-manager","title":"WordPress Download Manager <= 2.7.2 - Authenticated Arbitrary Options Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-11-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"567782f9-a050-4e68-9491-e038d7e383f5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/567782f9-a050-4e68-9491-e038d7e383f5?source=api-prod","cve":"CVE-2014-9260","affectedVersions":"<2.7.3","severity":"high"},{"advisoryId":"WPSECADV/WF/5cdd64a4-040b-4dc9-a8df-dbecfeb928c8/download-manager","title":"Download Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5cdd64a4-040b-4dc9-a8df-dbecfeb928c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5cdd64a4-040b-4dc9-a8df-dbecfeb928c8?source=api-prod","cve":"CVE-2023-6954","affectedVersions":"<=3.2.85","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e491592-a17f-4789-8faa-d2a60b8ced70/download-manager","title":"WordPress Download Manager <= 2.7.4 - Remote Code Execution\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"5e491592-a17f-4789-8faa-d2a60b8ced70"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e491592-a17f-4789-8faa-d2a60b8ced70?source=api-prod","affectedVersions":"<2.7.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/5f9cece7-a158-41ae-816b-1054da830724/download-manager","title":"Download Manager <= 3.2.82 - Unauthenticated Password Leak\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f9cece7-a158-41ae-816b-1054da830724"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f9cece7-a158-41ae-816b-1054da830724?source=api-prod","cve":"CVE-2023-6421","affectedVersions":"<=3.2.82","severity":"medium"},{"advisoryId":"WPSECADV/WF/639bf20c-04d4-49e5-8da1-685421a6f63a/download-manager","title":"Download Manager <= 2.8.7 - Sensitive Information Disclosure via Directory Listing\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"639bf20c-04d4-49e5-8da1-685421a6f63a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/639bf20c-04d4-49e5-8da1-685421a6f63a?source=api-prod","affectedVersions":"<2.8.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/6a6390d2-58cd-468e-9936-e16954e2d3ee/download-manager","title":"Download Manager <= 2.2.2 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"6a6390d2-58cd-468e-9936-e16954e2d3ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6a6390d2-58cd-468e-9936-e16954e2d3ee?source=api-prod","affectedVersions":"<=2.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6d700580-1374-4a17-a6b3-59ba1d063030/download-manager","title":"WordPress Download Manager < 3.1.23 -  Arbitrary Asset Manager Usage\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"6d700580-1374-4a17-a6b3-59ba1d063030"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d700580-1374-4a17-a6b3-59ba1d063030?source=api-prod","affectedVersions":"<3.1.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e363a62-8d31-4140-878b-5034d6c7b6a1/download-manager","title":"Download Manager <= 3.2.92 - Authenticated (Author+) Stored Cross-Site Scripting via Multiple Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-11 19:58:22","sources":[{"name":"Wordfence","remoteId":"6e363a62-8d31-4140-878b-5034d6c7b6a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e363a62-8d31-4140-878b-5034d6c7b6a1?source=api-prod","cve":"CVE-2024-5266","affectedVersions":"<=3.2.92","severity":"medium"},{"advisoryId":"WPSECADV/WF/6fb1e3ea-77ba-440a-a528-b477089101f6/download-manager","title":"Download Manager <= 3.3.71 (free) & 7.5.9 (Pro) Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"6fb1e3ea-77ba-440a-a528-b477089101f6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6fb1e3ea-77ba-440a-a528-b477089101f6?source=api-prod","cve":"CVE-2026-86611","affectedVersions":"<=3.3.70|>=4.0.0,<=7.5.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/74cd34be-008c-4ff3-ae3c-417cfd2fee9b/download-manager","title":"Download Manager <= 3.3.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_before' and 'note_after' Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-08 18:12:21","sources":[{"name":"Wordfence","remoteId":"74cd34be-008c-4ff3-ae3c-417cfd2fee9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/74cd34be-008c-4ff3-ae3c-417cfd2fee9b?source=api-prod","cve":"CVE-2026-14343","affectedVersions":"<=3.3.61","severity":"medium"},{"advisoryId":"WPSECADV/WF/776fc47e-a86c-43dc-8d5e-50273c4411b2/download-manager","title":"WordPress Download Manager <= 3.1.24 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"776fc47e-a86c-43dc-8d5e-50273c4411b2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/776fc47e-a86c-43dc-8d5e-50273c4411b2?source=api-prod","cve":"CVE-2021-34638","affectedVersions":"<=3.1.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/79b5883b-a3be-497e-b911-7dc39e7fb418/download-manager","title":"WordPress Download Manager <= 2.9.6 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-01-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"79b5883b-a3be-497e-b911-7dc39e7fb418"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/79b5883b-a3be-497e-b911-7dc39e7fb418?source=api-prod","affectedVersions":"<=2.9.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/79fcf18e-39f7-42f2-90e4-3a5bac3382e0/download-manager","title":"Download Manager <= 3.2.42 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"79fcf18e-39f7-42f2-90e4-3a5bac3382e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/79fcf18e-39f7-42f2-90e4-3a5bac3382e0?source=api-prod","cve":"CVE-2022-1985","affectedVersions":"<=3.2.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/7a32393e-f233-4ab6-addc-9dd1e04c0e0a/download-manager","title":"Download Manager <= 3.3.66 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 19:29:43","sources":[{"name":"Wordfence","remoteId":"7a32393e-f233-4ab6-addc-9dd1e04c0e0a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a32393e-f233-4ab6-addc-9dd1e04c0e0a?source=api-prod","cve":"CVE-2026-16685","affectedVersions":"<=3.3.66","severity":"medium"},{"advisoryId":"WPSECADV/WF/7b3608ca-8ed6-46ff-8e57-d8b68f91b9f2/download-manager","title":"Download Manager <= 3.2.84 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b3608ca-8ed6-46ff-8e57-d8b68f91b9f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b3608ca-8ed6-46ff-8e57-d8b68f91b9f2?source=api-prod","cve":"CVE-2023-6785","affectedVersions":"<=3.2.84","severity":"medium"},{"advisoryId":"WPSECADV/WF/7c67d2f8-d918-42ef-a301-27eed7fa41b2/download-manager","title":"Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"7c67d2f8-d918-42ef-a301-27eed7fa41b2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7c67d2f8-d918-42ef-a301-27eed7fa41b2?source=api-prod","cve":"CVE-2024-6208","affectedVersions":"<=3.2.97","severity":"medium"},{"advisoryId":"WPSECADV/WF/834bedf0-a2bc-4396-a160-3d3f399c1897/download-manager","title":"Download Manager <= 3.2.98 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"834bedf0-a2bc-4396-a160-3d3f399c1897"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/834bedf0-a2bc-4396-a160-3d3f399c1897?source=api-prod","cve":"CVE-2024-8284","affectedVersions":"<=3.2.98","severity":"medium"},{"advisoryId":"WPSECADV/WF/84791a83-197b-4a73-826d-517bf47bc5c9/download-manager","title":"Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:29:44","sources":[{"name":"Wordfence","remoteId":"84791a83-197b-4a73-826d-517bf47bc5c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84791a83-197b-4a73-826d-517bf47bc5c9?source=api-prod","cve":"CVE-2026-103964","affectedVersions":"<=3.3.71","severity":"medium"},{"advisoryId":"WPSECADV/WF/88d80702-a987-4b12-a003-2fa564fda409/download-manager","title":"Download Manager Pro <= 6.2.9 - Unauthenticated Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"88d80702-a987-4b12-a003-2fa564fda409"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88d80702-a987-4b12-a003-2fa564fda409?source=api-prod","cve":"CVE-2023-1809","affectedVersions":">=4.0,<6.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8b602f33-ae2f-4349-a8be-901a9eec91c3/download-manager","title":"WordPress Download Manager <= 2.9.93 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"8b602f33-ae2f-4349-a8be-901a9eec91c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8b602f33-ae2f-4349-a8be-901a9eec91c3?source=api-prod","cve":"CVE-2019-15889","affectedVersions":"<2.9.94","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d07b7c1-8180-4b2a-bf35-2c5b3d419152/download-manager","title":"Download Manager <= 3.3.06 - Unauthenticated Information Disclosure via Unprotected Directory\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d07b7c1-8180-4b2a-bf35-2c5b3d419152"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d07b7c1-8180-4b2a-bf35-2c5b3d419152?source=api-prod","cve":"CVE-2024-13126","affectedVersions":"<=3.3.06","severity":"medium"},{"advisoryId":"WPSECADV/WF/97690bde-f2c6-429b-8d5a-51bee4a981ca/download-manager","title":"WordPress Download Manager < 2.9.51 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"97690bde-f2c6-429b-8d5a-51bee4a981ca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/97690bde-f2c6-429b-8d5a-51bee4a981ca?source=api-prod","cve":"CVE-2017-2217","affectedVersions":"<2.9.51","severity":"medium"},{"advisoryId":"WPSECADV/WF/9774c999-acb6-4c5f-ad6c-10979660b164/download-manager","title":"Download Manager <= 3.2.86 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"9774c999-acb6-4c5f-ad6c-10979660b164"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9774c999-acb6-4c5f-ad6c-10979660b164?source=api-prod","cve":"CVE-2024-1766","affectedVersions":"<=3.2.86","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d72604e-23ef-4a69-8839-cf8ff4aef3bc/download-manager","title":"Download Manager <= 3.2.43 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"9d72604e-23ef-4a69-8839-cf8ff4aef3bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d72604e-23ef-4a69-8839-cf8ff4aef3bc?source=api-prod","affectedVersions":"<=3.2.43","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f51258a-e228-412f-9d97-28ab679136d7/download-manager","title":"Download Manager <= 3.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm-all-packages Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-30 20:30:54","sources":[{"name":"Wordfence","remoteId":"9f51258a-e228-412f-9d97-28ab679136d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f51258a-e228-412f-9d97-28ab679136d7?source=api-prod","cve":"CVE-2024-4160","affectedVersions":"<=3.2.90","severity":"medium"},{"advisoryId":"WPSECADV/WF/a5a03e67-f36f-441a-a2fd-a545efa06c00/download-manager","title":"WordPress Download Manager <= 3.2.21 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"a5a03e67-f36f-441a-a2fd-a545efa06c00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a5a03e67-f36f-441a-a2fd-a545efa06c00?source=api-prod","cve":"CVE-2021-24969","affectedVersions":"<3.2.22","severity":"medium"},{"advisoryId":"WPSECADV/WF/a66bc196-e5f8-46b4-a81c-c888eb64021c/download-manager","title":"Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a66bc196-e5f8-46b4-a81c-c888eb64021c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a66bc196-e5f8-46b4-a81c-c888eb64021c?source=api-prod","cve":"CVE-2023-2305","affectedVersions":"<=3.2.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/a6b02846-61be-4571-921d-53df5493f856/download-manager","title":"Download Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection Removal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-09 12:00:41","sources":[{"name":"Wordfence","remoteId":"a6b02846-61be-4571-921d-53df5493f856"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a6b02846-61be-4571-921d-53df5493f856?source=api-prod","cve":"CVE-2026-4057","affectedVersions":"<=3.3.51","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0d8499a-a630-4c2b-9381-78ac83da119d/download-manager","title":"WordPress Download Manager <= 3.2.12 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0d8499a-a630-4c2b-9381-78ac83da119d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0d8499a-a630-4c2b-9381-78ac83da119d?source=api-prod","affectedVersions":"<3.2.13","severity":"high"},{"advisoryId":"WPSECADV/WF/b1adb414-8945-4e11-8770-dab3285d608e/download-manager","title":"Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-18 16:25:25","sources":[{"name":"Wordfence","remoteId":"b1adb414-8945-4e11-8770-dab3285d608e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b1adb414-8945-4e11-8770-dab3285d608e?source=api-prod","cve":"CVE-2025-10146","affectedVersions":"<=3.3.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3247bb3-3d9a-49b5-99ec-f4b305d37ae5/download-manager","title":"WordPress Download Manager <= 2.7.94 - Stored Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3247bb3-3d9a-49b5-99ec-f4b305d37ae5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3247bb3-3d9a-49b5-99ec-f4b305d37ae5?source=api-prod","affectedVersions":"<=2.7.94","severity":"medium"},{"advisoryId":"WPSECADV/WF/b399929a-db33-419f-9218-b86ee88a9f1a/download-manager","title":"Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b399929a-db33-419f-9218-b86ee88a9f1a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b399929a-db33-419f-9218-b86ee88a9f1a?source=api-prod","cve":"CVE-2022-2101","affectedVersions":"<=3.2.46","severity":"medium"},{"advisoryId":"WPSECADV/WF/b478d88d-1423-4a33-b8ef-08b9e66a5d98/download-manager","title":"Download Manager <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"b478d88d-1423-4a33-b8ef-08b9e66a5d98"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b478d88d-1423-4a33-b8ef-08b9e66a5d98?source=api-prod","cve":"CVE-2024-4001","affectedVersions":"<=3.2.93","severity":"medium"},{"advisoryId":"WPSECADV/WF/b48bc632-c825-48e0-8766-3ac59e5b87c6/download-manager","title":"Download Manager <= 3.2.70 - Insufficient Authorization to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"b48bc632-c825-48e0-8766-3ac59e5b87c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b48bc632-c825-48e0-8766-3ac59e5b87c6?source=api-prod","cve":"CVE-2023-1524","affectedVersions":"<=3.2.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/b8f24fae-6a8b-4c67-a204-c085ae43552f/download-manager","title":"Download Manager <= 3.2.34 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8f24fae-6a8b-4c67-a204-c085ae43552f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8f24fae-6a8b-4c67-a204-c085ae43552f?source=api-prod","cve":"CVE-2021-25087","affectedVersions":"<3.2.35","severity":"high"},{"advisoryId":"WPSECADV/WF/bc5c7974-4c10-4880-8823-2accee3c0da4/download-manager","title":"Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc5c7974-4c10-4880-8823-2accee3c0da4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc5c7974-4c10-4880-8823-2accee3c0da4?source=api-prod","cve":"CVE-2025-1785","affectedVersions":"<=3.3.08","severity":"medium"},{"advisoryId":"WPSECADV/WF/bd7c442f-5c91-4c52-933a-8a6fb7adca8c/download-manager","title":"Download Manager <= 2.5.8 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2013-12-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd7c442f-5c91-4c52-933a-8a6fb7adca8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd7c442f-5c91-4c52-933a-8a6fb7adca8c?source=api-prod","affectedVersions":"<=2.5.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/bf90d284-9db8-464b-ae01-f1979408b351/download-manager","title":"WordPress Download Manager <= 2.9.49 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-06-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"bf90d284-9db8-464b-ae01-f1979408b351"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bf90d284-9db8-464b-ae01-f1979408b351?source=api-prod","cve":"CVE-2017-2216","affectedVersions":"<2.9.50","severity":"medium"},{"advisoryId":"WPSECADV/WF/c59cddfb-c434-4a69-9c1c-7d58f022c1aa/download-manager","title":"Download Manager <= 2.8.7 - Privilege Escalation\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"c59cddfb-c434-4a69-9c1c-7d58f022c1aa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c59cddfb-c434-4a69-9c1c-7d58f022c1aa?source=api-prod","affectedVersions":"<2.8.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/cace29fd-95d0-48ea-8dfa-6fd12dd9ccbf/download-manager","title":"Download Manager <= 3.2.43 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"cace29fd-95d0-48ea-8dfa-6fd12dd9ccbf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cace29fd-95d0-48ea-8dfa-6fd12dd9ccbf?source=api-prod","cve":"CVE-2022-2168","affectedVersions":"<=3.2.43","severity":"medium"},{"advisoryId":"WPSECADV/WF/cad5274f-0d73-425d-bdfb-478c77d55d6c/download-manager","title":"WordPress Download Manager <= 2.9.96 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-06-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"cad5274f-0d73-425d-bdfb-478c77d55d6c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cad5274f-0d73-425d-bdfb-478c77d55d6c?source=api-prod","affectedVersions":"<2.9.97","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3efaa0d-8af6-4cdf-9225-8bbcfdbb73d3/download-manager","title":"Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3efaa0d-8af6-4cdf-9225-8bbcfdbb73d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3efaa0d-8af6-4cdf-9225-8bbcfdbb73d3?source=api-prod","cve":"CVE-2026-2571","affectedVersions":"<=3.3.49","severity":"medium"},{"advisoryId":"WPSECADV/WF/d57e11e8-de23-469e-9b96-3fc24b03bf98/download-manager","title":"Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:57:15","sources":[{"name":"Wordfence","remoteId":"d57e11e8-de23-469e-9b96-3fc24b03bf98"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d57e11e8-de23-469e-9b96-3fc24b03bf98?source=api-prod","cve":"CVE-2026-9696","affectedVersions":"<=3.3.58","severity":"medium"},{"advisoryId":"WPSECADV/WF/d5c652be-ea24-4fbe-aa88-ea1f8814d34a/download-manager","title":"Download Manager <= 3.3.52 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d5c652be-ea24-4fbe-aa88-ea1f8814d34a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d5c652be-ea24-4fbe-aa88-ea1f8814d34a?source=api-prod","cve":"CVE-2026-39676","affectedVersions":"<=3.3.52","severity":"medium"},{"advisoryId":"WPSECADV/WF/d7d381af-bb2a-43cb-9e5d-0b3d0e5f88f0/download-manager","title":"Download Manager <= 2.8.7 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d7d381af-bb2a-43cb-9e5d-0b3d0e5f88f0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7d381af-bb2a-43cb-9e5d-0b3d0e5f88f0?source=api-prod","affectedVersions":"<2.8.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/dd9e6ba7-f107-4d7c-a7da-35e603f3a1a8/download-manager","title":"Download Manager <= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-17 19:29:16","sources":[{"name":"Wordfence","remoteId":"dd9e6ba7-f107-4d7c-a7da-35e603f3a1a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dd9e6ba7-f107-4d7c-a7da-35e603f3a1a8?source=api-prod","cve":"CVE-2025-3056","affectedVersions":"<=3.3.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/df93727c-2d2f-4e13-8c89-3ffb93975180/download-manager","title":"Download Manager <= 3.2.99 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"df93727c-2d2f-4e13-8c89-3ffb93975180"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/df93727c-2d2f-4e13-8c89-3ffb93975180?source=api-prod","cve":"CVE-2024-8444","affectedVersions":"<=3.2.99","severity":"medium"},{"advisoryId":"WPSECADV/WF/dfb0da20-99f1-4bf1-8b30-3c8d15bf9679/download-manager","title":"Download Manager <= 3.2.84 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"dfb0da20-99f1-4bf1-8b30-3c8d15bf9679"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dfb0da20-99f1-4bf1-8b30-3c8d15bf9679?source=api-prod","cve":"CVE-2024-29114","affectedVersions":"<=3.2.84","severity":"medium"},{"advisoryId":"WPSECADV/WF/e04b75d4-9bf5-4b26-ac3a-88a10d200c50/download-manager","title":"Download Manager <= 3.3.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 18:53:39","sources":[{"name":"Wordfence","remoteId":"e04b75d4-9bf5-4b26-ac3a-88a10d200c50"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e04b75d4-9bf5-4b26-ac3a-88a10d200c50?source=api-prod","cve":"CVE-2026-97338","affectedVersions":"<=3.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3991601-a96c-4f98-a0f6-04a134ec6feb/download-manager","title":"Download Manager <= 3.3.25 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3991601-a96c-4f98-a0f6-04a134ec6feb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3991601-a96c-4f98-a0f6-04a134ec6feb?source=api-prod","cve":"CVE-2025-60092","affectedVersions":"<=3.3.25","severity":"medium"},{"advisoryId":"WPSECADV/WF/ebf96aa9-2ee7-4411-8f43-3e8d023197bd/download-manager","title":"Download Manager <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 18:55:18","sources":[{"name":"Wordfence","remoteId":"ebf96aa9-2ee7-4411-8f43-3e8d023197bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ebf96aa9-2ee7-4411-8f43-3e8d023197bd?source=api-prod","cve":"CVE-2026-13733","affectedVersions":"<=3.3.60","severity":"medium"},{"advisoryId":"WPSECADV/WF/ed40b874-68e2-49f3-95b0-653600394e78/download-manager","title":"WordPress Download Manager < 3.1.19 - Arbitrary File Upload\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed40b874-68e2-49f3-95b0-653600394e78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed40b874-68e2-49f3-95b0-653600394e78?source=api-prod","affectedVersions":"<3.1.19","severity":"high"},{"advisoryId":"WPSECADV/WF/ed6e0136-f4fa-4739-b02d-b53091991e58/download-manager","title":"WordPress Download Manager <= 3.2.33 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed6e0136-f4fa-4739-b02d-b53091991e58"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed6e0136-f4fa-4739-b02d-b53091991e58?source=api-prod","cve":"CVE-2021-25069","affectedVersions":"<3.2.34","severity":"high"},{"advisoryId":"WPSECADV/WF/f0165bf4-03ed-4021-8f45-6beef4ef3140/download-manager","title":"Download Manager <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'REFERRER' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 16:40:06","sources":[{"name":"Wordfence","remoteId":"f0165bf4-03ed-4021-8f45-6beef4ef3140"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f0165bf4-03ed-4021-8f45-6beef4ef3140?source=api-prod","cve":"CVE-2026-12054","affectedVersions":"<=3.3.57","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2a475f5-aafa-4717-b1a3-43f2ab8bce46/download-manager","title":"Download Manager <= 3.3.02 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2a475f5-aafa-4717-b1a3-43f2ab8bce46"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2a475f5-aafa-4717-b1a3-43f2ab8bce46?source=api-prod","cve":"CVE-2024-10706","affectedVersions":"<=3.3.02","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2cdd50d-6290-4cef-a72c-2e9d680d4f1f/download-manager","title":"Download Manager <= 3.3.32 - Missing Authorization to Authenticated (Subscriber+) Media Attachment Password Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2cdd50d-6290-4cef-a72c-2e9d680d4f1f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2cdd50d-6290-4cef-a72c-2e9d680d4f1f?source=api-prod","cve":"CVE-2025-13498","affectedVersions":"<=3.3.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3c9c798-8545-475e-879b-7e44dac493f0/download-manager","title":"Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3c9c798-8545-475e-879b-7e44dac493f0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3c9c798-8545-475e-879b-7e44dac493f0?source=api-prod","cve":"CVE-2022-2431","affectedVersions":"<=3.2.50","severity":"high"},{"advisoryId":"WPSECADV/WF/f52aede5-21c3-46b9-800e-860a677a4b90/download-manager","title":"WordPress Download Manager <= 2.9.45 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"f52aede5-21c3-46b9-800e-860a677a4b90"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f52aede5-21c3-46b9-800e-860a677a4b90?source=api-prod","affectedVersions":"<=2.9.45","severity":"high"},{"advisoryId":"WPSECADV/WF/f9611732-67aa-4940-8df1-c0ed7baad985/download-manager","title":"Download Manager <= 3.2.49 - IP Blocking Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9611732-67aa-4940-8df1-c0ed7baad985"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9611732-67aa-4940-8df1-c0ed7baad985?source=api-prod","cve":"CVE-2022-2362","affectedVersions":"<=3.2.49","severity":"medium"},{"advisoryId":"WPSECADV/WF/feb056b0-5ea0-4257-8d58-0e29b3c304bd/download-manager","title":"Download Manager <= 3.2.38 - Unauthenticated Brute Force of File Master Key\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"feb056b0-5ea0-4257-8d58-0e29b3c304bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/feb056b0-5ea0-4257-8d58-0e29b3c304bd?source=api-prod","cve":"CVE-2022-0828","affectedVersions":"<3.2.39","severity":"high"},{"advisoryId":"WPSECADV/WF/feb915f4-66d6-4f46-949c-5354e414319b/download-manager","title":"Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-18 16:22:49","sources":[{"name":"Wordfence","remoteId":"feb915f4-66d6-4f46-949c-5354e414319b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/feb915f4-66d6-4f46-949c-5354e414319b?source=api-prod","cve":"CVE-2024-11768","affectedVersions":"<=3.3.03","severity":"medium"},{"advisoryId":"WPSECADV/WF/ffa54d4e-a633-48a4-83c0-33b7cbd2229a/download-manager","title":"Download Manager <= 3.3.24 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"ffa54d4e-a633-48a4-83c0-33b7cbd2229a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ffa54d4e-a633-48a4-83c0-33b7cbd2229a?source=api-prod","cve":"CVE-2025-60093","affectedVersions":"<=3.3.24","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_647367766f2d616c6c2d696e2d6f6e652d666f722d7770811c9dc5_gen.json b/internal/data/assets/plugin_647367766f2d616c6c2d696e2d6f6e652d666f722d7770811c9dc5_gen.json
index 00465bb0..50088d35 100644
--- a/internal/data/assets/plugin_647367766f2d616c6c2d696e2d6f6e652d666f722d7770811c9dc5_gen.json
+++ b/internal/data/assets/plugin_647367766f2d616c6c2d696e2d6f6e652d666f722d7770811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/05fe1929-9e39-4b2f-a3fc-e692267d731b/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"05fe1929-9e39-4b2f-a3fc-e692267d731b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05fe1929-9e39-4b2f-a3fc-e692267d731b?source=api-prod","cve":"CVE-2022-2628","affectedVersions":"<=4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2efe885d-7e17-4057-abde-37482047facb/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.6 - Cross-Site Request Forgery to Account Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-03 20:24:36","sources":[{"name":"Wordfence","remoteId":"2efe885d-7e17-4057-abde-37482047facb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2efe885d-7e17-4057-abde-37482047facb?source=api-prod","cve":"CVE-2024-13356","affectedVersions":"<=4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/30f3a208-ffe0-4d87-9c76-91451f7a1591/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"30f3a208-ffe0-4d87-9c76-91451f7a1591"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/30f3a208-ffe0-4d87-9c76-91451f7a1591?source=api-prod","cve":"CVE-2024-43964","affectedVersions":"<=4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/6d8a5268-03a2-48c6-9c59-840a11e7a34f/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-08 20:46:28","sources":[{"name":"Wordfence","remoteId":"6d8a5268-03a2-48c6-9c59-840a11e7a34f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d8a5268-03a2-48c6-9c59-840a11e7a34f?source=api-prod","cve":"CVE-2026-4298","affectedVersions":"<=4.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/ac7aca5f-657d-45a9-bb10-f3e75dc3eeba/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 3.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac7aca5f-657d-45a9-bb10-f3e75dc3eeba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac7aca5f-657d-45a9-bb10-f3e75dc3eeba?source=api-prod","cve":"CVE-2021-24294","affectedVersions":"<=3.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/f31a42c1-afb7-4a44-b4e8-f68c622bc43e/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.3 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"f31a42c1-afb7-4a44-b4e8-f68c622bc43e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f31a42c1-afb7-4a44-b4e8-f68c622bc43e?source=api-prod","cve":"CVE-2024-27967","affectedVersions":"<=4.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/05fe1929-9e39-4b2f-a3fc-e692267d731b/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"05fe1929-9e39-4b2f-a3fc-e692267d731b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05fe1929-9e39-4b2f-a3fc-e692267d731b?source=api-prod","cve":"CVE-2022-2628","affectedVersions":"<=4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/219b29a6-6148-4cc9-960c-b28f2d90236e/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 14:46:16","sources":[{"name":"Wordfence","remoteId":"219b29a6-6148-4cc9-960c-b28f2d90236e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/219b29a6-6148-4cc9-960c-b28f2d90236e?source=api-prod","cve":"CVE-2026-96741","affectedVersions":"<=5.0","severity":"high"},{"advisoryId":"WPSECADV/WF/2efe885d-7e17-4057-abde-37482047facb/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.6 - Cross-Site Request Forgery to Account Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-03 20:24:36","sources":[{"name":"Wordfence","remoteId":"2efe885d-7e17-4057-abde-37482047facb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2efe885d-7e17-4057-abde-37482047facb?source=api-prod","cve":"CVE-2024-13356","affectedVersions":"<=4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/30f3a208-ffe0-4d87-9c76-91451f7a1591/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"30f3a208-ffe0-4d87-9c76-91451f7a1591"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/30f3a208-ffe0-4d87-9c76-91451f7a1591?source=api-prod","cve":"CVE-2024-43964","affectedVersions":"<=4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/6d8a5268-03a2-48c6-9c59-840a11e7a34f/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-08 20:46:28","sources":[{"name":"Wordfence","remoteId":"6d8a5268-03a2-48c6-9c59-840a11e7a34f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d8a5268-03a2-48c6-9c59-840a11e7a34f?source=api-prod","cve":"CVE-2026-4298","affectedVersions":"<=4.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/ac7aca5f-657d-45a9-bb10-f3e75dc3eeba/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 3.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac7aca5f-657d-45a9-bb10-f3e75dc3eeba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac7aca5f-657d-45a9-bb10-f3e75dc3eeba?source=api-prod","cve":"CVE-2021-24294","affectedVersions":"<=3.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/f31a42c1-afb7-4a44-b4e8-f68c622bc43e/dsgvo-all-in-one-for-wp","title":"DSGVO All in one for WP <= 4.3 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"f31a42c1-afb7-4a44-b4e8-f68c622bc43e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f31a42c1-afb7-4a44-b4e8-f68c622bc43e?source=api-prod","cve":"CVE-2024-27967","affectedVersions":"<=4.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6475706c696361746f72811c9dc5_gen.json b/internal/data/assets/plugin_6475706c696361746f72811c9dc5_gen.json
index 62af0639..a2c3bf75 100644
--- a/internal/data/assets/plugin_6475706c696361746f72811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6475706c696361746f72811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/010ce1c3-dd07-4ed6-8908-0909c0842be8/duplicator","title":"Duplicator <= 1.2.32 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-03-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"010ce1c3-dd07-4ed6-8908-0909c0842be8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/010ce1c3-dd07-4ed6-8908-0909c0842be8?source=api-prod","cve":"CVE-2018-7543","affectedVersions":"<=1.2.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/06905738-7e1c-4d1a-97d2-f68f978ad8ed/duplicator","title":"Duplicator <= 0.5.26 - Authenticated (Admin+) Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"06905738-7e1c-4d1a-97d2-f68f978ad8ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06905738-7e1c-4d1a-97d2-f68f978ad8ed?source=api-prod","affectedVersions":"<0.5.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/1b69831e-19ab-4812-b657-dc4febe15077/duplicator","title":"Duplicator – WordPress Migration Plugin <= 0.4.4 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"1b69831e-19ab-4812-b657-dc4febe15077"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1b69831e-19ab-4812-b657-dc4febe15077?source=api-prod","cve":"CVE-2013-4625","affectedVersions":"<=0.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/3762cd92-604a-4dac-a09e-6b4a08c4d804/duplicator","title":"Duplicator <= 0.5.14 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"3762cd92-604a-4dac-a09e-6b4a08c4d804"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3762cd92-604a-4dac-a09e-6b4a08c4d804?source=api-prod","affectedVersions":"<=0.5.14","severity":"high"},{"advisoryId":"WPSECADV/WF/3f753961-3eeb-402d-876f-4a4dea41a96a/duplicator","title":"Duplicator < 1.1.4 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f753961-3eeb-402d-876f-4a4dea41a96a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f753961-3eeb-402d-876f-4a4dea41a96a?source=api-prod","affectedVersions":"<1.1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/416da5d4-3d47-443b-a82c-c059c38f5218/duplicator","title":"Duplicator <= 1.5.7 - Cross-Site Request Forgery via views/tools/diagnostics/information.php\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"416da5d4-3d47-443b-a82c-c059c38f5218"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/416da5d4-3d47-443b-a82c-c059c38f5218?source=api-prod","cve":"CVE-2023-51681","affectedVersions":"<=1.5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/767fb03a-58a3-464b-98b2-5378cfec09ae/duplicator","title":"Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 13:29:13","sources":[{"name":"Wordfence","remoteId":"767fb03a-58a3-464b-98b2-5378cfec09ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/767fb03a-58a3-464b-98b2-5378cfec09ae?source=api-prod","cve":"CVE-2026-82814","affectedVersions":"<=1.5.17","severity":"high"},{"advisoryId":"WPSECADV/WF/843ef712-6ca6-44d2-825f-7ce9a82d74e6/duplicator","title":"Duplicator – WordPress Migration Plugin <= 1.4.7 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"843ef712-6ca6-44d2-825f-7ce9a82d74e6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/843ef712-6ca6-44d2-825f-7ce9a82d74e6?source=api-prod","cve":"CVE-2022-2552","affectedVersions":"<=1.4.7","severity":"high"},{"advisoryId":"WPSECADV/WF/9bdf7b10-6a3e-47aa-86ae-479b4cd29c49/duplicator","title":"Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"9bdf7b10-6a3e-47aa-86ae-479b4cd29c49"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9bdf7b10-6a3e-47aa-86ae-479b4cd29c49?source=api-prod","cve":"CVE-2017-16815","affectedVersions":"<=1.2.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/aff754d6-8624-4068-8e31-738f6041d3a6/duplicator","title":"Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"aff754d6-8624-4068-8e31-738f6041d3a6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aff754d6-8624-4068-8e31-738f6041d3a6?source=api-prod","cve":"CVE-2018-17207","affectedVersions":"<=1.2.40","severity":"critical"},{"advisoryId":"WPSECADV/WF/b3f7a88c-a09b-46ac-b345-139c2d20a3d2/duplicator","title":"Duplicator <= 1.5.7 AND Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3f7a88c-a09b-46ac-b345-139c2d20a3d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3f7a88c-a09b-46ac-b345-139c2d20a3d2?source=api-prod","cve":"CVE-2023-6114","affectedVersions":"<=1.5.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/b5136409-d843-4774-afe7-211a23f65da9/duplicator","title":"Duplicator – WordPress Migration Plugin <= 1.4.7 - Unauthenticated Backup Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5136409-d843-4774-afe7-211a23f65da9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5136409-d843-4774-afe7-211a23f65da9?source=api-prod","cve":"CVE-2022-2551","affectedVersions":"<=1.4.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/b85b44ed-94cd-4d85-bcc5-60b50cdb94f1/duplicator","title":"Duplicator < 0.5.10 - Arbitrary Backup Creation and Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"b85b44ed-94cd-4d85-bcc5-60b50cdb94f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b85b44ed-94cd-4d85-bcc5-60b50cdb94f1?source=api-prod","cve":"CVE-2014-9262","affectedVersions":"<0.5.10","severity":"high"},{"advisoryId":"WPSECADV/WF/c5757abd-33dc-4751-bc55-afd944ff2341/duplicator","title":"Duplicator < 1.3.0 - Unauthenticated Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5757abd-33dc-4751-bc55-afd944ff2341"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5757abd-33dc-4751-bc55-afd944ff2341?source=api-prod","cve":"CVE-2018-25095","affectedVersions":"<1.3.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/d47d582d-7c90-4f49-aee1-03a8775b850d/duplicator","title":"Duplicator <= 1.5.9 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-10 13:42:05","sources":[{"name":"Wordfence","remoteId":"d47d582d-7c90-4f49-aee1-03a8775b850d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d47d582d-7c90-4f49-aee1-03a8775b850d?source=api-prod","cve":"CVE-2024-6210","affectedVersions":"<=1.5.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/f9ae9aba-fa0e-4a3d-a970-e45216685cc0/duplicator","title":"Duplicator < 1.3.28 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9ae9aba-fa0e-4a3d-a970-e45216685cc0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9ae9aba-fa0e-4a3d-a970-e45216685cc0?source=api-prod","cve":"CVE-2020-11738","affectedVersions":"<1.3.28","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/010ce1c3-dd07-4ed6-8908-0909c0842be8/duplicator","title":"Duplicator <= 1.2.32 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-03-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"010ce1c3-dd07-4ed6-8908-0909c0842be8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/010ce1c3-dd07-4ed6-8908-0909c0842be8?source=api-prod","cve":"CVE-2018-7543","affectedVersions":"<=1.2.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/06905738-7e1c-4d1a-97d2-f68f978ad8ed/duplicator","title":"Duplicator <= 0.5.26 - Authenticated (Admin+) Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-08-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"06905738-7e1c-4d1a-97d2-f68f978ad8ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06905738-7e1c-4d1a-97d2-f68f978ad8ed?source=api-prod","affectedVersions":"<0.5.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/1b69831e-19ab-4812-b657-dc4febe15077/duplicator","title":"Duplicator – WordPress Migration Plugin <= 0.4.4 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"1b69831e-19ab-4812-b657-dc4febe15077"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1b69831e-19ab-4812-b657-dc4febe15077?source=api-prod","cve":"CVE-2013-4625","affectedVersions":"<=0.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/3762cd92-604a-4dac-a09e-6b4a08c4d804/duplicator","title":"Duplicator <= 0.5.14 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"3762cd92-604a-4dac-a09e-6b4a08c4d804"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3762cd92-604a-4dac-a09e-6b4a08c4d804?source=api-prod","affectedVersions":"<=0.5.14","severity":"high"},{"advisoryId":"WPSECADV/WF/3f753961-3eeb-402d-876f-4a4dea41a96a/duplicator","title":"Duplicator < 1.1.4 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f753961-3eeb-402d-876f-4a4dea41a96a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f753961-3eeb-402d-876f-4a4dea41a96a?source=api-prod","affectedVersions":"<1.1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/416da5d4-3d47-443b-a82c-c059c38f5218/duplicator","title":"Duplicator <= 1.5.7 - Cross-Site Request Forgery via views/tools/diagnostics/information.php\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"416da5d4-3d47-443b-a82c-c059c38f5218"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/416da5d4-3d47-443b-a82c-c059c38f5218?source=api-prod","cve":"CVE-2023-51681","affectedVersions":"<=1.5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/767fb03a-58a3-464b-98b2-5378cfec09ae/duplicator","title":"Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 13:29:13","sources":[{"name":"Wordfence","remoteId":"767fb03a-58a3-464b-98b2-5378cfec09ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/767fb03a-58a3-464b-98b2-5378cfec09ae?source=api-prod","cve":"CVE-2026-82814","affectedVersions":"<=1.5.17","severity":"high"},{"advisoryId":"WPSECADV/WF/7c0a75f2-be2e-4764-8a1d-c916c8132b06/duplicator","title":"Duplicator <= 1.5.17 - Authenticated (Multisite Subsite Admin+) Arbitrary Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"7c0a75f2-be2e-4764-8a1d-c916c8132b06"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7c0a75f2-be2e-4764-8a1d-c916c8132b06?source=api-prod","cve":"CVE-2026-115251","affectedVersions":"<=1.5.17","severity":"high"},{"advisoryId":"WPSECADV/WF/843ef712-6ca6-44d2-825f-7ce9a82d74e6/duplicator","title":"Duplicator – WordPress Migration Plugin <= 1.4.7 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"843ef712-6ca6-44d2-825f-7ce9a82d74e6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/843ef712-6ca6-44d2-825f-7ce9a82d74e6?source=api-prod","cve":"CVE-2022-2552","affectedVersions":"<=1.4.7","severity":"high"},{"advisoryId":"WPSECADV/WF/9bdf7b10-6a3e-47aa-86ae-479b4cd29c49/duplicator","title":"Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"9bdf7b10-6a3e-47aa-86ae-479b4cd29c49"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9bdf7b10-6a3e-47aa-86ae-479b4cd29c49?source=api-prod","cve":"CVE-2017-16815","affectedVersions":"<=1.2.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/aff754d6-8624-4068-8e31-738f6041d3a6/duplicator","title":"Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"aff754d6-8624-4068-8e31-738f6041d3a6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aff754d6-8624-4068-8e31-738f6041d3a6?source=api-prod","cve":"CVE-2018-17207","affectedVersions":"<=1.2.40","severity":"critical"},{"advisoryId":"WPSECADV/WF/b3f7a88c-a09b-46ac-b345-139c2d20a3d2/duplicator","title":"Duplicator <= 1.5.7 AND Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3f7a88c-a09b-46ac-b345-139c2d20a3d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3f7a88c-a09b-46ac-b345-139c2d20a3d2?source=api-prod","cve":"CVE-2023-6114","affectedVersions":"<=1.5.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/b5136409-d843-4774-afe7-211a23f65da9/duplicator","title":"Duplicator – WordPress Migration Plugin <= 1.4.7 - Unauthenticated Backup Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5136409-d843-4774-afe7-211a23f65da9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5136409-d843-4774-afe7-211a23f65da9?source=api-prod","cve":"CVE-2022-2551","affectedVersions":"<=1.4.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/b85b44ed-94cd-4d85-bcc5-60b50cdb94f1/duplicator","title":"Duplicator < 0.5.10 - Arbitrary Backup Creation and Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"b85b44ed-94cd-4d85-bcc5-60b50cdb94f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b85b44ed-94cd-4d85-bcc5-60b50cdb94f1?source=api-prod","cve":"CVE-2014-9262","affectedVersions":"<0.5.10","severity":"high"},{"advisoryId":"WPSECADV/WF/c5757abd-33dc-4751-bc55-afd944ff2341/duplicator","title":"Duplicator < 1.3.0 - Unauthenticated Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5757abd-33dc-4751-bc55-afd944ff2341"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5757abd-33dc-4751-bc55-afd944ff2341?source=api-prod","cve":"CVE-2018-25095","affectedVersions":"<1.3.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/d47d582d-7c90-4f49-aee1-03a8775b850d/duplicator","title":"Duplicator <= 1.5.9 - Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-10 13:42:05","sources":[{"name":"Wordfence","remoteId":"d47d582d-7c90-4f49-aee1-03a8775b850d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d47d582d-7c90-4f49-aee1-03a8775b850d?source=api-prod","cve":"CVE-2024-6210","affectedVersions":"<=1.5.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/f9ae9aba-fa0e-4a3d-a970-e45216685cc0/duplicator","title":"Duplicator < 1.3.28 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9ae9aba-fa0e-4a3d-a970-e45216685cc0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9ae9aba-fa0e-4a3d-a970-e45216685cc0?source=api-prod","cve":"CVE-2020-11738","affectedVersions":"<1.3.28","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_656173792d6469676974616c2d646f776e6c6f616473811c9dc5_gen.json b/internal/data/assets/plugin_656173792d6469676974616c2d646f776e6c6f616473811c9dc5_gen.json
index 283317f4..dd34149e 100644
--- a/internal/data/assets/plugin_656173792d6469676974616c2d646f776e6c6f616473811c9dc5_gen.json
+++ b/internal/data/assets/plugin_656173792d6469676974616c2d646f776e6c6f616473811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0459a6bd-334d-43b7-b289-271108564a53/easy-digital-downloads","title":"Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"0459a6bd-334d-43b7-b289-271108564a53"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0459a6bd-334d-43b7-b289-271108564a53?source=api-prod","cve":"CVE-2024-6691","affectedVersions":"<=3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0837ba20-4b47-4cc8-9eb3-322289513d79/easy-digital-downloads","title":"Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"0837ba20-4b47-4cc8-9eb3-322289513d79"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0837ba20-4b47-4cc8-9eb3-322289513d79?source=api-prod","cve":"CVE-2024-2302","affectedVersions":"<=3.2.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/0a6b87a8-2ebf-4db6-bf09-e9642708b2aa/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.10.2 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a6b87a8-2ebf-4db6-bf09-e9642708b2aa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a6b87a8-2ebf-4db6-bf09-e9642708b2aa?source=api-prod","affectedVersions":"<=2.10.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0bdf8765-1774-4d05-892a-055a06104e87/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 16:18:22","sources":[{"name":"Wordfence","remoteId":"0bdf8765-1774-4d05-892a-055a06104e87"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0bdf8765-1774-4d05-892a-055a06104e87?source=api-prod","cve":"CVE-2026-42638","affectedVersions":"<=3.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/14ad420b-df09-48de-8e36-d8edf0647837/easy-digital-downloads","title":"Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"14ad420b-df09-48de-8e36-d8edf0647837"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/14ad420b-df09-48de-8e36-d8edf0647837?source=api-prod","cve":"CVE-2022-0707","affectedVersions":"<2.11.6","severity":"high"},{"advisoryId":"WPSECADV/WF/1ec207cd-cae5-4950-bbc8-d28f108b4ae7/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ec207cd-cae5-4950-bbc8-d28f108b4ae7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ec207cd-cae5-4950-bbc8-d28f108b4ae7?source=api-prod","cve":"CVE-2024-0659","affectedVersions":"<=3.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/20fdbe6b-45a8-41f4-8dde-35a0f9ea04a1/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.12 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"20fdbe6b-45a8-41f4-8dde-35a0f9ea04a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20fdbe6b-45a8-41f4-8dde-35a0f9ea04a1?source=api-prod","cve":"CVE-2024-5057","affectedVersions":"<=3.2.12","severity":"critical"},{"advisoryId":"WPSECADV/WF/301d273e-5cd2-49b8-b2ce-b30731ab4550/easy-digital-downloads","title":"Easy Digital Downloads <= 2.11.5 - Admin+ Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"301d273e-5cd2-49b8-b2ce-b30731ab4550"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/301d273e-5cd2-49b8-b2ce-b30731ab4550?source=api-prod","cve":"CVE-2022-0706","affectedVersions":"<2.11.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/3c0fb43c-f576-412e-a144-4725356ed9a0/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-30 17:50:22","sources":[{"name":"Wordfence","remoteId":"3c0fb43c-f576-412e-a144-4725356ed9a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3c0fb43c-f576-412e-a144-4725356ed9a0?source=api-prod","cve":"CVE-2025-14783","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/3ee538dd-466b-471d-8055-af32ecfdfc77/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.6.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ee538dd-466b-471d-8055-af32ecfdfc77"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ee538dd-466b-471d-8055-af32ecfdfc77?source=api-prod","cve":"CVE-2026-39503","affectedVersions":"<=3.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/44777529-660f-4038-bbee-566ca3a8d24e/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.6 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"44777529-660f-4038-bbee-566ca3a8d24e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44777529-660f-4038-bbee-566ca3a8d24e?source=api-prod","cve":"CVE-2024-31293","affectedVersions":"<=3.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/456f038c-85a4-426e-b9e0-3acf91f9b93a/easy-digital-downloads","title":"Easy Digital Downloads (Various Versions) - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"456f038c-85a4-426e-b9e0-3acf91f9b93a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/456f038c-85a4-426e-b9e0-3acf91f9b93a?source=api-prod","cve":"CVE-2015-9512","affectedVersions":">=1.8,<=1.8.6|>=1.9,<=1.9.9|>=2.0,<=2.0.4|>=2.1,<=2.1.10|>=2.2,<=2.2.8|>=2.3,<=2.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/4c63154e-9413-47ea-a740-441618266adf/easy-digital-downloads","title":"Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-05 16:27:52","sources":[{"name":"Wordfence","remoteId":"4c63154e-9413-47ea-a740-441618266adf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c63154e-9413-47ea-a740-441618266adf?source=api-prod","cve":"CVE-2025-11271","affectedVersions":"<=3.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/508b6466-2786-4d6b-9ab2-772050af4803/easy-digital-downloads","title":"Easy Digital Downloads < 3.1.0.4 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"508b6466-2786-4d6b-9ab2-772050af4803"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/508b6466-2786-4d6b-9ab2-772050af4803?source=api-prod","cve":"CVE-2023-23489","affectedVersions":"<=3.1.0.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/56a362f3-dc4e-454d-9d94-9f4cb540d4b5/easy-digital-downloads","title":"Easy Digital Downloads <= 2.11.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-21 16:05:00","sources":[{"name":"Wordfence","remoteId":"56a362f3-dc4e-454d-9d94-9f4cb540d4b5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/56a362f3-dc4e-454d-9d94-9f4cb540d4b5?source=api-prod","cve":"CVE-2021-39354","affectedVersions":"<=2.11.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b0c8edd-b392-4d23-bde3-0521eeedc5a0/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-28 13:30:14","sources":[{"name":"Wordfence","remoteId":"5b0c8edd-b392-4d23-bde3-0521eeedc5a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b0c8edd-b392-4d23-bde3-0521eeedc5a0?source=api-prod","cve":"CVE-2026-12476","affectedVersions":"<=3.6.9","severity":"high"},{"advisoryId":"WPSECADV/WF/636c9d92-ee62-499d-8d73-33cd63bb5af8/easy-digital-downloads","title":"Easy Digital Downloads <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-19 23:05:32","sources":[{"name":"Wordfence","remoteId":"636c9d92-ee62-499d-8d73-33cd63bb5af8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/636c9d92-ee62-499d-8d73-33cd63bb5af8?source=api-prod","cve":"CVE-2025-8102","affectedVersions":"<=3.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/644c8702-08ad-4048-ae91-041f1771f1dc/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"644c8702-08ad-4048-ae91-041f1771f1dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/644c8702-08ad-4048-ae91-041f1771f1dc?source=api-prod","cve":"CVE-2022-2439","affectedVersions":"<=3.3.3","severity":"high"},{"advisoryId":"WPSECADV/WF/670e92d6-4136-48f1-88d1-69a9fa772a65/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.11.2 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"670e92d6-4136-48f1-88d1-69a9fa772a65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/670e92d6-4136-48f1-88d1-69a9fa772a65?source=api-prod","affectedVersions":"<=2.11.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6c6a4c5f-7a02-4c53-a0ba-a2c7f592a3a8/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.3.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"6c6a4c5f-7a02-4c53-a0ba-a2c7f592a3a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6c6a4c5f-7a02-4c53-a0ba-a2c7f592a3a8?source=api-prod","cve":"CVE-2015-9324","affectedVersions":"<=2.3.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/6d9eb54f-4ff2-49d6-94d7-73aa75edb97b/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.11 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"6d9eb54f-4ff2-49d6-94d7-73aa75edb97b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d9eb54f-4ff2-49d6-94d7-73aa75edb97b?source=api-prod","cve":"CVE-2024-31113","affectedVersions":"<=3.2.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fc83471-60eb-4f8c-9525-9eedbe191c0b/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy < 3.7.1 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fc83471-60eb-4f8c-9525-9eedbe191c0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fc83471-60eb-4f8c-9525-9eedbe191c0b?source=api-prod","cve":"CVE-2026-105194","affectedVersions":"<3.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/82259b54-0313-41a2-ace4-41e583b93e8a/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.9.15 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-06-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"82259b54-0313-41a2-ace4-41e583b93e8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/82259b54-0313-41a2-ace4-41e583b93e8a?source=api-prod","cve":"CVE-2019-15116","affectedVersions":"<2.9.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/88f8c67b-ec7e-491e-b5af-c08546eac7ca/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.0 - Authenticated (Shop Manager+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-23 09:49:00","sources":[{"name":"Wordfence","remoteId":"88f8c67b-ec7e-491e-b5af-c08546eac7ca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88f8c67b-ec7e-491e-b5af-c08546eac7ca?source=api-prod","cve":"CVE-2026-95522","affectedVersions":"<=3.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d745937-4b0a-480a-9771-8af3288ee98f/easy-digital-downloads","title":"Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d745937-4b0a-480a-9771-8af3288ee98f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d745937-4b0a-480a-9771-8af3288ee98f?source=api-prod","cve":"CVE-2024-13517","affectedVersions":"<=3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/90a97e6e-629b-4640-b930-ca06f79276e2/easy-digital-downloads","title":"Easy Digital Downloads <= 3.7.0 - Unauthenticated Unauthorized Account Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"90a97e6e-629b-4640-b930-ca06f79276e2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/90a97e6e-629b-4640-b930-ca06f79276e2?source=api-prod","cve":"CVE-2026-105190","affectedVersions":"<=3.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/95c5bfc5-53b3-482f-856b-db6b6cac93a2/easy-digital-downloads","title":"Easy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-28 19:44:57","sources":[{"name":"Wordfence","remoteId":"95c5bfc5-53b3-482f-856b-db6b6cac93a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95c5bfc5-53b3-482f-856b-db6b6cac93a2?source=api-prod","cve":"CVE-2025-4670","affectedVersions":"<=3.3.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9a812aad-d769-4c28-8035-471bd3a50faa/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.9 - Authenticated (Admin) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"9a812aad-d769-4c28-8035-471bd3a50faa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a812aad-d769-4c28-8035-471bd3a50faa?source=api-prod","cve":"CVE-2026-66476","affectedVersions":"<=3.6.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9e0e3b81-55fe-46b2-bae1-d7321d74c485/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"9e0e3b81-55fe-46b2-bae1-d7321d74c485"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9e0e3b81-55fe-46b2-bae1-d7321d74c485?source=api-prod","cve":"CVE-2025-2252","affectedVersions":"<=3.3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a0aa2a10-da05-41e4-bbfa-938341919b5d/easy-digital-downloads","title":"Easy Digital Downloads <= 2.10.3 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-05-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"a0aa2a10-da05-41e4-bbfa-938341919b5d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a0aa2a10-da05-41e4-bbfa-938341919b5d?source=api-prod","affectedVersions":"<=2.10.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4cd5c42-bba2-4900-b450-a575c0007402/easy-digital-downloads","title":"Easy Digital Downloads <= 2.5.7 - PHP Object Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4cd5c42-bba2-4900-b450-a575c0007402"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4cd5c42-bba2-4900-b450-a575c0007402?source=api-prod","affectedVersions":"<=2.5.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/b5226241-dbf4-42e5-b9f4-77da125fa810/easy-digital-downloads","title":"Easy Digital Downloads <= 2.10.2 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5226241-dbf4-42e5-b9f4-77da125fa810"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5226241-dbf4-42e5-b9f4-77da125fa810?source=api-prod","affectedVersions":"<2.10.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/be60027e-9d6a-4740-b20c-6be3e115d9fe/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.3.6 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"be60027e-9d6a-4740-b20c-6be3e115d9fe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be60027e-9d6a-4740-b20c-6be3e115d9fe?source=api-prod","cve":"CVE-2015-9505","affectedVersions":"<1.8.7|>=1.9,<1.9.10|>=2.0,<2.0.5|>=2.1,<2.1.11|>=2.2,<2.2.9|>=2.3,<2.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c0d1145d-f888-4217-963c-c058a6a56f74/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.6.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"c0d1145d-f888-4217-963c-c058a6a56f74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c0d1145d-f888-4217-963c-c058a6a56f74?source=api-prod","cve":"CVE-2026-59524","affectedVersions":"<=3.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c1e563e1-5381-4353-aa09-b09971b830c8/easy-digital-downloads","title":"Easy Digital Downloads <= 3.0.1 - PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"c1e563e1-5381-4353-aa09-b09971b830c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c1e563e1-5381-4353-aa09-b09971b830c8?source=api-prod","cve":"CVE-2022-33900","affectedVersions":"<=3.0.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/ca0bc327-1a64-493b-8813-8bb7b71635f0/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.11 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"ca0bc327-1a64-493b-8813-8bb7b71635f0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca0bc327-1a64-493b-8813-8bb7b71635f0?source=api-prod","cve":"CVE-2024-32100","affectedVersions":"<=3.2.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/d19a9c96-918f-4f19-82a9-badd5765cea3/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"d19a9c96-918f-4f19-82a9-badd5765cea3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d19a9c96-918f-4f19-82a9-badd5765cea3?source=api-prod","cve":"CVE-2023-51684","affectedVersions":"<=3.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3f4de75-abf5-46e8-854d-be91ed74a5f3/easy-digital-downloads","title":"Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3f4de75-abf5-46e8-854d-be91ed74a5f3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3f4de75-abf5-46e8-854d-be91ed74a5f3?source=api-prod","cve":"CVE-2024-9654","affectedVersions":">=3.1,<=3.3.4","severity":"low"},{"advisoryId":"WPSECADV/WF/da94a7dc-f666-44fd-9f76-e610cbd2b610/easy-digital-downloads","title":"Easy Digital Downloads <= 3.1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"da94a7dc-f666-44fd-9f76-e610cbd2b610"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da94a7dc-f666-44fd-9f76-e610cbd2b610?source=api-prod","cve":"CVE-2023-0380","affectedVersions":"<=3.1.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/dbce48b2-aa7c-4c92-8df8-ee3a17336e97/easy-digital-downloads","title":"Easy Digital Downloads <= 3.1.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"dbce48b2-aa7c-4c92-8df8-ee3a17336e97"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dbce48b2-aa7c-4c92-8df8-ee3a17336e97?source=api-prod","cve":"CVE-2023-40005","affectedVersions":"<=3.1.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/e375f761-459c-4cad-823b-2a94ac901410/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.7 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-27 17:18:24","sources":[{"name":"Wordfence","remoteId":"e375f761-459c-4cad-823b-2a94ac901410"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e375f761-459c-4cad-823b-2a94ac901410?source=api-prod","cve":"CVE-2026-7533","affectedVersions":"<=3.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3adcb85-efc5-429c-8a06-9bfb472d668f/easy-digital-downloads","title":"Easy Digital Downloads <= 3.1.1.4.2 - Cross-Site Request Forgery via edd_trigger_upgrades\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3adcb85-efc5-429c-8a06-9bfb472d668f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3adcb85-efc5-429c-8a06-9bfb472d668f?source=api-prod","affectedVersions":"<3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e54d5ab2-40ba-4ad8-9a77-44aba37f0283/easy-digital-downloads","title":"Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e54d5ab2-40ba-4ad8-9a77-44aba37f0283"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e54d5ab2-40ba-4ad8-9a77-44aba37f0283?source=api-prod","cve":"CVE-2024-6692","affectedVersions":"<=3.3.2","severity":"low"},{"advisoryId":"WPSECADV/WF/ea99795f-45fa-4d4c-a6bd-2197b58efcb2/easy-digital-downloads","title":"Easy Digital Downloads <= 2.11.7 - Cross-Site Request Forgery to Arbitrary Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea99795f-45fa-4d4c-a6bd-2197b58efcb2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea99795f-45fa-4d4c-a6bd-2197b58efcb2?source=api-prod","cve":"CVE-2022-2387","affectedVersions":"<=2.11.7","severity":"high"},{"advisoryId":"WPSECADV/WF/ec065da7-b8aa-414d-9673-5caf87ad45b5/easy-digital-downloads","title":"Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-20 21:27:52","sources":[{"name":"Wordfence","remoteId":"ec065da7-b8aa-414d-9673-5caf87ad45b5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec065da7-b8aa-414d-9673-5caf87ad45b5?source=api-prod","cve":"CVE-2024-12875","affectedVersions":"<=3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/eea7ddc4-b3fb-4bad-9acc-9d913ecb8e1b/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 16:46:10","sources":[{"name":"Wordfence","remoteId":"eea7ddc4-b3fb-4bad-9acc-9d913ecb8e1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eea7ddc4-b3fb-4bad-9acc-9d913ecb8e1b?source=api-prod","cve":"CVE-2026-14335","affectedVersions":"<=3.6.9","severity":"high"},{"advisoryId":"WPSECADV/WF/f57b8ed5-f7cf-451b-b6ee-346b6c92d60b/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.12 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"f57b8ed5-f7cf-451b-b6ee-346b6c92d60b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f57b8ed5-f7cf-451b-b6ee-346b6c92d60b?source=api-prod","cve":"CVE-2024-43162","affectedVersions":"<=3.2.12","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0459a6bd-334d-43b7-b289-271108564a53/easy-digital-downloads","title":"Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"0459a6bd-334d-43b7-b289-271108564a53"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0459a6bd-334d-43b7-b289-271108564a53?source=api-prod","cve":"CVE-2024-6691","affectedVersions":"<=3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0837ba20-4b47-4cc8-9eb3-322289513d79/easy-digital-downloads","title":"Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"0837ba20-4b47-4cc8-9eb3-322289513d79"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0837ba20-4b47-4cc8-9eb3-322289513d79?source=api-prod","cve":"CVE-2024-2302","affectedVersions":"<=3.2.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/0a6b87a8-2ebf-4db6-bf09-e9642708b2aa/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.10.2 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a6b87a8-2ebf-4db6-bf09-e9642708b2aa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a6b87a8-2ebf-4db6-bf09-e9642708b2aa?source=api-prod","affectedVersions":"<=2.10.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0bdf8765-1774-4d05-892a-055a06104e87/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 16:18:22","sources":[{"name":"Wordfence","remoteId":"0bdf8765-1774-4d05-892a-055a06104e87"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0bdf8765-1774-4d05-892a-055a06104e87?source=api-prod","cve":"CVE-2026-42638","affectedVersions":"<=3.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/14ad420b-df09-48de-8e36-d8edf0647837/easy-digital-downloads","title":"Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"14ad420b-df09-48de-8e36-d8edf0647837"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/14ad420b-df09-48de-8e36-d8edf0647837?source=api-prod","cve":"CVE-2022-0707","affectedVersions":"<2.11.6","severity":"high"},{"advisoryId":"WPSECADV/WF/1ec207cd-cae5-4950-bbc8-d28f108b4ae7/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ec207cd-cae5-4950-bbc8-d28f108b4ae7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ec207cd-cae5-4950-bbc8-d28f108b4ae7?source=api-prod","cve":"CVE-2024-0659","affectedVersions":"<=3.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/20fdbe6b-45a8-41f4-8dde-35a0f9ea04a1/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.12 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"20fdbe6b-45a8-41f4-8dde-35a0f9ea04a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20fdbe6b-45a8-41f4-8dde-35a0f9ea04a1?source=api-prod","cve":"CVE-2024-5057","affectedVersions":"<=3.2.12","severity":"critical"},{"advisoryId":"WPSECADV/WF/301d273e-5cd2-49b8-b2ce-b30731ab4550/easy-digital-downloads","title":"Easy Digital Downloads <= 2.11.5 - Admin+ Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"301d273e-5cd2-49b8-b2ce-b30731ab4550"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/301d273e-5cd2-49b8-b2ce-b30731ab4550?source=api-prod","cve":"CVE-2022-0706","affectedVersions":"<2.11.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/3c0fb43c-f576-412e-a144-4725356ed9a0/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-30 17:50:22","sources":[{"name":"Wordfence","remoteId":"3c0fb43c-f576-412e-a144-4725356ed9a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3c0fb43c-f576-412e-a144-4725356ed9a0?source=api-prod","cve":"CVE-2025-14783","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/3ee538dd-466b-471d-8055-af32ecfdfc77/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.6.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ee538dd-466b-471d-8055-af32ecfdfc77"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ee538dd-466b-471d-8055-af32ecfdfc77?source=api-prod","cve":"CVE-2026-39503","affectedVersions":"<=3.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/44777529-660f-4038-bbee-566ca3a8d24e/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.6 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"44777529-660f-4038-bbee-566ca3a8d24e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44777529-660f-4038-bbee-566ca3a8d24e?source=api-prod","cve":"CVE-2024-31293","affectedVersions":"<=3.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/456f038c-85a4-426e-b9e0-3acf91f9b93a/easy-digital-downloads","title":"Easy Digital Downloads (Various Versions) - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"456f038c-85a4-426e-b9e0-3acf91f9b93a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/456f038c-85a4-426e-b9e0-3acf91f9b93a?source=api-prod","cve":"CVE-2015-9512","affectedVersions":">=1.8,<=1.8.6|>=1.9,<=1.9.9|>=2.0,<=2.0.4|>=2.1,<=2.1.10|>=2.2,<=2.2.8|>=2.3,<=2.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/4c63154e-9413-47ea-a740-441618266adf/easy-digital-downloads","title":"Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-05 16:27:52","sources":[{"name":"Wordfence","remoteId":"4c63154e-9413-47ea-a740-441618266adf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c63154e-9413-47ea-a740-441618266adf?source=api-prod","cve":"CVE-2025-11271","affectedVersions":"<=3.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/508b6466-2786-4d6b-9ab2-772050af4803/easy-digital-downloads","title":"Easy Digital Downloads < 3.1.0.4 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"508b6466-2786-4d6b-9ab2-772050af4803"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/508b6466-2786-4d6b-9ab2-772050af4803?source=api-prod","cve":"CVE-2023-23489","affectedVersions":"<=3.1.0.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/56a362f3-dc4e-454d-9d94-9f4cb540d4b5/easy-digital-downloads","title":"Easy Digital Downloads <= 2.11.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-21 16:05:00","sources":[{"name":"Wordfence","remoteId":"56a362f3-dc4e-454d-9d94-9f4cb540d4b5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/56a362f3-dc4e-454d-9d94-9f4cb540d4b5?source=api-prod","cve":"CVE-2021-39354","affectedVersions":"<=2.11.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b0c8edd-b392-4d23-bde3-0521eeedc5a0/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-28 13:30:14","sources":[{"name":"Wordfence","remoteId":"5b0c8edd-b392-4d23-bde3-0521eeedc5a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b0c8edd-b392-4d23-bde3-0521eeedc5a0?source=api-prod","cve":"CVE-2026-12476","affectedVersions":"<=3.6.9","severity":"high"},{"advisoryId":"WPSECADV/WF/636c9d92-ee62-499d-8d73-33cd63bb5af8/easy-digital-downloads","title":"Easy Digital Downloads <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-19 23:05:32","sources":[{"name":"Wordfence","remoteId":"636c9d92-ee62-499d-8d73-33cd63bb5af8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/636c9d92-ee62-499d-8d73-33cd63bb5af8?source=api-prod","cve":"CVE-2025-8102","affectedVersions":"<=3.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/644c8702-08ad-4048-ae91-041f1771f1dc/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"644c8702-08ad-4048-ae91-041f1771f1dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/644c8702-08ad-4048-ae91-041f1771f1dc?source=api-prod","cve":"CVE-2022-2439","affectedVersions":"<=3.3.3","severity":"high"},{"advisoryId":"WPSECADV/WF/670e92d6-4136-48f1-88d1-69a9fa772a65/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.11.2 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"670e92d6-4136-48f1-88d1-69a9fa772a65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/670e92d6-4136-48f1-88d1-69a9fa772a65?source=api-prod","affectedVersions":"<=2.11.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6c6a4c5f-7a02-4c53-a0ba-a2c7f592a3a8/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.3.2 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"6c6a4c5f-7a02-4c53-a0ba-a2c7f592a3a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6c6a4c5f-7a02-4c53-a0ba-a2c7f592a3a8?source=api-prod","cve":"CVE-2015-9324","affectedVersions":"<=2.3.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/6d9eb54f-4ff2-49d6-94d7-73aa75edb97b/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.11 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"6d9eb54f-4ff2-49d6-94d7-73aa75edb97b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d9eb54f-4ff2-49d6-94d7-73aa75edb97b?source=api-prod","cve":"CVE-2024-31113","affectedVersions":"<=3.2.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fc83471-60eb-4f8c-9525-9eedbe191c0b/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy < 3.7.1 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fc83471-60eb-4f8c-9525-9eedbe191c0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fc83471-60eb-4f8c-9525-9eedbe191c0b?source=api-prod","cve":"CVE-2026-105194","affectedVersions":"<3.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/82259b54-0313-41a2-ace4-41e583b93e8a/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.9.15 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-06-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"82259b54-0313-41a2-ace4-41e583b93e8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/82259b54-0313-41a2-ace4-41e583b93e8a?source=api-prod","cve":"CVE-2019-15116","affectedVersions":"<2.9.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/88f8c67b-ec7e-491e-b5af-c08546eac7ca/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.0 - Authenticated (Shop Manager+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-23 09:49:00","sources":[{"name":"Wordfence","remoteId":"88f8c67b-ec7e-491e-b5af-c08546eac7ca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88f8c67b-ec7e-491e-b5af-c08546eac7ca?source=api-prod","cve":"CVE-2026-95522","affectedVersions":"<=3.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d745937-4b0a-480a-9771-8af3288ee98f/easy-digital-downloads","title":"Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d745937-4b0a-480a-9771-8af3288ee98f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d745937-4b0a-480a-9771-8af3288ee98f?source=api-prod","cve":"CVE-2024-13517","affectedVersions":"<=3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/90a97e6e-629b-4640-b930-ca06f79276e2/easy-digital-downloads","title":"Easy Digital Downloads <= 3.7.0 - Unauthenticated Unauthorized Account Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"90a97e6e-629b-4640-b930-ca06f79276e2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/90a97e6e-629b-4640-b930-ca06f79276e2?source=api-prod","cve":"CVE-2026-105190","affectedVersions":"<=3.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/95c5bfc5-53b3-482f-856b-db6b6cac93a2/easy-digital-downloads","title":"Easy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-28 19:44:57","sources":[{"name":"Wordfence","remoteId":"95c5bfc5-53b3-482f-856b-db6b6cac93a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95c5bfc5-53b3-482f-856b-db6b6cac93a2?source=api-prod","cve":"CVE-2025-4670","affectedVersions":"<=3.3.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9a812aad-d769-4c28-8035-471bd3a50faa/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.9 - Authenticated (Admin) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"9a812aad-d769-4c28-8035-471bd3a50faa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a812aad-d769-4c28-8035-471bd3a50faa?source=api-prod","cve":"CVE-2026-66476","affectedVersions":"<=3.6.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9e0e3b81-55fe-46b2-bae1-d7321d74c485/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"9e0e3b81-55fe-46b2-bae1-d7321d74c485"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9e0e3b81-55fe-46b2-bae1-d7321d74c485?source=api-prod","cve":"CVE-2025-2252","affectedVersions":"<=3.3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a0aa2a10-da05-41e4-bbfa-938341919b5d/easy-digital-downloads","title":"Easy Digital Downloads <= 2.10.3 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-05-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"a0aa2a10-da05-41e4-bbfa-938341919b5d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a0aa2a10-da05-41e4-bbfa-938341919b5d?source=api-prod","affectedVersions":"<=2.10.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4cd5c42-bba2-4900-b450-a575c0007402/easy-digital-downloads","title":"Easy Digital Downloads <= 2.5.7 - PHP Object Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4cd5c42-bba2-4900-b450-a575c0007402"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4cd5c42-bba2-4900-b450-a575c0007402?source=api-prod","affectedVersions":"<=2.5.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/b5226241-dbf4-42e5-b9f4-77da125fa810/easy-digital-downloads","title":"Easy Digital Downloads <= 2.10.2 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5226241-dbf4-42e5-b9f4-77da125fa810"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5226241-dbf4-42e5-b9f4-77da125fa810?source=api-prod","affectedVersions":"<2.10.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/be60027e-9d6a-4740-b20c-6be3e115d9fe/easy-digital-downloads","title":"Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.3.6 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"be60027e-9d6a-4740-b20c-6be3e115d9fe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be60027e-9d6a-4740-b20c-6be3e115d9fe?source=api-prod","cve":"CVE-2015-9505","affectedVersions":"<1.8.7|>=1.9,<1.9.10|>=2.0,<2.0.5|>=2.1,<2.1.11|>=2.2,<2.2.9|>=2.3,<2.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c0d1145d-f888-4217-963c-c058a6a56f74/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.6.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"c0d1145d-f888-4217-963c-c058a6a56f74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c0d1145d-f888-4217-963c-c058a6a56f74?source=api-prod","cve":"CVE-2026-59524","affectedVersions":"<=3.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c1e563e1-5381-4353-aa09-b09971b830c8/easy-digital-downloads","title":"Easy Digital Downloads <= 3.0.1 - PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"c1e563e1-5381-4353-aa09-b09971b830c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c1e563e1-5381-4353-aa09-b09971b830c8?source=api-prod","cve":"CVE-2022-33900","affectedVersions":"<=3.0.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/c7ca7848-f69f-41fd-b7b2-62f608e5ba2b/easy-digital-downloads","title":"Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.1 - Unauthenticated Discount Code Limit Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"c7ca7848-f69f-41fd-b7b2-62f608e5ba2b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c7ca7848-f69f-41fd-b7b2-62f608e5ba2b?source=api-prod","cve":"CVE-2026-116403","affectedVersions":"<=3.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ca0bc327-1a64-493b-8813-8bb7b71635f0/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.11 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"ca0bc327-1a64-493b-8813-8bb7b71635f0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca0bc327-1a64-493b-8813-8bb7b71635f0?source=api-prod","cve":"CVE-2024-32100","affectedVersions":"<=3.2.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/d19a9c96-918f-4f19-82a9-badd5765cea3/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"d19a9c96-918f-4f19-82a9-badd5765cea3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d19a9c96-918f-4f19-82a9-badd5765cea3?source=api-prod","cve":"CVE-2023-51684","affectedVersions":"<=3.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3f4de75-abf5-46e8-854d-be91ed74a5f3/easy-digital-downloads","title":"Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3f4de75-abf5-46e8-854d-be91ed74a5f3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3f4de75-abf5-46e8-854d-be91ed74a5f3?source=api-prod","cve":"CVE-2024-9654","affectedVersions":">=3.1,<=3.3.4","severity":"low"},{"advisoryId":"WPSECADV/WF/da94a7dc-f666-44fd-9f76-e610cbd2b610/easy-digital-downloads","title":"Easy Digital Downloads <= 3.1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"da94a7dc-f666-44fd-9f76-e610cbd2b610"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da94a7dc-f666-44fd-9f76-e610cbd2b610?source=api-prod","cve":"CVE-2023-0380","affectedVersions":"<=3.1.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/dbce48b2-aa7c-4c92-8df8-ee3a17336e97/easy-digital-downloads","title":"Easy Digital Downloads <= 3.1.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"dbce48b2-aa7c-4c92-8df8-ee3a17336e97"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dbce48b2-aa7c-4c92-8df8-ee3a17336e97?source=api-prod","cve":"CVE-2023-40005","affectedVersions":"<=3.1.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/e375f761-459c-4cad-823b-2a94ac901410/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.7 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-27 17:18:24","sources":[{"name":"Wordfence","remoteId":"e375f761-459c-4cad-823b-2a94ac901410"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e375f761-459c-4cad-823b-2a94ac901410?source=api-prod","cve":"CVE-2026-7533","affectedVersions":"<=3.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3adcb85-efc5-429c-8a06-9bfb472d668f/easy-digital-downloads","title":"Easy Digital Downloads <= 3.1.1.4.2 - Cross-Site Request Forgery via edd_trigger_upgrades\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3adcb85-efc5-429c-8a06-9bfb472d668f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3adcb85-efc5-429c-8a06-9bfb472d668f?source=api-prod","affectedVersions":"<3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e54d5ab2-40ba-4ad8-9a77-44aba37f0283/easy-digital-downloads","title":"Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e54d5ab2-40ba-4ad8-9a77-44aba37f0283"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e54d5ab2-40ba-4ad8-9a77-44aba37f0283?source=api-prod","cve":"CVE-2024-6692","affectedVersions":"<=3.3.2","severity":"low"},{"advisoryId":"WPSECADV/WF/ea99795f-45fa-4d4c-a6bd-2197b58efcb2/easy-digital-downloads","title":"Easy Digital Downloads <= 2.11.7 - Cross-Site Request Forgery to Arbitrary Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea99795f-45fa-4d4c-a6bd-2197b58efcb2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea99795f-45fa-4d4c-a6bd-2197b58efcb2?source=api-prod","cve":"CVE-2022-2387","affectedVersions":"<=2.11.7","severity":"high"},{"advisoryId":"WPSECADV/WF/ec065da7-b8aa-414d-9673-5caf87ad45b5/easy-digital-downloads","title":"Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-20 21:27:52","sources":[{"name":"Wordfence","remoteId":"ec065da7-b8aa-414d-9673-5caf87ad45b5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec065da7-b8aa-414d-9673-5caf87ad45b5?source=api-prod","cve":"CVE-2024-12875","affectedVersions":"<=3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/eea7ddc4-b3fb-4bad-9acc-9d913ecb8e1b/easy-digital-downloads","title":"Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 16:46:10","sources":[{"name":"Wordfence","remoteId":"eea7ddc4-b3fb-4bad-9acc-9d913ecb8e1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eea7ddc4-b3fb-4bad-9acc-9d913ecb8e1b?source=api-prod","cve":"CVE-2026-14335","affectedVersions":"<=3.6.9","severity":"high"},{"advisoryId":"WPSECADV/WF/f57b8ed5-f7cf-451b-b6ee-346b6c92d60b/easy-digital-downloads","title":"Easy Digital Downloads <= 3.2.12 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"f57b8ed5-f7cf-451b-b6ee-346b6c92d60b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f57b8ed5-f7cf-451b-b6ee-346b6c92d60b?source=api-prod","cve":"CVE-2024-43162","affectedVersions":"<=3.2.12","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6570656b656e2d616c6c2d6b75726972811c9dc5_gen.json b/internal/data/assets/plugin_6570656b656e2d616c6c2d6b75726972811c9dc5_gen.json
index 67fcefdc..9d197aef 100644
--- a/internal/data/assets/plugin_6570656b656e2d616c6c2d6b75726972811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6570656b656e2d616c6c2d6b75726972811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/7a2f1cc7-f3f6-4a69-8b15-dfa13b136334/epeken-all-kurir","title":"Epeken All Kurir <= 2.1.1 -  Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"7a2f1cc7-f3f6-4a69-8b15-dfa13b136334"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a2f1cc7-f3f6-4a69-8b15-dfa13b136334?source=api-prod","cve":"CVE-2025-32673","affectedVersions":"<=2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8a474b6a-9fde-4577-af84-d7a6c060ef56/epeken-all-kurir","title":"Epeken All Kurir <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a474b6a-9fde-4577-af84-d7a6c060ef56"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a474b6a-9fde-4577-af84-d7a6c060ef56?source=api-prod","cve":"CVE-2025-58212","affectedVersions":"<=2.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d169fa88-3f75-47a0-93df-dd3550b59278/epeken-all-kurir","title":"Epeken All Kurir for Woocommerce <= 2.1.2 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"d169fa88-3f75-47a0-93df-dd3550b59278"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d169fa88-3f75-47a0-93df-dd3550b59278?source=api-prod","cve":"CVE-2026-16739","affectedVersions":"<=2.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/fbb9b4c8-18b6-4215-a7ee-c5a49977aec7/epeken-all-kurir","title":"Epeken All Kurir <= 2.1.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"fbb9b4c8-18b6-4215-a7ee-c5a49977aec7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fbb9b4c8-18b6-4215-a7ee-c5a49977aec7?source=api-prod","cve":"CVE-2025-57906","affectedVersions":"<=2.1.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/7a2f1cc7-f3f6-4a69-8b15-dfa13b136334/epeken-all-kurir","title":"Epeken All Kurir <= 2.1.1 -  Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"7a2f1cc7-f3f6-4a69-8b15-dfa13b136334"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a2f1cc7-f3f6-4a69-8b15-dfa13b136334?source=api-prod","cve":"CVE-2025-32673","affectedVersions":"<=2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8a474b6a-9fde-4577-af84-d7a6c060ef56/epeken-all-kurir","title":"Epeken All Kurir <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a474b6a-9fde-4577-af84-d7a6c060ef56"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a474b6a-9fde-4577-af84-d7a6c060ef56?source=api-prod","cve":"CVE-2025-58212","affectedVersions":"<=2.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d169fa88-3f75-47a0-93df-dd3550b59278/epeken-all-kurir","title":"Epeken All Kurir for Woocommerce < 2.1.8 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"d169fa88-3f75-47a0-93df-dd3550b59278"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d169fa88-3f75-47a0-93df-dd3550b59278?source=api-prod","cve":"CVE-2026-16739","affectedVersions":"<2.1.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/fbb9b4c8-18b6-4215-a7ee-c5a49977aec7/epeken-all-kurir","title":"Epeken All Kurir <= 2.1.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"fbb9b4c8-18b6-4215-a7ee-c5a49977aec7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fbb9b4c8-18b6-4215-a7ee-c5a49977aec7?source=api-prod","cve":"CVE-2025-57906","affectedVersions":"<=2.1.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_65726f6f6d2d7a6f6f6d2d6d656574696e67732d776562696e6172811c9dc5_gen.json b/internal/data/assets/plugin_65726f6f6d2d7a6f6f6d2d6d656574696e67732d776562696e6172811c9dc5_gen.json
index b33a431d..d26ecbef 100644
--- a/internal/data/assets/plugin_65726f6f6d2d7a6f6f6d2d6d656574696e67732d776562696e6172811c9dc5_gen.json
+++ b/internal/data/assets/plugin_65726f6f6d2d7a6f6f6d2d6d656574696e67732d776562696e6172811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/09925777-5a25-4c7a-bc05-970512992943/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"09925777-5a25-4c7a-bc05-970512992943"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09925777-5a25-4c7a-bc05-970512992943?source=api-prod","cve":"CVE-2026-25405","affectedVersions":"<=1.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0baaa6b7-3884-465e-bae3-46edab6312d4/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-24 13:42:10","sources":[{"name":"Wordfence","remoteId":"0baaa6b7-3884-465e-bae3-46edab6312d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0baaa6b7-3884-465e-bae3-46edab6312d4?source=api-prod","cve":"CVE-2025-11760","affectedVersions":"<=1.5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ac3ffcf-50e0-42fc-a88d-cd7a51fbe1a9/eroom-zoom-meetings-webinar","title":"eRoom <= 1.5.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ac3ffcf-50e0-42fc-a88d-cd7a51fbe1a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ac3ffcf-50e0-42fc-a88d-cd7a51fbe1a9?source=api-prod","cve":"CVE-2025-49919","affectedVersions":"<=1.5.6","severity":"high"},{"advisoryId":"WPSECADV/WF/317b1bac-cd9c-4eac-b42b-d7719ecd135c/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.3.8 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-11 18:31:00","sources":[{"name":"Wordfence","remoteId":"317b1bac-cd9c-4eac-b42b-d7719ecd135c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/317b1bac-cd9c-4eac-b42b-d7719ecd135c?source=api-prod","cve":"CVE-2022-25615","affectedVersions":"<=1.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/eroom-zoom-meetings-webinar","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=1.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e0767a8-9e82-4ce4-9df9-19b458dc5ce0/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.4.6 - Missing Authorization via stm_wpcfto_get_settings_callback\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"5e0767a8-9e82-4ce4-9df9-19b458dc5ce0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e0767a8-9e82-4ce4-9df9-19b458dc5ce0?source=api-prod","cve":"CVE-2022-43472","affectedVersions":"<=1.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/60e0fd59-a69c-4ddf-80cd-4312d2689397/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"60e0fd59-a69c-4ddf-80cd-4312d2689397"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/60e0fd59-a69c-4ddf-80cd-4312d2689397?source=api-prod","cve":"CVE-2024-3275","affectedVersions":"<=1.4.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/67b7c2b5-c8ef-4659-b9e8-4c695bb76bff/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"67b7c2b5-c8ef-4659-b9e8-4c695bb76bff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/67b7c2b5-c8ef-4659-b9e8-4c695bb76bff?source=api-prod","cve":"CVE-2026-25427","affectedVersions":"<=1.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/89a23d5a-7728-403e-b654-595d92c20b66/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.3.7 - Unauthorized Setting Update\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"89a23d5a-7728-403e-b654-595d92c20b66"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/89a23d5a-7728-403e-b654-595d92c20b66?source=api-prod","affectedVersions":"<=1.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c05548e4-024b-467e-9d15-8baccd017668/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 17:59:00","sources":[{"name":"Wordfence","remoteId":"c05548e4-024b-467e-9d15-8baccd017668"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c05548e4-024b-467e-9d15-8baccd017668?source=api-prod","cve":"CVE-2026-114176","affectedVersions":"<=1.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ce695f15-557c-47b1-a5c4-ce68cc84d721/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.3.7 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-11 17:58:00","sources":[{"name":"Wordfence","remoteId":"ce695f15-557c-47b1-a5c4-ce68cc84d721"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ce695f15-557c-47b1-a5c4-ce68cc84d721?source=api-prod","cve":"CVE-2022-25614","affectedVersions":"<=1.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e5af2507-4e82-44b2-be50-c19098c22efe/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5af2507-4e82-44b2-be50-c19098c22efe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5af2507-4e82-44b2-be50-c19098c22efe?source=api-prod","cve":"CVE-2026-62038","affectedVersions":"<=1.7.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/09925777-5a25-4c7a-bc05-970512992943/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"09925777-5a25-4c7a-bc05-970512992943"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09925777-5a25-4c7a-bc05-970512992943?source=api-prod","cve":"CVE-2026-25405","affectedVersions":"<=1.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0baaa6b7-3884-465e-bae3-46edab6312d4/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-24 13:42:10","sources":[{"name":"Wordfence","remoteId":"0baaa6b7-3884-465e-bae3-46edab6312d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0baaa6b7-3884-465e-bae3-46edab6312d4?source=api-prod","cve":"CVE-2025-11760","affectedVersions":"<=1.5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ac3ffcf-50e0-42fc-a88d-cd7a51fbe1a9/eroom-zoom-meetings-webinar","title":"eRoom <= 1.5.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ac3ffcf-50e0-42fc-a88d-cd7a51fbe1a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ac3ffcf-50e0-42fc-a88d-cd7a51fbe1a9?source=api-prod","cve":"CVE-2025-49919","affectedVersions":"<=1.5.6","severity":"high"},{"advisoryId":"WPSECADV/WF/317b1bac-cd9c-4eac-b42b-d7719ecd135c/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.3.8 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-11 18:31:00","sources":[{"name":"Wordfence","remoteId":"317b1bac-cd9c-4eac-b42b-d7719ecd135c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/317b1bac-cd9c-4eac-b42b-d7719ecd135c?source=api-prod","cve":"CVE-2022-25615","affectedVersions":"<=1.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/eroom-zoom-meetings-webinar","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=1.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e0767a8-9e82-4ce4-9df9-19b458dc5ce0/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.4.6 - Missing Authorization via stm_wpcfto_get_settings_callback\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"5e0767a8-9e82-4ce4-9df9-19b458dc5ce0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e0767a8-9e82-4ce4-9df9-19b458dc5ce0?source=api-prod","cve":"CVE-2022-43472","affectedVersions":"<=1.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/5eee90ab-8a54-43da-afff-72ab0e687f45/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization to Authenticated (Subscriber+) Zoom API Credential Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"5eee90ab-8a54-43da-afff-72ab0e687f45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5eee90ab-8a54-43da-afff-72ab0e687f45?source=api-prod","cve":"CVE-2026-114175","affectedVersions":"<=1.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/60e0fd59-a69c-4ddf-80cd-4312d2689397/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"60e0fd59-a69c-4ddf-80cd-4312d2689397"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/60e0fd59-a69c-4ddf-80cd-4312d2689397?source=api-prod","cve":"CVE-2024-3275","affectedVersions":"<=1.4.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/67b7c2b5-c8ef-4659-b9e8-4c695bb76bff/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"67b7c2b5-c8ef-4659-b9e8-4c695bb76bff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/67b7c2b5-c8ef-4659-b9e8-4c695bb76bff?source=api-prod","cve":"CVE-2026-25427","affectedVersions":"<=1.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/89a23d5a-7728-403e-b654-595d92c20b66/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.3.7 - Unauthorized Setting Update\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"89a23d5a-7728-403e-b654-595d92c20b66"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/89a23d5a-7728-403e-b654-595d92c20b66?source=api-prod","affectedVersions":"<=1.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c05548e4-024b-467e-9d15-8baccd017668/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 17:59:00","sources":[{"name":"Wordfence","remoteId":"c05548e4-024b-467e-9d15-8baccd017668"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c05548e4-024b-467e-9d15-8baccd017668?source=api-prod","cve":"CVE-2026-114176","affectedVersions":"<=1.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ce695f15-557c-47b1-a5c4-ce68cc84d721/eroom-zoom-meetings-webinar","title":"eRoom – Zoom Meetings & Webinar <= 1.3.7 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-11 17:58:00","sources":[{"name":"Wordfence","remoteId":"ce695f15-557c-47b1-a5c4-ce68cc84d721"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ce695f15-557c-47b1-a5c4-ce68cc84d721?source=api-prod","cve":"CVE-2022-25614","affectedVersions":"<=1.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e5af2507-4e82-44b2-be50-c19098c22efe/eroom-zoom-meetings-webinar","title":"eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5af2507-4e82-44b2-be50-c19098c22efe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5af2507-4e82-44b2-be50-c19098c22efe?source=api-prod","cve":"CVE-2026-62038","affectedVersions":"<=1.7.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_657373656e7469616c2d6164646f6e732d666f722d656c656d656e746f722d6c697465811c9dc5_gen.json b/internal/data/assets/plugin_657373656e7469616c2d6164646f6e732d666f722d656c656d656e746f722d6c697465811c9dc5_gen.json
index ecae2896..ef378ef4 100644
--- a/internal/data/assets/plugin_657373656e7469616c2d6164646f6e732d666f722d656c656d656e746f722d6c697465811c9dc5_gen.json
+++ b/internal/data/assets/plugin_657373656e7469616c2d6164646f6e732d666f722d656c656d656e746f722d6c697465811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/014f1aae-10a0-4bc8-b176-dbdad94a6ad8/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor  <= 5.0.4 - Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"014f1aae-10a0-4bc8-b176-dbdad94a6ad8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/014f1aae-10a0-4bc8-b176-dbdad94a6ad8?source=api-prod","cve":"CVE-2022-0320","affectedVersions":">=1.0.0,<=5.0.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/063b50e3-1369-4240-b695-6ac336f4ea75/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.5.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"063b50e3-1369-4240-b695-6ac336f4ea75"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/063b50e3-1369-4240-b695-6ac336f4ea75?source=api-prod","cve":"CVE-2026-23543","affectedVersions":"<=6.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/06ef9a21-e2b9-40c7-9de5-cff175fa10a5/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-15 20:04:09","sources":[{"name":"Wordfence","remoteId":"06ef9a21-e2b9-40c7-9de5-cff175fa10a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06ef9a21-e2b9-40c7-9de5-cff175fa10a5?source=api-prod","cve":"CVE-2026-1004","affectedVersions":"<=6.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/088ea35b-ef64-4c1b-8a08-5dce02ca3da9/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.5 - Authenticated (Author+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-17 08:22:57","sources":[{"name":"Wordfence","remoteId":"088ea35b-ef64-4c1b-8a08-5dce02ca3da9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/088ea35b-ef64-4c1b-8a08-5dce02ca3da9?source=api-prod","cve":"CVE-2026-110898","affectedVersions":"<=6.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/0eb2c608-1a1f-4c74-aa24-b955db052559/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.2.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"0eb2c608-1a1f-4c74-aa24-b955db052559"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0eb2c608-1a1f-4c74-aa24-b955db052559?source=api-prod","cve":"CVE-2025-64352","affectedVersions":"<=6.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/0f38e5f0-6c62-4c0a-99f9-09bc20ee87d4/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.6.10 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"0f38e5f0-6c62-4c0a-99f9-09bc20ee87d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0f38e5f0-6c62-4c0a-99f9-09bc20ee87d4?source=api-prod","cve":"CVE-2026-13345","affectedVersions":"<6.6.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/12dc9e63-17bb-4755-be3c-ae8b26edd3cd/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"12dc9e63-17bb-4755-be3c-ae8b26edd3cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12dc9e63-17bb-4755-be3c-ae8b26edd3cd?source=api-prod","cve":"CVE-2024-1536","affectedVersions":"<=5.9.9","severity":"high"},{"advisoryId":"WPSECADV/WF/167d3e1d-be74-4bfb-b3bf-e2c53d90e12f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"167d3e1d-be74-4bfb-b3bf-e2c53d90e12f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/167d3e1d-be74-4bfb-b3bf-e2c53d90e12f?source=api-prod","cve":"CVE-2024-56063","affectedVersions":"<=6.0.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/1cf3190c-e247-4bcc-99e0-2ab2d2fa0590/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"1cf3190c-e247-4bcc-99e0-2ab2d2fa0590"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1cf3190c-e247-4bcc-99e0-2ab2d2fa0590?source=api-prod","cve":"CVE-2024-4003","affectedVersions":"<=5.9.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/2100d720-bfb4-451d-9907-e0b77ef507a5/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-20 19:35:03","sources":[{"name":"Wordfence","remoteId":"2100d720-bfb4-451d-9907-e0b77ef507a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2100d720-bfb4-451d-9907-e0b77ef507a5?source=api-prod","cve":"CVE-2026-15145","affectedVersions":"<=6.6.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/21e12c72-7898-4896-9852-ebb10e5f9a3b/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 19:32:53","sources":[{"name":"Wordfence","remoteId":"21e12c72-7898-4896-9852-ebb10e5f9a3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21e12c72-7898-4896-9852-ebb10e5f9a3b?source=api-prod","cve":"CVE-2024-4448","affectedVersions":"<=5.9.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/22930940-8e2c-446a-954c-90d617f3ca6d/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 18:07:43","sources":[{"name":"Wordfence","remoteId":"22930940-8e2c-446a-954c-90d617f3ca6d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22930940-8e2c-446a-954c-90d617f3ca6d?source=api-prod","cve":"CVE-2026-5193","affectedVersions":"<=6.5.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/23a66e6b-cec0-4110-9bef-a5d41ce1c954/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"23a66e6b-cec0-4110-9bef-a5d41ce1c954"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23a66e6b-cec0-4110-9bef-a5d41ce1c954?source=api-prod","cve":"CVE-2024-4156","affectedVersions":"<=5.9.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/283fb581-8b61-4008-a5c4-2e1490fab33e/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 4.6.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-05-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"283fb581-8b61-4008-a5c4-2e1490fab33e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/283fb581-8b61-4008-a5c4-2e1490fab33e?source=api-prod","cve":"CVE-2021-4446","affectedVersions":"<=4.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/284ea577-ff67-4681-995b-f7bb5ef0ff3e/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"284ea577-ff67-4681-995b-f7bb5ef0ff3e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/284ea577-ff67-4681-995b-f7bb5ef0ff3e?source=api-prod","cve":"CVE-2024-3728","affectedVersions":"<=5.9.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a4c1e51-b332-4feb-8875-d43c9541342f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 12:35:00","sources":[{"name":"Wordfence","remoteId":"2a4c1e51-b332-4feb-8875-d43c9541342f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a4c1e51-b332-4feb-8875-d43c9541342f?source=api-prod","cve":"CVE-2026-102394","affectedVersions":"<=6.8.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/342049e5-834e-4867-8174-01ca7bb0caa2/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"342049e5-834e-4867-8174-01ca7bb0caa2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/342049e5-834e-4867-8174-01ca7bb0caa2?source=api-prod","cve":"CVE-2024-3018","affectedVersions":"<=5.9.13","severity":"high"},{"advisoryId":"WPSECADV/WF/34d09086-be33-40cf-b5bf-d6c03cf0b68a/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"34d09086-be33-40cf-b5bf-d6c03cf0b68a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/34d09086-be33-40cf-b5bf-d6c03cf0b68a?source=api-prod","cve":"CVE-2024-8979","affectedVersions":"<=6.0.9","severity":"high"},{"advisoryId":"WPSECADV/WF/3d604f7a-947c-43f4-bba6-e7e98b2d7844/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d604f7a-947c-43f4-bba6-e7e98b2d7844"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d604f7a-947c-43f4-bba6-e7e98b2d7844?source=api-prod","cve":"CVE-2024-3733","affectedVersions":"<=5.9.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/3ddb9c46-683d-4eb4-a30f-f492d4f3ae2d/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ddb9c46-683d-4eb4-a30f-f492d4f3ae2d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ddb9c46-683d-4eb4-a30f-f492d4f3ae2d?source=api-prod","cve":"CVE-2026-13344","affectedVersions":"<6.6.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/417baa1c-29f0-4fec-8008-5b52359b3328/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"417baa1c-29f0-4fec-8008-5b52359b3328"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/417baa1c-29f0-4fec-8008-5b52359b3328?source=api-prod","cve":"CVE-2024-0585","affectedVersions":"<=5.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/43014ecd-72d9-44cc-be24-c0c9790ddc20/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"43014ecd-72d9-44cc-be24-c0c9790ddc20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43014ecd-72d9-44cc-be24-c0c9790ddc20?source=api-prod","cve":"CVE-2024-1236","affectedVersions":"<=5.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/434b140a-43b7-41bc-8cc2-ed82787b90c3/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"434b140a-43b7-41bc-8cc2-ed82787b90c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/434b140a-43b7-41bc-8cc2-ed82787b90c3?source=api-prod","cve":"CVE-2025-39589","affectedVersions":"<=6.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/45ef20aa-18e3-4ad8-a94e-76e29de5b562/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-14 18:35:38","sources":[{"name":"Wordfence","remoteId":"45ef20aa-18e3-4ad8-a94e-76e29de5b562"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/45ef20aa-18e3-4ad8-a94e-76e29de5b562?source=api-prod","cve":"CVE-2024-8961","affectedVersions":"<=6.0.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/4917652a-1c83-4570-98c5-1a34e637814e/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"4917652a-1c83-4570-98c5-1a34e637814e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4917652a-1c83-4570-98c5-1a34e637814e?source=api-prod","cve":"CVE-2025-8451","affectedVersions":"<=6.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/56ba7d1b-7afd-4069-8b18-1158911fce3f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"56ba7d1b-7afd-4069-8b18-1158911fce3f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/56ba7d1b-7afd-4069-8b18-1158911fce3f?source=api-prod","cve":"CVE-2025-69092","affectedVersions":"<=6.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/57ed6c7e-ca8d-476d-adce-905b2cd2eda8/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor  <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 19:27:26","sources":[{"name":"Wordfence","remoteId":"57ed6c7e-ca8d-476d-adce-905b2cd2eda8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57ed6c7e-ca8d-476d-adce-905b2cd2eda8?source=api-prod","cve":"CVE-2024-4449","affectedVersions":"<=5.9.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/5a1d5fd1-80b6-4d62-9837-59ee1e020373/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"5a1d5fd1-80b6-4d62-9837-59ee1e020373"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5a1d5fd1-80b6-4d62-9837-59ee1e020373?source=api-prod","cve":"CVE-2024-5188","affectedVersions":"<=5.9.22","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b3214a5-7044-4005-a200-c969d4487be2/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-07 23:38:58","sources":[{"name":"Wordfence","remoteId":"5b3214a5-7044-4005-a200-c969d4487be2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b3214a5-7044-4005-a200-c969d4487be2?source=api-prod","cve":"CVE-2026-6459","affectedVersions":"<=6.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/69caeed4-f9e4-426a-9acb-1f52a6251072/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.7.1 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"69caeed4-f9e4-426a-9acb-1f52a6251072"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69caeed4-f9e4-426a-9acb-1f52a6251072?source=api-prod","cve":"CVE-2026-18039","affectedVersions":"<=6.7.1","severity":"high"},{"advisoryId":"WPSECADV/WF/6e770e98-3c13-4e37-b51b-4c39bce2cb42/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e770e98-3c13-4e37-b51b-4c39bce2cb42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e770e98-3c13-4e37-b51b-4c39bce2cb42?source=api-prod","cve":"CVE-2023-7044","affectedVersions":"<=5.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/710e1c2c-4b5d-412c-950d-b5e530abf3a7/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.0.14 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"710e1c2c-4b5d-412c-950d-b5e530abf3a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/710e1c2c-4b5d-412c-950d-b5e530abf3a7?source=api-prod","cve":"CVE-2025-24752","affectedVersions":"<=6.0.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/71378c94-c2e6-43a9-bb8b-f2ffb153f3fe/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"71378c94-c2e6-43a9-bb8b-f2ffb153f3fe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71378c94-c2e6-43a9-bb8b-f2ffb153f3fe?source=api-prod","cve":"CVE-2025-39590","affectedVersions":"<=6.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/718c60c1-6117-4959-a907-d0ef457f7185/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-12 16:05:31","sources":[{"name":"Wordfence","remoteId":"718c60c1-6117-4959-a907-d0ef457f7185"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/718c60c1-6117-4959-a907-d0ef457f7185?source=api-prod","cve":"CVE-2024-7092","affectedVersions":"<=5.9.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/7242d808-9c33-4b3f-bda6-b4b72ca37de9/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"7242d808-9c33-4b3f-bda6-b4b72ca37de9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7242d808-9c33-4b3f-bda6-b4b72ca37de9?source=api-prod","cve":"CVE-2024-2650","affectedVersions":"<=5.9.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/76c292dc-e9da-4256-82df-58ac5def4771/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-12 17:39:27","sources":[{"name":"Wordfence","remoteId":"76c292dc-e9da-4256-82df-58ac5def4771"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76c292dc-e9da-4256-82df-58ac5def4771?source=api-prod","cve":"CVE-2024-8742","affectedVersions":"<=6.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/78f96d7f-aeca-4959-9573-0fb6402de007/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"78f96d7f-aeca-4959-9573-0fb6402de007"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78f96d7f-aeca-4959-9573-0fb6402de007?source=api-prod","cve":"CVE-2024-2974","affectedVersions":"<=5.9.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/81a48c61-4191-4252-9230-9df8fc5e3443/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"81a48c61-4191-4252-9230-9df8fc5e3443"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81a48c61-4191-4252-9230-9df8fc5e3443?source=api-prod","cve":"CVE-2024-1537","affectedVersions":"<=5.9.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/847a4fc7-3580-421e-8045-41b5a85f2d97/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-07 13:19:56","sources":[{"name":"Wordfence","remoteId":"847a4fc7-3580-421e-8045-41b5a85f2d97"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/847a4fc7-3580-421e-8045-41b5a85f2d97?source=api-prod","cve":"CVE-2025-6244","affectedVersions":"<=6.1.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/855ae993-d887-4416-9b3c-8274a90dce5f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-06 21:37:15","sources":[{"name":"Wordfence","remoteId":"855ae993-d887-4416-9b3c-8274a90dce5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/855ae993-d887-4416-9b3c-8274a90dce5f?source=api-prod","cve":"CVE-2024-9994","affectedVersions":"<=6.1.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/861ece65-bee7-4124-b1a8-de9fb0c1cbc7/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-05 14:25:47","sources":[{"name":"Wordfence","remoteId":"861ece65-bee7-4124-b1a8-de9fb0c1cbc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/861ece65-bee7-4124-b1a8-de9fb0c1cbc7?source=api-prod","cve":"CVE-2026-7665","affectedVersions":"<=6.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/875db71d-c799-40b9-95e1-74d53046b0a9/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"875db71d-c799-40b9-95e1-74d53046b0a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/875db71d-c799-40b9-95e1-74d53046b0a9?source=api-prod","cve":"CVE-2024-0954","affectedVersions":"<=5.9.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/8869a4fc-279f-4828-a271-8680d037fa85/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor Lite <= 5.0.8 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"8869a4fc-279f-4828-a271-8680d037fa85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8869a4fc-279f-4828-a271-8680d037fa85?source=api-prod","cve":"CVE-2022-0683","affectedVersions":"<=5.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c13701e-424d-462f-b152-4dc5ad3ef197/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.8.8 - Authenticated (Contributor+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c13701e-424d-462f-b152-4dc5ad3ef197"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c13701e-424d-462f-b152-4dc5ad3ef197?source=api-prod","cve":"CVE-2023-41955","affectedVersions":"<=5.8.8","severity":"high"},{"advisoryId":"WPSECADV/WF/91f50b65-f001-4c73-bfe3-1aed3fc10d26/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 19:28:58","sources":[{"name":"Wordfence","remoteId":"91f50b65-f001-4c73-bfe3-1aed3fc10d26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91f50b65-f001-4c73-bfe3-1aed3fc10d26?source=api-prod","cve":"CVE-2024-4275","affectedVersions":"<=5.9.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/a0de0b28-fbad-4fcf-a7ab-35c545c19a4a/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-16 15:08:24","sources":[{"name":"Wordfence","remoteId":"a0de0b28-fbad-4fcf-a7ab-35c545c19a4a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a0de0b28-fbad-4fcf-a7ab-35c545c19a4a?source=api-prod","cve":"CVE-2025-13977","affectedVersions":"<=6.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a151c680-2bcf-4b36-aa6e-9694c6d3d0c7/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.0 - Unauthenticated Captcha Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"a151c680-2bcf-4b36-aa6e-9694c6d3d0c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a151c680-2bcf-4b36-aa6e-9694c6d3d0c7?source=api-prod","cve":"CVE-2026-81777","affectedVersions":"<=6.8.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2552407-0b32-4129-b131-792305ed023e/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.6.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2552407-0b32-4129-b131-792305ed023e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2552407-0b32-4129-b131-792305ed023e?source=api-prod","cve":"CVE-2026-25440","affectedVersions":"<6.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a7d0811b-0097-4e8e-b585-a83fb807fa74/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.8.7 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a7d0811b-0097-4e8e-b585-a83fb807fa74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a7d0811b-0097-4e8e-b585-a83fb807fa74?source=api-prod","cve":"CVE-2026-110510","affectedVersions":"<6.8.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/a8de8a0b-0b70-4e8a-8cc4-06cc50d06a02/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-06 21:37:20","sources":[{"name":"Wordfence","remoteId":"a8de8a0b-0b70-4e8a-8cc4-06cc50d06a02"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a8de8a0b-0b70-4e8a-8cc4-06cc50d06a02?source=api-prod","cve":"CVE-2024-9993","affectedVersions":"<=6.1.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa5bdaf9-fbde-40d4-a72a-fd24489818b3/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa5bdaf9-fbde-40d4-a72a-fd24489818b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa5bdaf9-fbde-40d4-a72a-fd24489818b3?source=api-prod","cve":"CVE-2024-3333","affectedVersions":"<=5.9.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa70238b-530e-4c90-82f4-c3113887d0e1/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa70238b-530e-4c90-82f4-c3113887d0e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa70238b-530e-4c90-82f4-c3113887d0e1?source=api-prod","cve":"CVE-2024-5189","affectedVersions":"<=5.9.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/af8bee01-15bc-485e-8b01-8b68b199b34d/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"af8bee01-15bc-485e-8b01-8b68b199b34d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af8bee01-15bc-485e-8b01-8b68b199b34d?source=api-prod","cve":"CVE-2024-1276","affectedVersions":"<=5.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/baa92aee-a0a0-45d4-aa12-1449a829930c/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"baa92aee-a0a0-45d4-aa12-1449a829930c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/baa92aee-a0a0-45d4-aa12-1449a829930c?source=api-prod","cve":"CVE-2024-2623","affectedVersions":"<=5.9.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/baae8fb9-b87c-4f61-88da-871c4c83615b/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"baae8fb9-b87c-4f61-88da-871c4c83615b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/baae8fb9-b87c-4f61-88da-871c4c83615b?source=api-prod","cve":"CVE-2024-8978","affectedVersions":"<=6.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/be098ee9-b749-4908-85e8-e717d019609a/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-05-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"be098ee9-b749-4908-85e8-e717d019609a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be098ee9-b749-4908-85e8-e717d019609a?source=api-prod","cve":"CVE-2021-4447","affectedVersions":"<=4.6.4","severity":"high"},{"advisoryId":"WPSECADV/WF/bedad627-0ccb-41c1-be8d-753f57be618f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"bedad627-0ccb-41c1-be8d-753f57be618f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bedad627-0ccb-41c1-be8d-753f57be618f?source=api-prod","cve":"CVE-2024-4624","affectedVersions":"<=5.9.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/c00ff4bd-d846-4e3f-95ed-2a6430c47ebf/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c00ff4bd-d846-4e3f-95ed-2a6430c47ebf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c00ff4bd-d846-4e3f-95ed-2a6430c47ebf?source=api-prod","cve":"CVE-2024-0586","affectedVersions":"<=5.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c5960396-5320-4978-aa82-2e33700daa43/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-10 17:52:37","sources":[{"name":"Wordfence","remoteId":"c5960396-5320-4978-aa82-2e33700daa43"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5960396-5320-4978-aa82-2e33700daa43?source=api-prod","cve":"CVE-2024-8440","affectedVersions":"<=6.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8db80ef-5863-41dd-b33f-850984a72ee6/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-29 18:31:01","sources":[{"name":"Wordfence","remoteId":"c8db80ef-5863-41dd-b33f-850984a72ee6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8db80ef-5863-41dd-b33f-850984a72ee6?source=api-prod","cve":"CVE-2024-5073","affectedVersions":"<=5.9.21","severity":"medium"},{"advisoryId":"WPSECADV/WF/cbe8cf6c-b1fa-4f71-bb63-c8b181e54882/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 16:46:50","sources":[{"name":"Wordfence","remoteId":"cbe8cf6c-b1fa-4f71-bb63-c8b181e54882"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cbe8cf6c-b1fa-4f71-bb63-c8b181e54882?source=api-prod","cve":"CVE-2026-15155","affectedVersions":"<=6.6.10","severity":"high"},{"advisoryId":"WPSECADV/WF/d652f383-ca3d-440e-a30f-64a50efd65e1/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 21:37:33","sources":[{"name":"Wordfence","remoteId":"d652f383-ca3d-440e-a30f-64a50efd65e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d652f383-ca3d-440e-a30f-64a50efd65e1?source=api-prod","cve":"CVE-2026-1512","affectedVersions":"<=6.5.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/dae80fc2-3076-4a32-876d-5df1c62de9bd/essential-addons-for-elementor-lite","title":"Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"dae80fc2-3076-4a32-876d-5df1c62de9bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dae80fc2-3076-4a32-876d-5df1c62de9bd?source=api-prod","cve":"CVE-2024-5647","affectedVersions":"<=6.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/dde0cf3a-778b-4b5f-ac0e-600505d918ae/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-20 16:10:46","sources":[{"name":"Wordfence","remoteId":"dde0cf3a-778b-4b5f-ac0e-600505d918ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dde0cf3a-778b-4b5f-ac0e-600505d918ae?source=api-prod","cve":"CVE-2026-15156","affectedVersions":"<=6.6.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/de614bbd-42ae-4c2a-aec6-31245124de76/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor Lite <= 4.5.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"de614bbd-42ae-4c2a-aec6-31245124de76"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/de614bbd-42ae-4c2a-aec6-31245124de76?source=api-prod","cve":"CVE-2021-24255","affectedVersions":"<4.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/dfb6961b-1398-409d-ada2-cf5424cb2b73/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"dfb6961b-1398-409d-ada2-cf5424cb2b73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dfb6961b-1398-409d-ada2-cf5424cb2b73?source=api-prod","cve":"CVE-2024-34764","affectedVersions":"<=5.9.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/e007c713-74bc-4ff5-a198-70dcc8a8ee68/essential-addons-for-elementor-lite","title":"Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"e007c713-74bc-4ff5-a198-70dcc8a8ee68"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e007c713-74bc-4ff5-a198-70dcc8a8ee68?source=api-prod","cve":"CVE-2023-3779","affectedVersions":"<=5.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e988d042-147c-4782-b728-71f5a50cecd8/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.7.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"e988d042-147c-4782-b728-71f5a50cecd8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e988d042-147c-4782-b728-71f5a50cecd8?source=api-prod","cve":"CVE-2023-32243","affectedVersions":"<=5.7.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/eee7cad6-7910-4860-add9-c500d1f6eff3/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.26 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"eee7cad6-7910-4860-add9-c500d1f6eff3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eee7cad6-7910-4860-add9-c500d1f6eff3?source=api-prod","cve":"CVE-2024-39649","affectedVersions":"<=5.9.26","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2ff2cc6-b584-442b-890b-033a0a047c24/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2ff2cc6-b584-442b-890b-033a0a047c24"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2ff2cc6-b584-442b-890b-033a0a047c24?source=api-prod","cve":"CVE-2024-1172","affectedVersions":"<=5.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/fafdd087-9637-41df-bc5a-97e1a02ea744/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"fafdd087-9637-41df-bc5a-97e1a02ea744"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fafdd087-9637-41df-bc5a-97e1a02ea744?source=api-prod","cve":"CVE-2024-1171","affectedVersions":"<=5.9.8","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/014f1aae-10a0-4bc8-b176-dbdad94a6ad8/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor  <= 5.0.4 - Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"014f1aae-10a0-4bc8-b176-dbdad94a6ad8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/014f1aae-10a0-4bc8-b176-dbdad94a6ad8?source=api-prod","cve":"CVE-2022-0320","affectedVersions":">=1.0.0,<=5.0.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/063b50e3-1369-4240-b695-6ac336f4ea75/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.5.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"063b50e3-1369-4240-b695-6ac336f4ea75"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/063b50e3-1369-4240-b695-6ac336f4ea75?source=api-prod","cve":"CVE-2026-23543","affectedVersions":"<=6.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/06ef9a21-e2b9-40c7-9de5-cff175fa10a5/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-15 20:04:09","sources":[{"name":"Wordfence","remoteId":"06ef9a21-e2b9-40c7-9de5-cff175fa10a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06ef9a21-e2b9-40c7-9de5-cff175fa10a5?source=api-prod","cve":"CVE-2026-1004","affectedVersions":"<=6.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/088ea35b-ef64-4c1b-8a08-5dce02ca3da9/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.5 - Authenticated (Author+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-17 08:22:57","sources":[{"name":"Wordfence","remoteId":"088ea35b-ef64-4c1b-8a08-5dce02ca3da9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/088ea35b-ef64-4c1b-8a08-5dce02ca3da9?source=api-prod","cve":"CVE-2026-110898","affectedVersions":"<=6.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/0eb2c608-1a1f-4c74-aa24-b955db052559/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.2.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"0eb2c608-1a1f-4c74-aa24-b955db052559"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0eb2c608-1a1f-4c74-aa24-b955db052559?source=api-prod","cve":"CVE-2025-64352","affectedVersions":"<=6.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/0f38e5f0-6c62-4c0a-99f9-09bc20ee87d4/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.6.10 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"0f38e5f0-6c62-4c0a-99f9-09bc20ee87d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0f38e5f0-6c62-4c0a-99f9-09bc20ee87d4?source=api-prod","cve":"CVE-2026-13345","affectedVersions":"<6.6.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/12dc9e63-17bb-4755-be3c-ae8b26edd3cd/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"12dc9e63-17bb-4755-be3c-ae8b26edd3cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12dc9e63-17bb-4755-be3c-ae8b26edd3cd?source=api-prod","cve":"CVE-2024-1536","affectedVersions":"<=5.9.9","severity":"high"},{"advisoryId":"WPSECADV/WF/167d3e1d-be74-4bfb-b3bf-e2c53d90e12f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"167d3e1d-be74-4bfb-b3bf-e2c53d90e12f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/167d3e1d-be74-4bfb-b3bf-e2c53d90e12f?source=api-prod","cve":"CVE-2024-56063","affectedVersions":"<=6.0.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/1cf3190c-e247-4bcc-99e0-2ab2d2fa0590/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"1cf3190c-e247-4bcc-99e0-2ab2d2fa0590"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1cf3190c-e247-4bcc-99e0-2ab2d2fa0590?source=api-prod","cve":"CVE-2024-4003","affectedVersions":"<=5.9.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/2100d720-bfb4-451d-9907-e0b77ef507a5/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-20 19:35:03","sources":[{"name":"Wordfence","remoteId":"2100d720-bfb4-451d-9907-e0b77ef507a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2100d720-bfb4-451d-9907-e0b77ef507a5?source=api-prod","cve":"CVE-2026-15145","affectedVersions":"<=6.6.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/21e12c72-7898-4896-9852-ebb10e5f9a3b/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 19:32:53","sources":[{"name":"Wordfence","remoteId":"21e12c72-7898-4896-9852-ebb10e5f9a3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21e12c72-7898-4896-9852-ebb10e5f9a3b?source=api-prod","cve":"CVE-2024-4448","affectedVersions":"<=5.9.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/22930940-8e2c-446a-954c-90d617f3ca6d/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 18:07:43","sources":[{"name":"Wordfence","remoteId":"22930940-8e2c-446a-954c-90d617f3ca6d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22930940-8e2c-446a-954c-90d617f3ca6d?source=api-prod","cve":"CVE-2026-5193","affectedVersions":"<=6.5.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/23a66e6b-cec0-4110-9bef-a5d41ce1c954/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"23a66e6b-cec0-4110-9bef-a5d41ce1c954"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23a66e6b-cec0-4110-9bef-a5d41ce1c954?source=api-prod","cve":"CVE-2024-4156","affectedVersions":"<=5.9.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/283fb581-8b61-4008-a5c4-2e1490fab33e/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 4.6.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-05-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"283fb581-8b61-4008-a5c4-2e1490fab33e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/283fb581-8b61-4008-a5c4-2e1490fab33e?source=api-prod","cve":"CVE-2021-4446","affectedVersions":"<=4.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/284ea577-ff67-4681-995b-f7bb5ef0ff3e/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"284ea577-ff67-4681-995b-f7bb5ef0ff3e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/284ea577-ff67-4681-995b-f7bb5ef0ff3e?source=api-prod","cve":"CVE-2024-3728","affectedVersions":"<=5.9.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a4c1e51-b332-4feb-8875-d43c9541342f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 12:35:00","sources":[{"name":"Wordfence","remoteId":"2a4c1e51-b332-4feb-8875-d43c9541342f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a4c1e51-b332-4feb-8875-d43c9541342f?source=api-prod","cve":"CVE-2026-102394","affectedVersions":"<=6.8.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/342049e5-834e-4867-8174-01ca7bb0caa2/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"342049e5-834e-4867-8174-01ca7bb0caa2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/342049e5-834e-4867-8174-01ca7bb0caa2?source=api-prod","cve":"CVE-2024-3018","affectedVersions":"<=5.9.13","severity":"high"},{"advisoryId":"WPSECADV/WF/34d09086-be33-40cf-b5bf-d6c03cf0b68a/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"34d09086-be33-40cf-b5bf-d6c03cf0b68a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/34d09086-be33-40cf-b5bf-d6c03cf0b68a?source=api-prod","cve":"CVE-2024-8979","affectedVersions":"<=6.0.9","severity":"high"},{"advisoryId":"WPSECADV/WF/3d604f7a-947c-43f4-bba6-e7e98b2d7844/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d604f7a-947c-43f4-bba6-e7e98b2d7844"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d604f7a-947c-43f4-bba6-e7e98b2d7844?source=api-prod","cve":"CVE-2024-3733","affectedVersions":"<=5.9.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/3ddb9c46-683d-4eb4-a30f-f492d4f3ae2d/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ddb9c46-683d-4eb4-a30f-f492d4f3ae2d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ddb9c46-683d-4eb4-a30f-f492d4f3ae2d?source=api-prod","cve":"CVE-2026-13344","affectedVersions":"<6.6.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/417baa1c-29f0-4fec-8008-5b52359b3328/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"417baa1c-29f0-4fec-8008-5b52359b3328"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/417baa1c-29f0-4fec-8008-5b52359b3328?source=api-prod","cve":"CVE-2024-0585","affectedVersions":"<=5.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/43014ecd-72d9-44cc-be24-c0c9790ddc20/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"43014ecd-72d9-44cc-be24-c0c9790ddc20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43014ecd-72d9-44cc-be24-c0c9790ddc20?source=api-prod","cve":"CVE-2024-1236","affectedVersions":"<=5.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/434b140a-43b7-41bc-8cc2-ed82787b90c3/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"434b140a-43b7-41bc-8cc2-ed82787b90c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/434b140a-43b7-41bc-8cc2-ed82787b90c3?source=api-prod","cve":"CVE-2025-39589","affectedVersions":"<=6.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/45ef20aa-18e3-4ad8-a94e-76e29de5b562/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-14 18:35:38","sources":[{"name":"Wordfence","remoteId":"45ef20aa-18e3-4ad8-a94e-76e29de5b562"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/45ef20aa-18e3-4ad8-a94e-76e29de5b562?source=api-prod","cve":"CVE-2024-8961","affectedVersions":"<=6.0.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/4917652a-1c83-4570-98c5-1a34e637814e/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"4917652a-1c83-4570-98c5-1a34e637814e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4917652a-1c83-4570-98c5-1a34e637814e?source=api-prod","cve":"CVE-2025-8451","affectedVersions":"<=6.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/56ba7d1b-7afd-4069-8b18-1158911fce3f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"56ba7d1b-7afd-4069-8b18-1158911fce3f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/56ba7d1b-7afd-4069-8b18-1158911fce3f?source=api-prod","cve":"CVE-2025-69092","affectedVersions":"<=6.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/57ed6c7e-ca8d-476d-adce-905b2cd2eda8/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor  <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 19:27:26","sources":[{"name":"Wordfence","remoteId":"57ed6c7e-ca8d-476d-adce-905b2cd2eda8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57ed6c7e-ca8d-476d-adce-905b2cd2eda8?source=api-prod","cve":"CVE-2024-4449","affectedVersions":"<=5.9.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/5a1d5fd1-80b6-4d62-9837-59ee1e020373/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"5a1d5fd1-80b6-4d62-9837-59ee1e020373"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5a1d5fd1-80b6-4d62-9837-59ee1e020373?source=api-prod","cve":"CVE-2024-5188","affectedVersions":"<=5.9.22","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ad31a9a-d8be-4a68-bbdb-05e4f2c8ad38/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.8.7 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ad31a9a-d8be-4a68-bbdb-05e4f2c8ad38"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ad31a9a-d8be-4a68-bbdb-05e4f2c8ad38?source=api-prod","cve":"CVE-2026-110509","affectedVersions":"<6.8.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b3214a5-7044-4005-a200-c969d4487be2/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-07 23:38:58","sources":[{"name":"Wordfence","remoteId":"5b3214a5-7044-4005-a200-c969d4487be2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b3214a5-7044-4005-a200-c969d4487be2?source=api-prod","cve":"CVE-2026-6459","affectedVersions":"<=6.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/69caeed4-f9e4-426a-9acb-1f52a6251072/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.7.1 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"69caeed4-f9e4-426a-9acb-1f52a6251072"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69caeed4-f9e4-426a-9acb-1f52a6251072?source=api-prod","cve":"CVE-2026-18039","affectedVersions":"<=6.7.1","severity":"high"},{"advisoryId":"WPSECADV/WF/6e770e98-3c13-4e37-b51b-4c39bce2cb42/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e770e98-3c13-4e37-b51b-4c39bce2cb42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e770e98-3c13-4e37-b51b-4c39bce2cb42?source=api-prod","cve":"CVE-2023-7044","affectedVersions":"<=5.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/710e1c2c-4b5d-412c-950d-b5e530abf3a7/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.0.14 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"710e1c2c-4b5d-412c-950d-b5e530abf3a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/710e1c2c-4b5d-412c-950d-b5e530abf3a7?source=api-prod","cve":"CVE-2025-24752","affectedVersions":"<=6.0.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/71378c94-c2e6-43a9-bb8b-f2ffb153f3fe/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"71378c94-c2e6-43a9-bb8b-f2ffb153f3fe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71378c94-c2e6-43a9-bb8b-f2ffb153f3fe?source=api-prod","cve":"CVE-2025-39590","affectedVersions":"<=6.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/718c60c1-6117-4959-a907-d0ef457f7185/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-12 16:05:31","sources":[{"name":"Wordfence","remoteId":"718c60c1-6117-4959-a907-d0ef457f7185"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/718c60c1-6117-4959-a907-d0ef457f7185?source=api-prod","cve":"CVE-2024-7092","affectedVersions":"<=5.9.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/7242d808-9c33-4b3f-bda6-b4b72ca37de9/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"7242d808-9c33-4b3f-bda6-b4b72ca37de9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7242d808-9c33-4b3f-bda6-b4b72ca37de9?source=api-prod","cve":"CVE-2024-2650","affectedVersions":"<=5.9.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/76c292dc-e9da-4256-82df-58ac5def4771/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-12 17:39:27","sources":[{"name":"Wordfence","remoteId":"76c292dc-e9da-4256-82df-58ac5def4771"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76c292dc-e9da-4256-82df-58ac5def4771?source=api-prod","cve":"CVE-2024-8742","affectedVersions":"<=6.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/78f96d7f-aeca-4959-9573-0fb6402de007/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"78f96d7f-aeca-4959-9573-0fb6402de007"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78f96d7f-aeca-4959-9573-0fb6402de007?source=api-prod","cve":"CVE-2024-2974","affectedVersions":"<=5.9.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/81a48c61-4191-4252-9230-9df8fc5e3443/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"81a48c61-4191-4252-9230-9df8fc5e3443"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81a48c61-4191-4252-9230-9df8fc5e3443?source=api-prod","cve":"CVE-2024-1537","affectedVersions":"<=5.9.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/847a4fc7-3580-421e-8045-41b5a85f2d97/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-07 13:19:56","sources":[{"name":"Wordfence","remoteId":"847a4fc7-3580-421e-8045-41b5a85f2d97"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/847a4fc7-3580-421e-8045-41b5a85f2d97?source=api-prod","cve":"CVE-2025-6244","affectedVersions":"<=6.1.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/855ae993-d887-4416-9b3c-8274a90dce5f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-06 21:37:15","sources":[{"name":"Wordfence","remoteId":"855ae993-d887-4416-9b3c-8274a90dce5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/855ae993-d887-4416-9b3c-8274a90dce5f?source=api-prod","cve":"CVE-2024-9994","affectedVersions":"<=6.1.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/861ece65-bee7-4124-b1a8-de9fb0c1cbc7/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-05 14:25:47","sources":[{"name":"Wordfence","remoteId":"861ece65-bee7-4124-b1a8-de9fb0c1cbc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/861ece65-bee7-4124-b1a8-de9fb0c1cbc7?source=api-prod","cve":"CVE-2026-7665","affectedVersions":"<=6.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/875db71d-c799-40b9-95e1-74d53046b0a9/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"875db71d-c799-40b9-95e1-74d53046b0a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/875db71d-c799-40b9-95e1-74d53046b0a9?source=api-prod","cve":"CVE-2024-0954","affectedVersions":"<=5.9.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/8869a4fc-279f-4828-a271-8680d037fa85/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor Lite <= 5.0.8 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"8869a4fc-279f-4828-a271-8680d037fa85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8869a4fc-279f-4828-a271-8680d037fa85?source=api-prod","cve":"CVE-2022-0683","affectedVersions":"<=5.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c13701e-424d-462f-b152-4dc5ad3ef197/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.8.8 - Authenticated (Contributor+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c13701e-424d-462f-b152-4dc5ad3ef197"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c13701e-424d-462f-b152-4dc5ad3ef197?source=api-prod","cve":"CVE-2023-41955","affectedVersions":"<=5.8.8","severity":"high"},{"advisoryId":"WPSECADV/WF/91f50b65-f001-4c73-bfe3-1aed3fc10d26/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 19:28:58","sources":[{"name":"Wordfence","remoteId":"91f50b65-f001-4c73-bfe3-1aed3fc10d26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91f50b65-f001-4c73-bfe3-1aed3fc10d26?source=api-prod","cve":"CVE-2024-4275","affectedVersions":"<=5.9.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/a0de0b28-fbad-4fcf-a7ab-35c545c19a4a/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-16 15:08:24","sources":[{"name":"Wordfence","remoteId":"a0de0b28-fbad-4fcf-a7ab-35c545c19a4a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a0de0b28-fbad-4fcf-a7ab-35c545c19a4a?source=api-prod","cve":"CVE-2025-13977","affectedVersions":"<=6.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a151c680-2bcf-4b36-aa6e-9694c6d3d0c7/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.0 - Unauthenticated Captcha Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"a151c680-2bcf-4b36-aa6e-9694c6d3d0c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a151c680-2bcf-4b36-aa6e-9694c6d3d0c7?source=api-prod","cve":"CVE-2026-81777","affectedVersions":"<=6.8.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2552407-0b32-4129-b131-792305ed023e/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.6.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2552407-0b32-4129-b131-792305ed023e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2552407-0b32-4129-b131-792305ed023e?source=api-prod","cve":"CVE-2026-25440","affectedVersions":"<6.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a7d0811b-0097-4e8e-b585-a83fb807fa74/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.8.7 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a7d0811b-0097-4e8e-b585-a83fb807fa74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a7d0811b-0097-4e8e-b585-a83fb807fa74?source=api-prod","cve":"CVE-2026-110510","affectedVersions":"<6.8.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/a8de8a0b-0b70-4e8a-8cc4-06cc50d06a02/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-06 21:37:20","sources":[{"name":"Wordfence","remoteId":"a8de8a0b-0b70-4e8a-8cc4-06cc50d06a02"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a8de8a0b-0b70-4e8a-8cc4-06cc50d06a02?source=api-prod","cve":"CVE-2024-9993","affectedVersions":"<=6.1.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa5bdaf9-fbde-40d4-a72a-fd24489818b3/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa5bdaf9-fbde-40d4-a72a-fd24489818b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa5bdaf9-fbde-40d4-a72a-fd24489818b3?source=api-prod","cve":"CVE-2024-3333","affectedVersions":"<=5.9.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/aa70238b-530e-4c90-82f4-c3113887d0e1/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"aa70238b-530e-4c90-82f4-c3113887d0e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aa70238b-530e-4c90-82f4-c3113887d0e1?source=api-prod","cve":"CVE-2024-5189","affectedVersions":"<=5.9.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/af8bee01-15bc-485e-8b01-8b68b199b34d/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"af8bee01-15bc-485e-8b01-8b68b199b34d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af8bee01-15bc-485e-8b01-8b68b199b34d?source=api-prod","cve":"CVE-2024-1276","affectedVersions":"<=5.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/b1a9ec33-75da-4165-819d-16b658b42ea9/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.8.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b1a9ec33-75da-4165-819d-16b658b42ea9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b1a9ec33-75da-4165-819d-16b658b42ea9?source=api-prod","cve":"CVE-2026-110537","affectedVersions":"<6.8.7","severity":"low"},{"advisoryId":"WPSECADV/WF/baa92aee-a0a0-45d4-aa12-1449a829930c/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"baa92aee-a0a0-45d4-aa12-1449a829930c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/baa92aee-a0a0-45d4-aa12-1449a829930c?source=api-prod","cve":"CVE-2024-2623","affectedVersions":"<=5.9.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/baae8fb9-b87c-4f61-88da-871c4c83615b/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"baae8fb9-b87c-4f61-88da-871c4c83615b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/baae8fb9-b87c-4f61-88da-871c4c83615b?source=api-prod","cve":"CVE-2024-8978","affectedVersions":"<=6.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/be098ee9-b749-4908-85e8-e717d019609a/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-05-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"be098ee9-b749-4908-85e8-e717d019609a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be098ee9-b749-4908-85e8-e717d019609a?source=api-prod","cve":"CVE-2021-4447","affectedVersions":"<=4.6.4","severity":"high"},{"advisoryId":"WPSECADV/WF/bedad627-0ccb-41c1-be8d-753f57be618f/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"bedad627-0ccb-41c1-be8d-753f57be618f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bedad627-0ccb-41c1-be8d-753f57be618f?source=api-prod","cve":"CVE-2024-4624","affectedVersions":"<=5.9.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/c00ff4bd-d846-4e3f-95ed-2a6430c47ebf/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c00ff4bd-d846-4e3f-95ed-2a6430c47ebf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c00ff4bd-d846-4e3f-95ed-2a6430c47ebf?source=api-prod","cve":"CVE-2024-0586","affectedVersions":"<=5.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c5960396-5320-4978-aa82-2e33700daa43/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-10 17:52:37","sources":[{"name":"Wordfence","remoteId":"c5960396-5320-4978-aa82-2e33700daa43"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5960396-5320-4978-aa82-2e33700daa43?source=api-prod","cve":"CVE-2024-8440","affectedVersions":"<=6.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8db80ef-5863-41dd-b33f-850984a72ee6/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-29 18:31:01","sources":[{"name":"Wordfence","remoteId":"c8db80ef-5863-41dd-b33f-850984a72ee6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8db80ef-5863-41dd-b33f-850984a72ee6?source=api-prod","cve":"CVE-2024-5073","affectedVersions":"<=5.9.21","severity":"medium"},{"advisoryId":"WPSECADV/WF/cbe8cf6c-b1fa-4f71-bb63-c8b181e54882/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 16:46:50","sources":[{"name":"Wordfence","remoteId":"cbe8cf6c-b1fa-4f71-bb63-c8b181e54882"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cbe8cf6c-b1fa-4f71-bb63-c8b181e54882?source=api-prod","cve":"CVE-2026-15155","affectedVersions":"<=6.6.10","severity":"high"},{"advisoryId":"WPSECADV/WF/d652f383-ca3d-440e-a30f-64a50efd65e1/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 21:37:33","sources":[{"name":"Wordfence","remoteId":"d652f383-ca3d-440e-a30f-64a50efd65e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d652f383-ca3d-440e-a30f-64a50efd65e1?source=api-prod","cve":"CVE-2026-1512","affectedVersions":"<=6.5.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/dae80fc2-3076-4a32-876d-5df1c62de9bd/essential-addons-for-elementor-lite","title":"Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"dae80fc2-3076-4a32-876d-5df1c62de9bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dae80fc2-3076-4a32-876d-5df1c62de9bd?source=api-prod","cve":"CVE-2024-5647","affectedVersions":"<=6.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/dde0cf3a-778b-4b5f-ac0e-600505d918ae/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-20 16:10:46","sources":[{"name":"Wordfence","remoteId":"dde0cf3a-778b-4b5f-ac0e-600505d918ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dde0cf3a-778b-4b5f-ac0e-600505d918ae?source=api-prod","cve":"CVE-2026-15156","affectedVersions":"<=6.6.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/de614bbd-42ae-4c2a-aec6-31245124de76/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor Lite <= 4.5.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"de614bbd-42ae-4c2a-aec6-31245124de76"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/de614bbd-42ae-4c2a-aec6-31245124de76?source=api-prod","cve":"CVE-2021-24255","affectedVersions":"<4.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/dfb6961b-1398-409d-ada2-cf5424cb2b73/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"dfb6961b-1398-409d-ada2-cf5424cb2b73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dfb6961b-1398-409d-ada2-cf5424cb2b73?source=api-prod","cve":"CVE-2024-34764","affectedVersions":"<=5.9.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/e007c713-74bc-4ff5-a198-70dcc8a8ee68/essential-addons-for-elementor-lite","title":"Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"e007c713-74bc-4ff5-a198-70dcc8a8ee68"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e007c713-74bc-4ff5-a198-70dcc8a8ee68?source=api-prod","cve":"CVE-2023-3779","affectedVersions":"<=5.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e988d042-147c-4782-b728-71f5a50cecd8/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.7.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"e988d042-147c-4782-b728-71f5a50cecd8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e988d042-147c-4782-b728-71f5a50cecd8?source=api-prod","cve":"CVE-2023-32243","affectedVersions":"<=5.7.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/eee7cad6-7910-4860-add9-c500d1f6eff3/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor <= 5.9.26 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"eee7cad6-7910-4860-add9-c500d1f6eff3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eee7cad6-7910-4860-add9-c500d1f6eff3?source=api-prod","cve":"CVE-2024-39649","affectedVersions":"<=5.9.26","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2ff2cc6-b584-442b-890b-033a0a047c24/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2ff2cc6-b584-442b-890b-033a0a047c24"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2ff2cc6-b584-442b-890b-033a0a047c24?source=api-prod","cve":"CVE-2024-1172","affectedVersions":"<=5.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/fafdd087-9637-41df-bc5a-97e1a02ea744/essential-addons-for-elementor-lite","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"fafdd087-9637-41df-bc5a-97e1a02ea744"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fafdd087-9637-41df-bc5a-97e1a02ea744?source=api-prod","cve":"CVE-2024-1171","affectedVersions":"<=5.9.8","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6576656e74696679811c9dc5_gen.json b/internal/data/assets/plugin_6576656e74696679811c9dc5_gen.json
index 8b049fca..0894e679 100644
--- a/internal/data/assets/plugin_6576656e74696679811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6576656e74696679811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0b95749b-c522-42cd-aa99-36bdf15541c3/eventify","title":"Eventify <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b95749b-c522-42cd-aa99-36bdf15541c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b95749b-c522-42cd-aa99-36bdf15541c3?source=api-prod","cve":"CVE-2022-4110","affectedVersions":"<=2.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0b95749b-c522-42cd-aa99-36bdf15541c3/eventify","title":"Eventify < 2.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b95749b-c522-42cd-aa99-36bdf15541c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b95749b-c522-42cd-aa99-36bdf15541c3?source=api-prod","cve":"CVE-2022-4110","affectedVersions":"<2.2.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_657665726573742d666f726d73811c9dc5_gen.json b/internal/data/assets/plugin_657665726573742d666f726d73811c9dc5_gen.json
index 8b9fcf90..7d15de95 100644
--- a/internal/data/assets/plugin_657665726573742d666f726d73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_657665726573742d666f726d73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0e5617a2-5670-4d98-a36b-942f71634642/everest-forms","title":"Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"0e5617a2-5670-4d98-a36b-942f71634642"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0e5617a2-5670-4d98-a36b-942f71634642?source=api-prod","cve":"CVE-2025-3439","affectedVersions":"<=3.1.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/131614fa-fcaa-4105-b3ce-9926a413dd42/everest-forms","title":"Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"131614fa-fcaa-4105-b3ce-9926a413dd42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/131614fa-fcaa-4105-b3ce-9926a413dd42?source=api-prod","cve":"CVE-2024-8542","affectedVersions":"<=3.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/2693ae37-790d-4b18-a9ec-054c8c27b8bc/everest-forms","title":"Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-07 11:35:53","sources":[{"name":"Wordfence","remoteId":"2693ae37-790d-4b18-a9ec-054c8c27b8bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2693ae37-790d-4b18-a9ec-054c8c27b8bc?source=api-prod","cve":"CVE-2026-3296","affectedVersions":"<=3.4.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/381ec612-2086-4925-98cd-652a6c2ac081/everest-forms","title":"Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"381ec612-2086-4925-98cd-652a6c2ac081"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/381ec612-2086-4925-98cd-652a6c2ac081?source=api-prod","cve":"CVE-2023-51695","affectedVersions":"<=2.0.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3a7524ce-cd8c-45af-b07b-616f63a62bd5/everest-forms","title":"Everest Forms <= 3.4.0 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"3a7524ce-cd8c-45af-b07b-616f63a62bd5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3a7524ce-cd8c-45af-b07b-616f63a62bd5?source=api-prod","cve":"CVE-2026-11571","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d5256ea-61ba-4b2d-90d6-714176bc19aa/everest-forms","title":"Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d5256ea-61ba-4b2d-90d6-714176bc19aa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d5256ea-61ba-4b2d-90d6-714176bc19aa?source=api-prod","cve":"CVE-2019-13575","affectedVersions":"<1.5.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/3db1d9a0-ea68-4979-a36d-864c649f7aca/everest-forms","title":"Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"3db1d9a0-ea68-4979-a36d-864c649f7aca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3db1d9a0-ea68-4979-a36d-864c649f7aca?source=api-prod","cve":"CVE-2025-3422","affectedVersions":"<=3.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6d1ba996-e26c-45cc-ab95-338663f481d9/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"6d1ba996-e26c-45cc-ab95-338663f481d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d1ba996-e26c-45cc-ab95-338663f481d9?source=api-prod","cve":"CVE-2026-13167","affectedVersions":"<=3.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/7f6f1c16-afd6-4c69-8988-70c6c0105748/everest-forms","title":"Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"7f6f1c16-afd6-4c69-8988-70c6c0105748"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f6f1c16-afd6-4c69-8988-70c6c0105748?source=api-prod","cve":"CVE-2024-10471","affectedVersions":"<=3.0.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8641eb53-6a9a-4549-b8ef-e37acbcc7f03/everest-forms","title":"Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-20 07:13:38","sources":[{"name":"Wordfence","remoteId":"8641eb53-6a9a-4549-b8ef-e37acbcc7f03"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8641eb53-6a9a-4549-b8ef-e37acbcc7f03?source=api-prod","cve":"CVE-2026-5478","affectedVersions":"<=3.4.4","severity":"high"},{"advisoryId":"WPSECADV/WF/8b8c85f2-11c7-491f-9b91-0ddf4814e40d/everest-forms","title":"Everest Forms <= 3.4.1 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"8b8c85f2-11c7-491f-9b91-0ddf4814e40d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8b8c85f2-11c7-491f-9b91-0ddf4814e40d?source=api-prod","cve":"CVE-2026-22422","affectedVersions":"<=3.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8bced7df-3e1a-4d7b-9ad0-64be5e18900f/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-27 10:58:29","sources":[{"name":"Wordfence","remoteId":"8bced7df-3e1a-4d7b-9ad0-64be5e18900f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8bced7df-3e1a-4d7b-9ad0-64be5e18900f?source=api-prod","cve":"CVE-2026-4888","affectedVersions":"<=3.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c04d8c9-acad-4832-aa8a-8372c58a0387/everest-forms","title":"Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c04d8c9-acad-4832-aa8a-8372c58a0387"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c04d8c9-acad-4832-aa8a-8372c58a0387?source=api-prod","cve":"CVE-2025-1128","affectedVersions":"<=3.0.9.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/a382aaa3-2acb-4ede-8f6d-438fd96a97e5/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 10:57:04","sources":[{"name":"Wordfence","remoteId":"a382aaa3-2acb-4ede-8f6d-438fd96a97e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a382aaa3-2acb-4ede-8f6d-438fd96a97e5?source=api-prod","cve":"CVE-2026-108491","affectedVersions":"<=3.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/a671a264-81f6-4856-b48c-78f417e4ea0b/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.0 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a671a264-81f6-4856-b48c-78f417e4ea0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a671a264-81f6-4856-b48c-78f417e4ea0b?source=api-prod","cve":"CVE-2026-62103","affectedVersions":"<=3.6.0","severity":"high"},{"advisoryId":"WPSECADV/WF/c5bbf7ed-c154-4153-adbf-59f0f7aa3a18/everest-forms","title":"Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5bbf7ed-c154-4153-adbf-59f0f7aa3a18"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5bbf7ed-c154-4153-adbf-59f0f7aa3a18?source=api-prod","cve":"CVE-2026-5096","affectedVersions":"<=3.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c7cc92aa-2904-41f7-a17a-a60a2dad4681/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 08:05:50","sources":[{"name":"Wordfence","remoteId":"c7cc92aa-2904-41f7-a17a-a60a2dad4681"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c7cc92aa-2904-41f7-a17a-a60a2dad4681?source=api-prod","cve":"CVE-2026-94670","affectedVersions":"<=3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc3d49c5-3054-4e1f-b571-6591a0b31d69/everest-forms","title":"Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"cc3d49c5-3054-4e1f-b571-6591a0b31d69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc3d49c5-3054-4e1f-b571-6591a0b31d69?source=api-prod","cve":"CVE-2023-51377","affectedVersions":"<=2.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/d4561441-d147-4c02-a837-c1656e17627d/everest-forms","title":"Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"d4561441-d147-4c02-a837-c1656e17627d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d4561441-d147-4c02-a837-c1656e17627d?source=api-prod","cve":"CVE-2024-1812","affectedVersions":"<=2.0.7","severity":"high"},{"advisoryId":"WPSECADV/WF/d55737a5-8aa5-4c26-bbb5-bbc5ea8be8d1/everest-forms","title":"Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"d55737a5-8aa5-4c26-bbb5-bbc5ea8be8d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d55737a5-8aa5-4c26-bbb5-bbc5ea8be8d1?source=api-prod","cve":"CVE-2025-3421","affectedVersions":"<=3.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d9c381a0-ce75-40bd-9c2f-eac892ca58d5/everest-forms","title":"Everest Forms <= 3.4.0 - Unauthenticated Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"d9c381a0-ce75-40bd-9c2f-eac892ca58d5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d9c381a0-ce75-40bd-9c2f-eac892ca58d5?source=api-prod","cve":"CVE-2026-12270","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/db1f8575-aff7-43b3-83ed-8fd146914d0e/everest-forms","title":"Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"db1f8575-aff7-43b3-83ed-8fd146914d0e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/db1f8575-aff7-43b3-83ed-8fd146914d0e?source=api-prod","cve":"CVE-2024-13125","affectedVersions":"<=3.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/e5d67eb3-c399-437e-a504-2ccdda7c7882/everest-forms","title":"Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5d67eb3-c399-437e-a504-2ccdda7c7882"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5d67eb3-c399-437e-a504-2ccdda7c7882?source=api-prod","cve":"CVE-2021-24907","affectedVersions":"<1.8.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f63bed1e-b5b1-4c95-9304-8656fa7176e9/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.4.8 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"f63bed1e-b5b1-4c95-9304-8656fa7176e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f63bed1e-b5b1-4c95-9304-8656fa7176e9?source=api-prod","cve":"CVE-2026-57312","affectedVersions":"<=3.4.8","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0e5617a2-5670-4d98-a36b-942f71634642/everest-forms","title":"Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"0e5617a2-5670-4d98-a36b-942f71634642"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0e5617a2-5670-4d98-a36b-942f71634642?source=api-prod","cve":"CVE-2025-3439","affectedVersions":"<=3.1.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/131614fa-fcaa-4105-b3ce-9926a413dd42/everest-forms","title":"Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"131614fa-fcaa-4105-b3ce-9926a413dd42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/131614fa-fcaa-4105-b3ce-9926a413dd42?source=api-prod","cve":"CVE-2024-8542","affectedVersions":"<=3.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/2693ae37-790d-4b18-a9ec-054c8c27b8bc/everest-forms","title":"Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-07 11:35:53","sources":[{"name":"Wordfence","remoteId":"2693ae37-790d-4b18-a9ec-054c8c27b8bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2693ae37-790d-4b18-a9ec-054c8c27b8bc?source=api-prod","cve":"CVE-2026-3296","affectedVersions":"<=3.4.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/381ec612-2086-4925-98cd-652a6c2ac081/everest-forms","title":"Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"381ec612-2086-4925-98cd-652a6c2ac081"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/381ec612-2086-4925-98cd-652a6c2ac081?source=api-prod","cve":"CVE-2023-51695","affectedVersions":"<=2.0.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3a7524ce-cd8c-45af-b07b-616f63a62bd5/everest-forms","title":"Everest Forms <= 3.4.0 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"3a7524ce-cd8c-45af-b07b-616f63a62bd5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3a7524ce-cd8c-45af-b07b-616f63a62bd5?source=api-prod","cve":"CVE-2026-11571","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d5256ea-61ba-4b2d-90d6-714176bc19aa/everest-forms","title":"Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d5256ea-61ba-4b2d-90d6-714176bc19aa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d5256ea-61ba-4b2d-90d6-714176bc19aa?source=api-prod","cve":"CVE-2019-13575","affectedVersions":"<1.5.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/3db1d9a0-ea68-4979-a36d-864c649f7aca/everest-forms","title":"Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"3db1d9a0-ea68-4979-a36d-864c649f7aca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3db1d9a0-ea68-4979-a36d-864c649f7aca?source=api-prod","cve":"CVE-2025-3422","affectedVersions":"<=3.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6d1ba996-e26c-45cc-ab95-338663f481d9/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"6d1ba996-e26c-45cc-ab95-338663f481d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d1ba996-e26c-45cc-ab95-338663f481d9?source=api-prod","cve":"CVE-2026-13167","affectedVersions":"<=3.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/7f6f1c16-afd6-4c69-8988-70c6c0105748/everest-forms","title":"Everest Forms <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"7f6f1c16-afd6-4c69-8988-70c6c0105748"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f6f1c16-afd6-4c69-8988-70c6c0105748?source=api-prod","cve":"CVE-2024-10471","affectedVersions":"<=3.0.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8641eb53-6a9a-4549-b8ef-e37acbcc7f03/everest-forms","title":"Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-20 07:13:38","sources":[{"name":"Wordfence","remoteId":"8641eb53-6a9a-4549-b8ef-e37acbcc7f03"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8641eb53-6a9a-4549-b8ef-e37acbcc7f03?source=api-prod","cve":"CVE-2026-5478","affectedVersions":"<=3.4.4","severity":"high"},{"advisoryId":"WPSECADV/WF/8a017198-daf1-4779-a101-dc539e263e50/everest-forms","title":"Everest Forms <= 3.6.2 - Reflected Cross-Site Scripting via 'evf_toast_type' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 20:44:14","sources":[{"name":"Wordfence","remoteId":"8a017198-daf1-4779-a101-dc539e263e50"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a017198-daf1-4779-a101-dc539e263e50?source=api-prod","cve":"CVE-2026-91152","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8b8c85f2-11c7-491f-9b91-0ddf4814e40d/everest-forms","title":"Everest Forms <= 3.4.1 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"8b8c85f2-11c7-491f-9b91-0ddf4814e40d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8b8c85f2-11c7-491f-9b91-0ddf4814e40d?source=api-prod","cve":"CVE-2026-22422","affectedVersions":"<=3.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8bced7df-3e1a-4d7b-9ad0-64be5e18900f/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-27 10:58:29","sources":[{"name":"Wordfence","remoteId":"8bced7df-3e1a-4d7b-9ad0-64be5e18900f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8bced7df-3e1a-4d7b-9ad0-64be5e18900f?source=api-prod","cve":"CVE-2026-4888","affectedVersions":"<=3.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c04d8c9-acad-4832-aa8a-8372c58a0387/everest-forms","title":"Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c04d8c9-acad-4832-aa8a-8372c58a0387"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c04d8c9-acad-4832-aa8a-8372c58a0387?source=api-prod","cve":"CVE-2025-1128","affectedVersions":"<=3.0.9.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/a382aaa3-2acb-4ede-8f6d-438fd96a97e5/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 10:57:04","sources":[{"name":"Wordfence","remoteId":"a382aaa3-2acb-4ede-8f6d-438fd96a97e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a382aaa3-2acb-4ede-8f6d-438fd96a97e5?source=api-prod","cve":"CVE-2026-108491","affectedVersions":"<=3.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/a671a264-81f6-4856-b48c-78f417e4ea0b/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.0 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a671a264-81f6-4856-b48c-78f417e4ea0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a671a264-81f6-4856-b48c-78f417e4ea0b?source=api-prod","cve":"CVE-2026-62103","affectedVersions":"<=3.6.0","severity":"high"},{"advisoryId":"WPSECADV/WF/b820a342-3aaa-4782-9d82-afe53028b72c/everest-forms","title":"Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 20:44:11","sources":[{"name":"Wordfence","remoteId":"b820a342-3aaa-4782-9d82-afe53028b72c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b820a342-3aaa-4782-9d82-afe53028b72c?source=api-prod","cve":"CVE-2026-91153","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c5bbf7ed-c154-4153-adbf-59f0f7aa3a18/everest-forms","title":"Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5bbf7ed-c154-4153-adbf-59f0f7aa3a18"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5bbf7ed-c154-4153-adbf-59f0f7aa3a18?source=api-prod","cve":"CVE-2026-5096","affectedVersions":"<=3.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c7cc92aa-2904-41f7-a17a-a60a2dad4681/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 08:05:50","sources":[{"name":"Wordfence","remoteId":"c7cc92aa-2904-41f7-a17a-a60a2dad4681"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c7cc92aa-2904-41f7-a17a-a60a2dad4681?source=api-prod","cve":"CVE-2026-94670","affectedVersions":"<=3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc3d49c5-3054-4e1f-b571-6591a0b31d69/everest-forms","title":"Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"cc3d49c5-3054-4e1f-b571-6591a0b31d69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc3d49c5-3054-4e1f-b571-6591a0b31d69?source=api-prod","cve":"CVE-2023-51377","affectedVersions":"<=2.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/d4561441-d147-4c02-a837-c1656e17627d/everest-forms","title":"Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"d4561441-d147-4c02-a837-c1656e17627d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d4561441-d147-4c02-a837-c1656e17627d?source=api-prod","cve":"CVE-2024-1812","affectedVersions":"<=2.0.7","severity":"high"},{"advisoryId":"WPSECADV/WF/d55737a5-8aa5-4c26-bbb5-bbc5ea8be8d1/everest-forms","title":"Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"d55737a5-8aa5-4c26-bbb5-bbc5ea8be8d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d55737a5-8aa5-4c26-bbb5-bbc5ea8be8d1?source=api-prod","cve":"CVE-2025-3421","affectedVersions":"<=3.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d9c381a0-ce75-40bd-9c2f-eac892ca58d5/everest-forms","title":"Everest Forms <= 3.4.0 - Unauthenticated Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"d9c381a0-ce75-40bd-9c2f-eac892ca58d5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d9c381a0-ce75-40bd-9c2f-eac892ca58d5?source=api-prod","cve":"CVE-2026-12270","affectedVersions":"<=3.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/db1f8575-aff7-43b3-83ed-8fd146914d0e/everest-forms","title":"Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"db1f8575-aff7-43b3-83ed-8fd146914d0e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/db1f8575-aff7-43b3-83ed-8fd146914d0e?source=api-prod","cve":"CVE-2024-13125","affectedVersions":"<=3.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/e5d67eb3-c399-437e-a504-2ccdda7c7882/everest-forms","title":"Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5d67eb3-c399-437e-a504-2ccdda7c7882"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5d67eb3-c399-437e-a504-2ccdda7c7882?source=api-prod","cve":"CVE-2021-24907","affectedVersions":"<1.8.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f63bed1e-b5b1-4c95-9304-8656fa7176e9/everest-forms","title":"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.4.8 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"f63bed1e-b5b1-4c95-9304-8656fa7176e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f63bed1e-b5b1-4c95-9304-8656fa7176e9?source=api-prod","cve":"CVE-2026-57312","affectedVersions":"<=3.4.8","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_657874656e73696f6e732d6c6561666c65742d6d6170811c9dc5_gen.json b/internal/data/assets/plugin_657874656e73696f6e732d6c6561666c65742d6d6170811c9dc5_gen.json
index 1d324832..246a0273 100644
--- a/internal/data/assets/plugin_657874656e73696f6e732d6c6561666c65742d6d6170811c9dc5_gen.json
+++ b/internal/data/assets/plugin_657874656e73696f6e732d6c6561666c65742d6d6170811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/5fb089ba-d66b-4cf4-a0cc-22cb76358b5e/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"5fb089ba-d66b-4cf4-a0cc-22cb76358b5e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5fb089ba-d66b-4cf4-a0cc-22cb76358b5e?source=api-prod","cve":"CVE-2025-66093","affectedVersions":"<=4.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/6be74779-4db7-4d44-a706-285375f4fec9/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-03 15:33:02","sources":[{"name":"Wordfence","remoteId":"6be74779-4db7-4d44-a706-285375f4fec9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6be74779-4db7-4d44-a706-285375f4fec9?source=api-prod","cve":"CVE-2025-12369","affectedVersions":"<=4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/7749c45a-f956-4df6-98d0-5ec0db95185e/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'elevation-track' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"7749c45a-f956-4df6-98d0-5ec0db95185e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7749c45a-f956-4df6-98d0-5ec0db95185e?source=api-prod","cve":"CVE-2026-5451","affectedVersions":"<=4.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d2c5f6e-10d1-427b-88d5-4328268ee76b/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 08:59:00","sources":[{"name":"Wordfence","remoteId":"8d2c5f6e-10d1-427b-88d5-4328268ee76b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d2c5f6e-10d1-427b-88d5-4328268ee76b?source=api-prod","cve":"CVE-2026-114703","affectedVersions":"<=6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e332a52-071c-4725-99db-3cc10ee50230/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 3.4.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e332a52-071c-4725-99db-3cc10ee50230"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e332a52-071c-4725-99db-3cc10ee50230?source=api-prod","cve":"CVE-2023-31074","affectedVersions":"<=3.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/92d94f9a-150f-40ca-88e1-57cbd6e6880a/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 5.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"92d94f9a-150f-40ca-88e1-57cbd6e6880a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92d94f9a-150f-40ca-88e1-57cbd6e6880a?source=api-prod","cve":"CVE-2026-57380","affectedVersions":"<=5.1","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/00c5eb87-3e08-489a-9b30-2fde4aa2274e/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via External GeoJSON Property\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 20:45:22","sources":[{"name":"Wordfence","remoteId":"00c5eb87-3e08-489a-9b30-2fde4aa2274e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/00c5eb87-3e08-489a-9b30-2fde4aa2274e?source=api-prod","cve":"CVE-2026-103485","affectedVersions":"<=5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5fb089ba-d66b-4cf4-a0cc-22cb76358b5e/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"5fb089ba-d66b-4cf4-a0cc-22cb76358b5e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5fb089ba-d66b-4cf4-a0cc-22cb76358b5e?source=api-prod","cve":"CVE-2025-66093","affectedVersions":"<=4.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/6be74779-4db7-4d44-a706-285375f4fec9/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-03 15:33:02","sources":[{"name":"Wordfence","remoteId":"6be74779-4db7-4d44-a706-285375f4fec9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6be74779-4db7-4d44-a706-285375f4fec9?source=api-prod","cve":"CVE-2025-12369","affectedVersions":"<=4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/7749c45a-f956-4df6-98d0-5ec0db95185e/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'elevation-track' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"7749c45a-f956-4df6-98d0-5ec0db95185e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7749c45a-f956-4df6-98d0-5ec0db95185e?source=api-prod","cve":"CVE-2026-5451","affectedVersions":"<=4.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d2c5f6e-10d1-427b-88d5-4328268ee76b/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 08:59:00","sources":[{"name":"Wordfence","remoteId":"8d2c5f6e-10d1-427b-88d5-4328268ee76b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d2c5f6e-10d1-427b-88d5-4328268ee76b?source=api-prod","cve":"CVE-2026-114703","affectedVersions":"<=6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e332a52-071c-4725-99db-3cc10ee50230/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 3.4.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e332a52-071c-4725-99db-3cc10ee50230"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e332a52-071c-4725-99db-3cc10ee50230?source=api-prod","cve":"CVE-2023-31074","affectedVersions":"<=3.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/92d94f9a-150f-40ca-88e1-57cbd6e6880a/extensions-leaflet-map","title":"Extensions for Leaflet Map <= 5.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"92d94f9a-150f-40ca-88e1-57cbd6e6880a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92d94f9a-150f-40ca-88e1-57cbd6e6880a?source=api-prod","cve":"CVE-2026-57380","affectedVersions":"<=5.1","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_666565647a792d7273732d6665656473811c9dc5_gen.json b/internal/data/assets/plugin_666565647a792d7273732d6665656473811c9dc5_gen.json
index 85f39ced..781bc426 100644
--- a/internal/data/assets/plugin_666565647a792d7273732d6665656473811c9dc5_gen.json
+++ b/internal/data/assets/plugin_666565647a792d7273732d6665656473811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/181ad412-2c16-4866-b477-7ce65996adb9/feedzy-rss-feeds","title":"Feedzy <= 5.2.4 - Authenticated (Contributor+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"181ad412-2c16-4866-b477-7ce65996adb9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/181ad412-2c16-4866-b477-7ce65996adb9?source=api-prod","cve":"CVE-2026-66437","affectedVersions":"<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/181edcec-a57d-4516-935d-6777d2de77ae/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"181edcec-a57d-4516-935d-6777d2de77ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/181edcec-a57d-4516-935d-6777d2de77ae?source=api-prod","cve":"CVE-2024-1318","affectedVersions":"<=4.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/46978e1d-7adb-49f6-8e41-093f177c9a4d/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"46978e1d-7adb-49f6-8e41-093f177c9a4d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=api-prod","cve":"CVE-2023-6805","affectedVersions":"<=4.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/515339da-c4dc-4bda-99b7-49f326ef2ab0/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.2.5 - Missing Authorization to Authenticated (Author+) Cross-User Import Job Manipulation and Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"515339da-c4dc-4bda-99b7-49f326ef2ab0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/515339da-c4dc-4bda-99b7-49f326ef2ab0?source=api-prod","cve":"CVE-2026-18934","affectedVersions":"<=5.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/5754dce7-6b47-4490-a04a-7eabfded0720/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-10 12:23:54","sources":[{"name":"Wordfence","remoteId":"5754dce7-6b47-4490-a04a-7eabfded0720"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5754dce7-6b47-4490-a04a-7eabfded0720?source=api-prod","cve":"CVE-2025-11467","affectedVersions":"<=5.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6147582f-578a-47ad-b16c-65c37896783d/feedzy-rss-feeds","title":"ThemeIsle SDK  <= Various Versions - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"6147582f-578a-47ad-b16c-65c37896783d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6147582f-578a-47ad-b16c-65c37896783d?source=api-prod","cve":"CVE-2024-1047","affectedVersions":"<=4.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7d25e85f-28f7-4cc5-9856-25cc5aaf1418/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error Message\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d25e85f-28f7-4cc5-9856-25cc5aaf1418"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d25e85f-28f7-4cc5-9856-25cc5aaf1418?source=api-prod","cve":"CVE-2023-6877","affectedVersions":"<=4.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/98053141-fe97-4bd4-b820-b6cca3426109/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"98053141-fe97-4bd4-b820-b6cca3426109"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98053141-fe97-4bd4-b820-b6cca3426109?source=api-prod","cve":"CVE-2024-1092","affectedVersions":"<=4.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a15a6cf2-aa7d-454c-83d2-9d74ce4505be/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:41:09","sources":[{"name":"Wordfence","remoteId":"a15a6cf2-aa7d-454c-83d2-9d74ce4505be"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a15a6cf2-aa7d-454c-83d2-9d74ce4505be?source=api-prod","cve":"CVE-2026-104735","affectedVersions":"<=5.2.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/a713d897-c549-4e0d-9cb3-7002ef2b127f/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"a713d897-c549-4e0d-9cb3-7002ef2b127f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a713d897-c549-4e0d-9cb3-7002ef2b127f?source=api-prod","cve":"CVE-2023-6801","affectedVersions":"<=4.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ab1d8bcb-688a-4763-970a-c960925cf0b6/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 15:31:40","sources":[{"name":"Wordfence","remoteId":"ab1d8bcb-688a-4763-970a-c960925cf0b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ab1d8bcb-688a-4763-970a-c960925cf0b6?source=api-prod","cve":"CVE-2026-109207","affectedVersions":"<=5.2.11","severity":"high"},{"advisoryId":"WPSECADV/WF/c2cdf4e5-0a40-42ca-b5ac-78511fdd2b77/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2cdf4e5-0a40-42ca-b5ac-78511fdd2b77"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2cdf4e5-0a40-42ca-b5ac-78511fdd2b77?source=api-prod","cve":"CVE-2023-6798","affectedVersions":"<=4.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c33ec58f-3e83-425a-9f0f-5e529be15e05/feedzy-rss-feeds","title":"Feedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"c33ec58f-3e83-425a-9f0f-5e529be15e05"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c33ec58f-3e83-425a-9f0f-5e529be15e05?source=api-prod","cve":"CVE-2025-11128","affectedVersions":"<=5.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/cf57aeaa-e37e-4b22-aeaa-f0a9f4877484/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"cf57aeaa-e37e-4b22-aeaa-f0a9f4877484"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cf57aeaa-e37e-4b22-aeaa-f0a9f4877484?source=api-prod","cve":"CVE-2024-1317","affectedVersions":"<=4.4.2","severity":"high"},{"advisoryId":"WPSECADV/WF/d402b7d1-3c12-4bdd-8ff3-e58d5501f0c0/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aspectRatio' Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-01 20:08:52","sources":[{"name":"Wordfence","remoteId":"d402b7d1-3c12-4bdd-8ff3-e58d5501f0c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d402b7d1-3c12-4bdd-8ff3-e58d5501f0c0?source=api-prod","cve":"CVE-2026-13252","affectedVersions":"<=5.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d78ac022-6f07-4da5-a657-cafa78dc1845/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"d78ac022-6f07-4da5-a657-cafa78dc1845"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d78ac022-6f07-4da5-a657-cafa78dc1845?source=api-prod","cve":"CVE-2022-4667","affectedVersions":"<=4.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3b916dc-3b94-4319-a805-0ea99d14429f/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-09-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3b916dc-3b94-4319-a805-0ea99d14429f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3b916dc-3b94-4319-a805-0ea99d14429f?source=api-prod","cve":"CVE-2020-36758","affectedVersions":"<3.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e495c215-2e01-4a37-aca3-99a067c46791/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.1.7 - Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure via Multiple AJAX Sub-Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-05 10:46:18","sources":[{"name":"Wordfence","remoteId":"e495c215-2e01-4a37-aca3-99a067c46791"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e495c215-2e01-4a37-aca3-99a067c46791?source=api-prod","cve":"CVE-2026-8976","affectedVersions":"<=5.1.7","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/181ad412-2c16-4866-b477-7ce65996adb9/feedzy-rss-feeds","title":"Feedzy <= 5.2.4 - Authenticated (Contributor+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"181ad412-2c16-4866-b477-7ce65996adb9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/181ad412-2c16-4866-b477-7ce65996adb9?source=api-prod","cve":"CVE-2026-66437","affectedVersions":"<=5.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/181edcec-a57d-4516-935d-6777d2de77ae/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"181edcec-a57d-4516-935d-6777d2de77ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/181edcec-a57d-4516-935d-6777d2de77ae?source=api-prod","cve":"CVE-2024-1318","affectedVersions":"<=4.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/46978e1d-7adb-49f6-8e41-093f177c9a4d/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"46978e1d-7adb-49f6-8e41-093f177c9a4d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=api-prod","cve":"CVE-2023-6805","affectedVersions":"<=4.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/47c7e74e-91cb-4bfa-8c21-c60ca0b8cb47/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Element\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 20:46:33","sources":[{"name":"Wordfence","remoteId":"47c7e74e-91cb-4bfa-8c21-c60ca0b8cb47"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/47c7e74e-91cb-4bfa-8c21-c60ca0b8cb47?source=api-prod","cve":"CVE-2026-110707","affectedVersions":"<=5.2.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/515339da-c4dc-4bda-99b7-49f326ef2ab0/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.2.5 - Missing Authorization to Authenticated (Author+) Cross-User Import Job Manipulation and Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"515339da-c4dc-4bda-99b7-49f326ef2ab0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/515339da-c4dc-4bda-99b7-49f326ef2ab0?source=api-prod","cve":"CVE-2026-18934","affectedVersions":"<=5.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/5754dce7-6b47-4490-a04a-7eabfded0720/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-10 12:23:54","sources":[{"name":"Wordfence","remoteId":"5754dce7-6b47-4490-a04a-7eabfded0720"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5754dce7-6b47-4490-a04a-7eabfded0720?source=api-prod","cve":"CVE-2025-11467","affectedVersions":"<=5.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6147582f-578a-47ad-b16c-65c37896783d/feedzy-rss-feeds","title":"ThemeIsle SDK  <= Various Versions - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"6147582f-578a-47ad-b16c-65c37896783d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6147582f-578a-47ad-b16c-65c37896783d?source=api-prod","cve":"CVE-2024-1047","affectedVersions":"<=4.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7d25e85f-28f7-4cc5-9856-25cc5aaf1418/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error Message\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d25e85f-28f7-4cc5-9856-25cc5aaf1418"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d25e85f-28f7-4cc5-9856-25cc5aaf1418?source=api-prod","cve":"CVE-2023-6877","affectedVersions":"<=4.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/98053141-fe97-4bd4-b820-b6cca3426109/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"98053141-fe97-4bd4-b820-b6cca3426109"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98053141-fe97-4bd4-b820-b6cca3426109?source=api-prod","cve":"CVE-2024-1092","affectedVersions":"<=4.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a15a6cf2-aa7d-454c-83d2-9d74ce4505be/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:41:09","sources":[{"name":"Wordfence","remoteId":"a15a6cf2-aa7d-454c-83d2-9d74ce4505be"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a15a6cf2-aa7d-454c-83d2-9d74ce4505be?source=api-prod","cve":"CVE-2026-104735","affectedVersions":"<=5.2.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/a713d897-c549-4e0d-9cb3-7002ef2b127f/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"a713d897-c549-4e0d-9cb3-7002ef2b127f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a713d897-c549-4e0d-9cb3-7002ef2b127f?source=api-prod","cve":"CVE-2023-6801","affectedVersions":"<=4.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ab1d8bcb-688a-4763-970a-c960925cf0b6/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 15:31:40","sources":[{"name":"Wordfence","remoteId":"ab1d8bcb-688a-4763-970a-c960925cf0b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ab1d8bcb-688a-4763-970a-c960925cf0b6?source=api-prod","cve":"CVE-2026-109207","affectedVersions":"<=5.2.11","severity":"high"},{"advisoryId":"WPSECADV/WF/c2cdf4e5-0a40-42ca-b5ac-78511fdd2b77/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2cdf4e5-0a40-42ca-b5ac-78511fdd2b77"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2cdf4e5-0a40-42ca-b5ac-78511fdd2b77?source=api-prod","cve":"CVE-2023-6798","affectedVersions":"<=4.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c33ec58f-3e83-425a-9f0f-5e529be15e05/feedzy-rss-feeds","title":"Feedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"c33ec58f-3e83-425a-9f0f-5e529be15e05"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c33ec58f-3e83-425a-9f0f-5e529be15e05?source=api-prod","cve":"CVE-2025-11128","affectedVersions":"<=5.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/cf57aeaa-e37e-4b22-aeaa-f0a9f4877484/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"cf57aeaa-e37e-4b22-aeaa-f0a9f4877484"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cf57aeaa-e37e-4b22-aeaa-f0a9f4877484?source=api-prod","cve":"CVE-2024-1317","affectedVersions":"<=4.4.2","severity":"high"},{"advisoryId":"WPSECADV/WF/d402b7d1-3c12-4bdd-8ff3-e58d5501f0c0/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aspectRatio' Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-01 20:08:52","sources":[{"name":"Wordfence","remoteId":"d402b7d1-3c12-4bdd-8ff3-e58d5501f0c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d402b7d1-3c12-4bdd-8ff3-e58d5501f0c0?source=api-prod","cve":"CVE-2026-13252","affectedVersions":"<=5.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d78ac022-6f07-4da5-a657-cafa78dc1845/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"d78ac022-6f07-4da5-a657-cafa78dc1845"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d78ac022-6f07-4da5-a657-cafa78dc1845?source=api-prod","cve":"CVE-2022-4667","affectedVersions":"<=4.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3b916dc-3b94-4319-a805-0ea99d14429f/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-09-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3b916dc-3b94-4319-a805-0ea99d14429f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3b916dc-3b94-4319-a805-0ea99d14429f?source=api-prod","cve":"CVE-2020-36758","affectedVersions":"<3.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e495c215-2e01-4a37-aca3-99a067c46791/feedzy-rss-feeds","title":"RSS Aggregator by Feedzy <= 5.1.7 - Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure via Multiple AJAX Sub-Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-05 10:46:18","sources":[{"name":"Wordfence","remoteId":"e495c215-2e01-4a37-aca3-99a067c46791"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e495c215-2e01-4a37-aca3-99a067c46791?source=api-prod","cve":"CVE-2026-8976","affectedVersions":"<=5.1.7","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_666f6f642d73746f7265811c9dc5_gen.json b/internal/data/assets/plugin_666f6f642d73746f7265811c9dc5_gen.json
index eed0387b..1021ebb5 100644
--- a/internal/data/assets/plugin_666f6f642d73746f7265811c9dc5_gen.json
+++ b/internal/data/assets/plugin_666f6f642d73746f7265811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/1f2d149b-fe63-4fa3-b840-02dc8c5f9323/food-store","title":"Food Store < 1.3.7 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"1f2d149b-fe63-4fa3-b840-02dc8c5f9323"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f2d149b-fe63-4fa3-b840-02dc8c5f9323?source=api-prod","affectedVersions":"<1.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/food-store","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5dabf766-b288-48c1-8e89-f910d7ecf8a8/food-store","title":"Food Store – Online Food Delivery & Pickup <= 1.5.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"5dabf766-b288-48c1-8e89-f910d7ecf8a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5dabf766-b288-48c1-8e89-f910d7ecf8a8?source=api-prod","cve":"CVE-2025-22314","affectedVersions":"<=1.5.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/1f2d149b-fe63-4fa3-b840-02dc8c5f9323/food-store","title":"Food Store < 1.3.7 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"1f2d149b-fe63-4fa3-b840-02dc8c5f9323"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f2d149b-fe63-4fa3-b840-02dc8c5f9323?source=api-prod","affectedVersions":"<1.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/food-store","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5dabf766-b288-48c1-8e89-f910d7ecf8a8/food-store","title":"Food Store – Online Food Delivery & Pickup <= 1.5.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"5dabf766-b288-48c1-8e89-f910d7ecf8a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5dabf766-b288-48c1-8e89-f910d7ecf8a8?source=api-prod","cve":"CVE-2025-22314","affectedVersions":"<=1.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/60725f12-6219-4c5e-8b5c-e925f0837ddb/food-store","title":"Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_type' Cookie\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 14:45:01","sources":[{"name":"Wordfence","remoteId":"60725f12-6219-4c5e-8b5c-e925f0837ddb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/60725f12-6219-4c5e-8b5c-e925f0837ddb?source=api-prod","cve":"CVE-2026-96669","affectedVersions":"<=1.5.5","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_66756e6e656c666f726d732d66726565811c9dc5_gen.json b/internal/data/assets/plugin_66756e6e656c666f726d732d66726565811c9dc5_gen.json
index 610c2e25..4623e5ec 100644
--- a/internal/data/assets/plugin_66756e6e656c666f726d732d66726565811c9dc5_gen.json
+++ b/internal/data/assets/plugin_66756e6e656c666f726d732d66726565811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/148794ea-3bc9-4084-bdb9-6ee63a781a39/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Category Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"148794ea-3bc9-4084-bdb9-6ee63a781a39"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/148794ea-3bc9-4084-bdb9-6ee63a781a39?source=api-prod","cve":"CVE-2023-5417","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/312dabb0-9ae8-41a0-80b3-f4962c8066de/funnelforms-free","title":"Funnelforms Free <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"312dabb0-9ae8-41a0-80b3-f4962c8066de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/312dabb0-9ae8-41a0-80b3-f4962c8066de?source=api-prod","cve":"CVE-2025-62758","affectedVersions":"<=3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e815531-f966-44a1-a037-8077a40c83b0/funnelforms-free","title":"Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e815531-f966-44a1-a037-8077a40c83b0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e815531-f966-44a1-a037-8077a40c83b0?source=api-prod","cve":"CVE-2024-6312","affectedVersions":"<=3.7.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/400fe58b-8203-4fd5-a3d3-d30eb1b8cd85/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"400fe58b-8203-4fd5-a3d3-d30eb1b8cd85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/400fe58b-8203-4fd5-a3d3-d30eb1b8cd85?source=api-prod","cve":"CVE-2023-5386","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/funnelforms-free","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":">=3.2.9,<=3.3.8.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5cd0e015-abf2-4905-8b42-46b685be2c74/funnelforms-free","title":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5cd0e015-abf2-4905-8b42-46b685be2c74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5cd0e015-abf2-4905-8b42-46b685be2c74?source=api-prod","cve":"CVE-2024-5857","affectedVersions":"<=3.7.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/64248d15-e6a7-442f-b269-e9f629d297d3/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"64248d15-e6a7-442f-b269-e9f629d297d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64248d15-e6a7-442f-b269-e9f629d297d3?source=api-prod","cve":"CVE-2023-5419","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/6ec3051e-a5e4-48ee-8f8e-eb5dbc482f33/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to New Category Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"6ec3051e-a5e4-48ee-8f8e-eb5dbc482f33"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ec3051e-a5e4-48ee-8f8e-eb5dbc482f33?source=api-prod","cve":"CVE-2023-5415","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/701e6afe-08fa-49c7-a6da-cb266db07c48/funnelforms-free","title":"Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-03 14:17:47","sources":[{"name":"Wordfence","remoteId":"701e6afe-08fa-49c7-a6da-cb266db07c48"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/701e6afe-08fa-49c7-a6da-cb266db07c48?source=api-prod","cve":"CVE-2024-10587","affectedVersions":"<=3.7.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/72e4428b-d2cd-471f-9821-947f4601fd64/funnelforms-free","title":"Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"72e4428b-d2cd-471f-9821-947f4601fd64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72e4428b-d2cd-471f-9821-947f4601fd64?source=api-prod","cve":"CVE-2023-5382","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/816f5fc1-e4e6-4c0d-b222-fe733f026e33/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Post Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"816f5fc1-e4e6-4c0d-b222-fe733f026e33"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/816f5fc1-e4e6-4c0d-b222-fe733f026e33?source=api-prod","cve":"CVE-2023-5411","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/9871f683-136e-45b5-90fb-a373a771014b/funnelforms-free","title":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"9871f683-136e-45b5-90fb-a373a771014b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9871f683-136e-45b5-90fb-a373a771014b?source=api-prod","cve":"CVE-2024-7447","affectedVersions":"<=3.7.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/992fc98f-4b23-4596-81fb-5543d82fd615/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"992fc98f-4b23-4596-81fb-5543d82fd615"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/992fc98f-4b23-4596-81fb-5543d82fd615?source=api-prod","cve":"CVE-2023-5416","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/acd85c0c-7f48-4b09-a44f-7f0858c68616/funnelforms-free","title":"Funnelforms Free <= 3.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"acd85c0c-7f48-4b09-a44f-7f0858c68616"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/acd85c0c-7f48-4b09-a44f-7f0858c68616?source=api-prod","cve":"CVE-2025-68582","affectedVersions":"<=3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/cbd42fc4-ab4a-4053-b765-18272eacd2bc/funnelforms-free","title":"Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"cbd42fc4-ab4a-4053-b765-18272eacd2bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cbd42fc4-ab4a-4053-b765-18272eacd2bc?source=api-prod","cve":"CVE-2024-6311","affectedVersions":"<=3.7.3.2","severity":"high"},{"advisoryId":"WPSECADV/WF/ccb34b44-9fa4-4ebe-b217-b2a42920247f/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"ccb34b44-9fa4-4ebe-b217-b2a42920247f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ccb34b44-9fa4-4ebe-b217-b2a42920247f?source=api-prod","cve":"CVE-2023-5387","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/d35ec0f0-fa7a-4531-b5f7-5adcf2af051c/funnelforms-free","title":"Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"d35ec0f0-fa7a-4531-b5f7-5adcf2af051c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d35ec0f0-fa7a-4531-b5f7-5adcf2af051c?source=api-prod","cve":"CVE-2023-5383","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/e2719afc-e52c-4fcc-b030-2f6aaddb5ab9/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"e2719afc-e52c-4fcc-b030-2f6aaddb5ab9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e2719afc-e52c-4fcc-b030-2f6aaddb5ab9?source=api-prod","cve":"CVE-2023-5385","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/ebcbf872-1420-4a57-a4b4-8a52ba74e0a1/funnelforms-free","title":"Funnelforms Free <= 3.3.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ebcbf872-1420-4a57-a4b4-8a52ba74e0a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ebcbf872-1420-4a57-a4b4-8a52ba74e0a1?source=api-prod","cve":"CVE-2023-4950","affectedVersions":"<3.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/148794ea-3bc9-4084-bdb9-6ee63a781a39/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Category Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"148794ea-3bc9-4084-bdb9-6ee63a781a39"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/148794ea-3bc9-4084-bdb9-6ee63a781a39?source=api-prod","cve":"CVE-2023-5417","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/312dabb0-9ae8-41a0-80b3-f4962c8066de/funnelforms-free","title":"Funnelforms Free <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"312dabb0-9ae8-41a0-80b3-f4962c8066de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/312dabb0-9ae8-41a0-80b3-f4962c8066de?source=api-prod","cve":"CVE-2025-62758","affectedVersions":"<=3.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e815531-f966-44a1-a037-8077a40c83b0/funnelforms-free","title":"Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e815531-f966-44a1-a037-8077a40c83b0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e815531-f966-44a1-a037-8077a40c83b0?source=api-prod","cve":"CVE-2024-6312","affectedVersions":"<=3.7.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/400fe58b-8203-4fd5-a3d3-d30eb1b8cd85/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"400fe58b-8203-4fd5-a3d3-d30eb1b8cd85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/400fe58b-8203-4fd5-a3d3-d30eb1b8cd85?source=api-prod","cve":"CVE-2023-5386","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/funnelforms-free","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":">=3.2.9,<=3.3.8.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5cd0e015-abf2-4905-8b42-46b685be2c74/funnelforms-free","title":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5cd0e015-abf2-4905-8b42-46b685be2c74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5cd0e015-abf2-4905-8b42-46b685be2c74?source=api-prod","cve":"CVE-2024-5857","affectedVersions":"<=3.7.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/64248d15-e6a7-442f-b269-e9f629d297d3/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"64248d15-e6a7-442f-b269-e9f629d297d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64248d15-e6a7-442f-b269-e9f629d297d3?source=api-prod","cve":"CVE-2023-5419","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/6ec3051e-a5e4-48ee-8f8e-eb5dbc482f33/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to New Category Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"6ec3051e-a5e4-48ee-8f8e-eb5dbc482f33"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ec3051e-a5e4-48ee-8f8e-eb5dbc482f33?source=api-prod","cve":"CVE-2023-5415","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/701e6afe-08fa-49c7-a6da-cb266db07c48/funnelforms-free","title":"Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-03 14:17:47","sources":[{"name":"Wordfence","remoteId":"701e6afe-08fa-49c7-a6da-cb266db07c48"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/701e6afe-08fa-49c7-a6da-cb266db07c48?source=api-prod","cve":"CVE-2024-10587","affectedVersions":"<=3.7.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/72e4428b-d2cd-471f-9821-947f4601fd64/funnelforms-free","title":"Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"72e4428b-d2cd-471f-9821-947f4601fd64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72e4428b-d2cd-471f-9821-947f4601fd64?source=api-prod","cve":"CVE-2023-5382","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/816f5fc1-e4e6-4c0d-b222-fe733f026e33/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Post Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"816f5fc1-e4e6-4c0d-b222-fe733f026e33"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/816f5fc1-e4e6-4c0d-b222-fe733f026e33?source=api-prod","cve":"CVE-2023-5411","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/9871f683-136e-45b5-90fb-a373a771014b/funnelforms-free","title":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"9871f683-136e-45b5-90fb-a373a771014b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9871f683-136e-45b5-90fb-a373a771014b?source=api-prod","cve":"CVE-2024-7447","affectedVersions":"<=3.7.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/992fc98f-4b23-4596-81fb-5543d82fd615/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"992fc98f-4b23-4596-81fb-5543d82fd615"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/992fc98f-4b23-4596-81fb-5543d82fd615?source=api-prod","cve":"CVE-2023-5416","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/acd85c0c-7f48-4b09-a44f-7f0858c68616/funnelforms-free","title":"Funnelforms Free <= 3.8.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"acd85c0c-7f48-4b09-a44f-7f0858c68616"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/acd85c0c-7f48-4b09-a44f-7f0858c68616?source=api-prod","cve":"CVE-2025-68582","affectedVersions":"<=3.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/cbd42fc4-ab4a-4053-b765-18272eacd2bc/funnelforms-free","title":"Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"cbd42fc4-ab4a-4053-b765-18272eacd2bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cbd42fc4-ab4a-4053-b765-18272eacd2bc?source=api-prod","cve":"CVE-2024-6311","affectedVersions":"<=3.7.3.2","severity":"high"},{"advisoryId":"WPSECADV/WF/ccb34b44-9fa4-4ebe-b217-b2a42920247f/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"ccb34b44-9fa4-4ebe-b217-b2a42920247f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ccb34b44-9fa4-4ebe-b217-b2a42920247f?source=api-prod","cve":"CVE-2023-5387","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/d35ec0f0-fa7a-4531-b5f7-5adcf2af051c/funnelforms-free","title":"Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"d35ec0f0-fa7a-4531-b5f7-5adcf2af051c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d35ec0f0-fa7a-4531-b5f7-5adcf2af051c?source=api-prod","cve":"CVE-2023-5383","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/e2719afc-e52c-4fcc-b030-2f6aaddb5ab9/funnelforms-free","title":"Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"e2719afc-e52c-4fcc-b030-2f6aaddb5ab9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e2719afc-e52c-4fcc-b030-2f6aaddb5ab9?source=api-prod","cve":"CVE-2023-5385","affectedVersions":"<=3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/ebcbf872-1420-4a57-a4b4-8a52ba74e0a1/funnelforms-free","title":"Funnelforms Free <= 3.3.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ebcbf872-1420-4a57-a4b4-8a52ba74e0a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ebcbf872-1420-4a57-a4b4-8a52ba74e0a1?source=api-prod","cve":"CVE-2023-4950","affectedVersions":"<3.4","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_67656f6469726563746f7279811c9dc5_gen.json b/internal/data/assets/plugin_67656f6469726563746f7279811c9dc5_gen.json
index 2a68c9b3..a48236d8 100644
--- a/internal/data/assets/plugin_67656f6469726563746f7279811c9dc5_gen.json
+++ b/internal/data/assets/plugin_67656f6469726563746f7279811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/1356ec70-4264-4687-8082-7d87a8978082/geodirectory","title":"GeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Contact Email Custom Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:53:18","sources":[{"name":"Wordfence","remoteId":"1356ec70-4264-4687-8082-7d87a8978082"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1356ec70-4264-4687-8082-7d87a8978082?source=api-prod","cve":"CVE-2026-104993","affectedVersions":"<=2.8.188","severity":"medium"},{"advisoryId":"WPSECADV/WF/1390b079-784c-4c36-bec4-a70cd8484ca5/geodirectory","title":"GeoDirectory <= 2.8.181 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Text-type Custom Field (e.g., 'phone')\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:18:33","sources":[{"name":"Wordfence","remoteId":"1390b079-784c-4c36-bec4-a70cd8484ca5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1390b079-784c-4c36-bec4-a70cd8484ca5?source=api-prod","cve":"CVE-2026-93897","affectedVersions":"<=2.8.181","severity":"medium"},{"advisoryId":"WPSECADV/WF/190d9996-5a3b-477f-9191-d60ce3c33dd9/geodirectory","title":"GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 19:14:23","sources":[{"name":"Wordfence","remoteId":"190d9996-5a3b-477f-9191-d60ce3c33dd9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/190d9996-5a3b-477f-9191-d60ce3c33dd9?source=api-prod","cve":"CVE-2026-107754","affectedVersions":"<=2.8.190","severity":"medium"},{"advisoryId":"WPSECADV/WF/2af46137-6cdc-4898-8d59-3c603ebe02c4/geodirectory","title":"GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 20:54:50","sources":[{"name":"Wordfence","remoteId":"2af46137-6cdc-4898-8d59-3c603ebe02c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2af46137-6cdc-4898-8d59-3c603ebe02c4?source=api-prod","cve":"CVE-2026-110703","affectedVersions":"<=2.8.191","severity":"medium"},{"advisoryId":"WPSECADV/WF/2e25557d-577b-4ac6-a006-43079ab4b77d/geodirectory","title":"GeoDirectory <= 2.8.168 - Unauthenticated Pending/Draft Listing Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"2e25557d-577b-4ac6-a006-43079ab4b77d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2e25557d-577b-4ac6-a006-43079ab4b77d?source=api-prod","cve":"CVE-2026-16988","affectedVersions":"<=2.8.168","severity":"medium"},{"advisoryId":"WPSECADV/WF/30a15a22-d6f3-4829-995d-7fa14d1db7a9/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-29 22:00:52","sources":[{"name":"Wordfence","remoteId":"30a15a22-d6f3-4829-995d-7fa14d1db7a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/30a15a22-d6f3-4829-995d-7fa14d1db7a9?source=api-prod","cve":"CVE-2024-13507","affectedVersions":"<=2.8.97","severity":"high"},{"advisoryId":"WPSECADV/WF/32052509-2fa6-4317-8861-314e6da0869f/geodirectory","title":"GeoDirectory <= 2.8.192 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 17:59:14","sources":[{"name":"Wordfence","remoteId":"32052509-2fa6-4317-8861-314e6da0869f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/32052509-2fa6-4317-8861-314e6da0869f?source=api-prod","cve":"CVE-2026-111069","affectedVersions":"<=2.8.192","severity":"medium"},{"advisoryId":"WPSECADV/WF/35411f6a-bb1f-4b20-b9ed-66f21c9f7278/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.177 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"35411f6a-bb1f-4b20-b9ed-66f21c9f7278"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/35411f6a-bb1f-4b20-b9ed-66f21c9f7278?source=api-prod","cve":"CVE-2026-68565","affectedVersions":"<=2.8.177","severity":"medium"},{"advisoryId":"WPSECADV/WF/3bcd61d4-4775-4297-b7f5-664991fcd6d2/geodirectory","title":"GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"3bcd61d4-4775-4297-b7f5-664991fcd6d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3bcd61d4-4775-4297-b7f5-664991fcd6d2?source=api-prod","affectedVersions":"<=2.3.28","severity":"high"},{"advisoryId":"WPSECADV/WF/3da136dd-bd09-468a-879a-dac968ebf942/geodirectory","title":"GeoDirectory <= 2.8.193 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"3da136dd-bd09-468a-879a-dac968ebf942"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3da136dd-bd09-468a-879a-dac968ebf942?source=api-prod","cve":"CVE-2026-113493","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/3fe03c7b-9a98-4479-ba91-ab662dcddf6a/geodirectory","title":"GeoDirectory <= 2.3.80 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"3fe03c7b-9a98-4479-ba91-ab662dcddf6a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3fe03c7b-9a98-4479-ba91-ab662dcddf6a?source=api-prod","cve":"CVE-2024-50437","affectedVersions":"<=2.3.80","severity":"medium"},{"advisoryId":"WPSECADV/WF/408f0c2a-ef3c-4592-8722-d56afce92e24/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"408f0c2a-ef3c-4592-8722-d56afce92e24"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/408f0c2a-ef3c-4592-8722-d56afce92e24?source=api-prod","cve":"CVE-2025-12833","affectedVersions":"<=2.8.139","severity":"medium"},{"advisoryId":"WPSECADV/WF/52ba3bd8-f9d4-49fb-b786-3dd8b2350ae9/geodirectory","title":"GeoDirectory <= 2.8.193 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"52ba3bd8-f9d4-49fb-b786-3dd8b2350ae9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52ba3bd8-f9d4-49fb-b786-3dd8b2350ae9?source=api-prod","cve":"CVE-2026-113492","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/54f449f4-0a22-45c7-8a3b-9121d70b5fe4/geodirectory","title":"GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending Listing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 16:38:45","sources":[{"name":"Wordfence","remoteId":"54f449f4-0a22-45c7-8a3b-9121d70b5fe4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54f449f4-0a22-45c7-8a3b-9121d70b5fe4?source=api-prod","cve":"CVE-2026-103913","affectedVersions":"<=2.8.186","severity":"high"},{"advisoryId":"WPSECADV/WF/594de3b2-471e-4db4-a139-22ef3291f101/geodirectory","title":"GeoDirectory <= 2.8.193 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"594de3b2-471e-4db4-a139-22ef3291f101"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/594de3b2-471e-4db4-a139-22ef3291f101?source=api-prod","cve":"CVE-2026-113490","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/5a91e786-f570-4c6c-b1c7-0110774cb808/geodirectory","title":"GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"5a91e786-f570-4c6c-b1c7-0110774cb808"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5a91e786-f570-4c6c-b1c7-0110774cb808?source=api-prod","cve":"CVE-2024-3732","affectedVersions":"<=2.3.48","severity":"medium"},{"advisoryId":"WPSECADV/WF/64506fb9-5f12-458e-8b30-ab650a752668/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.173 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"64506fb9-5f12-458e-8b30-ab650a752668"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64506fb9-5f12-458e-8b30-ab650a752668?source=api-prod","cve":"CVE-2026-66604","affectedVersions":"<=2.8.173","severity":"high"},{"advisoryId":"WPSECADV/WF/71105a3c-4eb7-49b4-ba47-7997ddeb62c3/geodirectory","title":"GeoDirectory <= 2.3.61 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"71105a3c-4eb7-49b4-ba47-7997ddeb62c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71105a3c-4eb7-49b4-ba47-7997ddeb62c3?source=api-prod","cve":"CVE-2024-43145","affectedVersions":"<=2.3.61","severity":"critical"},{"advisoryId":"WPSECADV/WF/7edfff03-1fa5-4aa8-b93f-33b9d4241538/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.161 - Authenticated (Subscriber+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"7edfff03-1fa5-4aa8-b93f-33b9d4241538"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7edfff03-1fa5-4aa8-b93f-33b9d4241538?source=api-prod","cve":"CVE-2026-57681","affectedVersions":"<=2.8.161","severity":"medium"},{"advisoryId":"WPSECADV/WF/81fa4987-d019-4d0c-a002-eceef956161e/geodirectory","title":"GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"81fa4987-d019-4d0c-a002-eceef956161e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81fa4987-d019-4d0c-a002-eceef956161e?source=api-prod","cve":"CVE-2023-0278","affectedVersions":"<=2.2.23","severity":"high"},{"advisoryId":"WPSECADV/WF/8f687ee4-9760-48dd-9427-853de877dacc/geodirectory","title":"GeoDirectory <= 2.3.70 - Missing Authorization via geodirectory_rated()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"8f687ee4-9760-48dd-9427-853de877dacc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f687ee4-9760-48dd-9427-853de877dacc?source=api-prod","cve":"CVE-2024-43981","affectedVersions":"<=2.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/96103ad6-6800-401e-bbda-26ef3215b540/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.176 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"96103ad6-6800-401e-bbda-26ef3215b540"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/96103ad6-6800-401e-bbda-26ef3215b540?source=api-prod","cve":"CVE-2026-81271","affectedVersions":"<=2.8.176","severity":"medium"},{"advisoryId":"WPSECADV/WF/9628d0dc-a25a-4cc5-bea7-92aae8f45c0d/geodirectory","title":"GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dynamic Content Field-Token Substitution via Listing Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 19:15:25","sources":[{"name":"Wordfence","remoteId":"9628d0dc-a25a-4cc5-bea7-92aae8f45c0d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9628d0dc-a25a-4cc5-bea7-92aae8f45c0d?source=api-prod","cve":"CVE-2026-107650","affectedVersions":"<=2.8.190","severity":"medium"},{"advisoryId":"WPSECADV/WF/9700a21e-19cb-4ba9-8bc1-3fb11187152c/geodirectory","title":"GeoDirectory <= 2.8.119 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"9700a21e-19cb-4ba9-8bc1-3fb11187152c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9700a21e-19cb-4ba9-8bc1-3fb11187152c?source=api-prod","cve":"CVE-2025-6200","affectedVersions":"<=2.8.119","severity":"medium"},{"advisoryId":"WPSECADV/WF/98719f1b-31ac-4a21-9c4c-c404f39dede5/geodirectory","title":"GeoDirectory <= 2.8.193 - Authenticated (Subscriber+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"98719f1b-31ac-4a21-9c4c-c404f39dede5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98719f1b-31ac-4a21-9c4c-c404f39dede5?source=api-prod","cve":"CVE-2026-113489","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/a83e7d8b-a93a-4347-bb59-de1e2fd954a5/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.152 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"a83e7d8b-a93a-4347-bb59-de1e2fd954a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a83e7d8b-a93a-4347-bb59-de1e2fd954a5?source=api-prod","cve":"CVE-2026-39512","affectedVersions":"<=2.8.152","severity":"high"},{"advisoryId":"WPSECADV/WF/ac817587-1403-46e2-84bf-be5fcadc5425/geodirectory","title":"GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 17:09:20","sources":[{"name":"Wordfence","remoteId":"ac817587-1403-46e2-84bf-be5fcadc5425"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac817587-1403-46e2-84bf-be5fcadc5425?source=api-prod","cve":"CVE-2026-104899","affectedVersions":"<=2.8.187","severity":"high"},{"advisoryId":"WPSECADV/WF/b1acadaa-1211-4b0c-99e2-a137f77c198b/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.174 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"b1acadaa-1211-4b0c-99e2-a137f77c198b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b1acadaa-1211-4b0c-99e2-a137f77c198b?source=api-prod","cve":"CVE-2026-84813","affectedVersions":"<=2.8.174","severity":"high"},{"advisoryId":"WPSECADV/WF/b3d48aca-3db5-4585-bd71-5548f3b36ea1/geodirectory","title":"GeoDirectory <= 2.3.28 - Authenticated(Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3d48aca-3db5-4585-bd71-5548f3b36ea1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3d48aca-3db5-4585-bd71-5548f3b36ea1?source=api-prod","cve":"CVE-2023-50845","affectedVersions":"<2.3.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/b80b7152-be95-4737-b324-be0a3ff7c354/geodirectory","title":"GeoDirectory <= 2.8.167 - Information Exposure to Authenticated (Contributor+) User Email Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"b80b7152-be95-4737-b324-be0a3ff7c354"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b80b7152-be95-4737-b324-be0a3ff7c354?source=api-prod","cve":"CVE-2026-16968","affectedVersions":"<=2.8.167","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc743651-cfbc-487b-9d1b-9aab6d3a57b7/geodirectory","title":"GeoDirectory <= 2.8.183 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'business_hours' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:21:29","sources":[{"name":"Wordfence","remoteId":"bc743651-cfbc-487b-9d1b-9aab6d3a57b7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc743651-cfbc-487b-9d1b-9aab6d3a57b7?source=api-prod","cve":"CVE-2026-96766","affectedVersions":"<=2.8.183","severity":"medium"},{"advisoryId":"WPSECADV/WF/bcff5496-5fa7-4e74-8082-d143e8dbfbba/geodirectory","title":"GeoDirectory <= 2.8.193 - Authenticated (Administrator+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"bcff5496-5fa7-4e74-8082-d143e8dbfbba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bcff5496-5fa7-4e74-8082-d143e8dbfbba?source=api-prod","cve":"CVE-2026-113673","affectedVersions":"<=2.8.193","severity":"high"},{"advisoryId":"WPSECADV/WF/bd8a61d1-904d-4027-8f27-6e3018862d9b/geodirectory","title":"GeoDirectory <= 2.1.1.2 - Authenticated (admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd8a61d1-904d-4027-8f27-6e3018862d9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd8a61d1-904d-4027-8f27-6e3018862d9b?source=api-prod","cve":"CVE-2021-24720","affectedVersions":"<=2.1.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8815e53-f96b-44b2-8dae-9fcc481b6e0c/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.162 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8815e53-f96b-44b2-8dae-9fcc481b6e0c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8815e53-f96b-44b2-8dae-9fcc481b6e0c?source=api-prod","cve":"CVE-2026-54831","affectedVersions":"<=2.8.162","severity":"high"},{"advisoryId":"WPSECADV/WF/cb49f48e-98bf-4838-8eb0-91a7daad182c/geodirectory","title":"GeoDirectory <= 2.3.84 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb49f48e-98bf-4838-8eb0-91a7daad182c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb49f48e-98bf-4838-8eb0-91a7daad182c?source=api-prod","cve":"CVE-2024-56259","affectedVersions":"<=2.3.84","severity":"medium"},{"advisoryId":"WPSECADV/WF/d0d9ba14-c0c9-426e-927e-9139a0882f0d/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-10 22:19:26","sources":[{"name":"Wordfence","remoteId":"d0d9ba14-c0c9-426e-927e-9139a0882f0d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d0d9ba14-c0c9-426e-927e-9139a0882f0d?source=api-prod","cve":"CVE-2024-13506","affectedVersions":"<=2.8.97","severity":"medium"},{"advisoryId":"WPSECADV/WF/d1dd82a7-c9eb-4bc6-a9ae-0085392c68c5/geodirectory","title":"GeoDirectory <= 2.8.109 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"d1dd82a7-c9eb-4bc6-a9ae-0085392c68c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d1dd82a7-c9eb-4bc6-a9ae-0085392c68c5?source=api-prod","cve":"CVE-2025-15677","affectedVersions":"<=2.8.109","severity":"medium"},{"advisoryId":"WPSECADV/WF/d1fb652a-4490-43da-b069-b35d2f251b40/geodirectory","title":"GeoDirectory <= 2.8.193 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"d1fb652a-4490-43da-b069-b35d2f251b40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d1fb652a-4490-43da-b069-b35d2f251b40?source=api-prod","cve":"CVE-2026-113674","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/d44184d0-2874-483b-9855-37a4f9cd141f/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.157 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"d44184d0-2874-483b-9855-37a4f9cd141f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d44184d0-2874-483b-9855-37a4f9cd141f?source=api-prod","cve":"CVE-2026-42671","affectedVersions":"<=2.8.157","severity":"medium"},{"advisoryId":"WPSECADV/WF/e4fb4127-2b3f-4c8c-95ee-611f1bacf4c5/geodirectory","title":"GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 06:44:04","sources":[{"name":"Wordfence","remoteId":"e4fb4127-2b3f-4c8c-95ee-611f1bacf4c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e4fb4127-2b3f-4c8c-95ee-611f1bacf4c5?source=api-prod","cve":"CVE-2026-19091","affectedVersions":"<=2.8.169","severity":"high"},{"advisoryId":"WPSECADV/WF/eb4b1871-7c13-4f7c-93b5-d5254f89da8f/geodirectory","title":"GeoDirectory <= 2.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb4b1871-7c13-4f7c-93b5-d5254f89da8f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb4b1871-7c13-4f7c-93b5-d5254f89da8f?source=api-prod","cve":"CVE-2022-4775","affectedVersions":"<=2.2.21","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee11d9e5-64d5-49b4-b5f5-b76605250028/geodirectory","title":"GeoDirectory <= 2.2.19 - CSV Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"ee11d9e5-64d5-49b4-b5f5-b76605250028"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee11d9e5-64d5-49b4-b5f5-b76605250028?source=api-prod","affectedVersions":"<=2.2.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/fcfe2625-3ee8-4822-8088-abf0b898bebb/geodirectory","title":"GeoDirectory <= 2.8.149 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"fcfe2625-3ee8-4822-8088-abf0b898bebb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fcfe2625-3ee8-4822-8088-abf0b898bebb?source=api-prod","cve":"CVE-2026-24549","affectedVersions":"<=2.8.149","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/1356ec70-4264-4687-8082-7d87a8978082/geodirectory","title":"GeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Contact Email Custom Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 15:53:18","sources":[{"name":"Wordfence","remoteId":"1356ec70-4264-4687-8082-7d87a8978082"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1356ec70-4264-4687-8082-7d87a8978082?source=api-prod","cve":"CVE-2026-104993","affectedVersions":"<=2.8.188","severity":"medium"},{"advisoryId":"WPSECADV/WF/1390b079-784c-4c36-bec4-a70cd8484ca5/geodirectory","title":"GeoDirectory <= 2.8.181 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Text-type Custom Field (e.g., 'phone')\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:18:33","sources":[{"name":"Wordfence","remoteId":"1390b079-784c-4c36-bec4-a70cd8484ca5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1390b079-784c-4c36-bec4-a70cd8484ca5?source=api-prod","cve":"CVE-2026-93897","affectedVersions":"<=2.8.181","severity":"medium"},{"advisoryId":"WPSECADV/WF/190d9996-5a3b-477f-9191-d60ce3c33dd9/geodirectory","title":"GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 19:14:23","sources":[{"name":"Wordfence","remoteId":"190d9996-5a3b-477f-9191-d60ce3c33dd9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/190d9996-5a3b-477f-9191-d60ce3c33dd9?source=api-prod","cve":"CVE-2026-107754","affectedVersions":"<=2.8.190","severity":"medium"},{"advisoryId":"WPSECADV/WF/2af46137-6cdc-4898-8d59-3c603ebe02c4/geodirectory","title":"GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 20:54:50","sources":[{"name":"Wordfence","remoteId":"2af46137-6cdc-4898-8d59-3c603ebe02c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2af46137-6cdc-4898-8d59-3c603ebe02c4?source=api-prod","cve":"CVE-2026-110703","affectedVersions":"<=2.8.191","severity":"medium"},{"advisoryId":"WPSECADV/WF/2e25557d-577b-4ac6-a006-43079ab4b77d/geodirectory","title":"GeoDirectory <= 2.8.168 - Unauthenticated Pending/Draft Listing Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"2e25557d-577b-4ac6-a006-43079ab4b77d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2e25557d-577b-4ac6-a006-43079ab4b77d?source=api-prod","cve":"CVE-2026-16988","affectedVersions":"<=2.8.168","severity":"medium"},{"advisoryId":"WPSECADV/WF/30a15a22-d6f3-4829-995d-7fa14d1db7a9/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-29 22:00:52","sources":[{"name":"Wordfence","remoteId":"30a15a22-d6f3-4829-995d-7fa14d1db7a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/30a15a22-d6f3-4829-995d-7fa14d1db7a9?source=api-prod","cve":"CVE-2024-13507","affectedVersions":"<=2.8.97","severity":"high"},{"advisoryId":"WPSECADV/WF/32052509-2fa6-4317-8861-314e6da0869f/geodirectory","title":"GeoDirectory <= 2.8.192 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 17:59:14","sources":[{"name":"Wordfence","remoteId":"32052509-2fa6-4317-8861-314e6da0869f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/32052509-2fa6-4317-8861-314e6da0869f?source=api-prod","cve":"CVE-2026-111069","affectedVersions":"<=2.8.192","severity":"medium"},{"advisoryId":"WPSECADV/WF/35411f6a-bb1f-4b20-b9ed-66f21c9f7278/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.177 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"35411f6a-bb1f-4b20-b9ed-66f21c9f7278"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/35411f6a-bb1f-4b20-b9ed-66f21c9f7278?source=api-prod","cve":"CVE-2026-68565","affectedVersions":"<=2.8.177","severity":"medium"},{"advisoryId":"WPSECADV/WF/3bcd61d4-4775-4297-b7f5-664991fcd6d2/geodirectory","title":"GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"3bcd61d4-4775-4297-b7f5-664991fcd6d2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3bcd61d4-4775-4297-b7f5-664991fcd6d2?source=api-prod","affectedVersions":"<=2.3.28","severity":"high"},{"advisoryId":"WPSECADV/WF/3d26c5f0-0b74-4c6b-8080-e30a8d1cc6b8/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.196 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d26c5f0-0b74-4c6b-8080-e30a8d1cc6b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d26c5f0-0b74-4c6b-8080-e30a8d1cc6b8?source=api-prod","cve":"CVE-2026-113488","affectedVersions":"<2.8.196","severity":"medium"},{"advisoryId":"WPSECADV/WF/3da136dd-bd09-468a-879a-dac968ebf942/geodirectory","title":"GeoDirectory <= 2.8.193 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"3da136dd-bd09-468a-879a-dac968ebf942"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3da136dd-bd09-468a-879a-dac968ebf942?source=api-prod","cve":"CVE-2026-113493","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/3fe03c7b-9a98-4479-ba91-ab662dcddf6a/geodirectory","title":"GeoDirectory <= 2.3.80 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"3fe03c7b-9a98-4479-ba91-ab662dcddf6a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3fe03c7b-9a98-4479-ba91-ab662dcddf6a?source=api-prod","cve":"CVE-2024-50437","affectedVersions":"<=2.3.80","severity":"medium"},{"advisoryId":"WPSECADV/WF/408f0c2a-ef3c-4592-8722-d56afce92e24/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"408f0c2a-ef3c-4592-8722-d56afce92e24"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/408f0c2a-ef3c-4592-8722-d56afce92e24?source=api-prod","cve":"CVE-2025-12833","affectedVersions":"<=2.8.139","severity":"medium"},{"advisoryId":"WPSECADV/WF/43699b41-0993-485c-b32d-ebcf28a302b8/geodirectory","title":"GeoDirectory <= 2.8.193 - Authenticated (Subscriber+) Arbitrary Media File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"43699b41-0993-485c-b32d-ebcf28a302b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43699b41-0993-485c-b32d-ebcf28a302b8?source=api-prod","cve":"CVE-2026-113491","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/489b9a43-cb9a-4dab-baf0-dfb13fc04a6b/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.196 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"489b9a43-cb9a-4dab-baf0-dfb13fc04a6b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/489b9a43-cb9a-4dab-baf0-dfb13fc04a6b?source=api-prod","cve":"CVE-2026-113487","affectedVersions":"<2.8.196","severity":"medium"},{"advisoryId":"WPSECADV/WF/52ba3bd8-f9d4-49fb-b786-3dd8b2350ae9/geodirectory","title":"GeoDirectory <= 2.8.193 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"52ba3bd8-f9d4-49fb-b786-3dd8b2350ae9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52ba3bd8-f9d4-49fb-b786-3dd8b2350ae9?source=api-prod","cve":"CVE-2026-113492","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/54f449f4-0a22-45c7-8a3b-9121d70b5fe4/geodirectory","title":"GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending Listing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 16:38:45","sources":[{"name":"Wordfence","remoteId":"54f449f4-0a22-45c7-8a3b-9121d70b5fe4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54f449f4-0a22-45c7-8a3b-9121d70b5fe4?source=api-prod","cve":"CVE-2026-103913","affectedVersions":"<=2.8.186","severity":"high"},{"advisoryId":"WPSECADV/WF/594de3b2-471e-4db4-a139-22ef3291f101/geodirectory","title":"GeoDirectory <= 2.8.193 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"594de3b2-471e-4db4-a139-22ef3291f101"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/594de3b2-471e-4db4-a139-22ef3291f101?source=api-prod","cve":"CVE-2026-113490","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/5a91e786-f570-4c6c-b1c7-0110774cb808/geodirectory","title":"GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"5a91e786-f570-4c6c-b1c7-0110774cb808"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5a91e786-f570-4c6c-b1c7-0110774cb808?source=api-prod","cve":"CVE-2024-3732","affectedVersions":"<=2.3.48","severity":"medium"},{"advisoryId":"WPSECADV/WF/64506fb9-5f12-458e-8b30-ab650a752668/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.173 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"64506fb9-5f12-458e-8b30-ab650a752668"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64506fb9-5f12-458e-8b30-ab650a752668?source=api-prod","cve":"CVE-2026-66604","affectedVersions":"<=2.8.173","severity":"high"},{"advisoryId":"WPSECADV/WF/71105a3c-4eb7-49b4-ba47-7997ddeb62c3/geodirectory","title":"GeoDirectory <= 2.3.61 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"71105a3c-4eb7-49b4-ba47-7997ddeb62c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71105a3c-4eb7-49b4-ba47-7997ddeb62c3?source=api-prod","cve":"CVE-2024-43145","affectedVersions":"<=2.3.61","severity":"critical"},{"advisoryId":"WPSECADV/WF/7e82ef74-e350-44b9-a1c9-9ae0f3f9ca1e/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.195 - Authenticated (Contributor+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"7e82ef74-e350-44b9-a1c9-9ae0f3f9ca1e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e82ef74-e350-44b9-a1c9-9ae0f3f9ca1e?source=api-prod","cve":"CVE-2026-113494","affectedVersions":"<2.8.195","severity":"medium"},{"advisoryId":"WPSECADV/WF/7edfff03-1fa5-4aa8-b93f-33b9d4241538/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.161 - Authenticated (Subscriber+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"7edfff03-1fa5-4aa8-b93f-33b9d4241538"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7edfff03-1fa5-4aa8-b93f-33b9d4241538?source=api-prod","cve":"CVE-2026-57681","affectedVersions":"<=2.8.161","severity":"medium"},{"advisoryId":"WPSECADV/WF/81fa4987-d019-4d0c-a002-eceef956161e/geodirectory","title":"GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"81fa4987-d019-4d0c-a002-eceef956161e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81fa4987-d019-4d0c-a002-eceef956161e?source=api-prod","cve":"CVE-2023-0278","affectedVersions":"<=2.2.23","severity":"high"},{"advisoryId":"WPSECADV/WF/8f687ee4-9760-48dd-9427-853de877dacc/geodirectory","title":"GeoDirectory <= 2.3.70 - Missing Authorization via geodirectory_rated()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"8f687ee4-9760-48dd-9427-853de877dacc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f687ee4-9760-48dd-9427-853de877dacc?source=api-prod","cve":"CVE-2024-43981","affectedVersions":"<=2.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/96103ad6-6800-401e-bbda-26ef3215b540/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.176 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"96103ad6-6800-401e-bbda-26ef3215b540"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/96103ad6-6800-401e-bbda-26ef3215b540?source=api-prod","cve":"CVE-2026-81271","affectedVersions":"<=2.8.176","severity":"medium"},{"advisoryId":"WPSECADV/WF/9628d0dc-a25a-4cc5-bea7-92aae8f45c0d/geodirectory","title":"GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dynamic Content Field-Token Substitution via Listing Title\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 19:15:25","sources":[{"name":"Wordfence","remoteId":"9628d0dc-a25a-4cc5-bea7-92aae8f45c0d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9628d0dc-a25a-4cc5-bea7-92aae8f45c0d?source=api-prod","cve":"CVE-2026-107650","affectedVersions":"<=2.8.190","severity":"medium"},{"advisoryId":"WPSECADV/WF/9700a21e-19cb-4ba9-8bc1-3fb11187152c/geodirectory","title":"GeoDirectory <= 2.8.119 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"9700a21e-19cb-4ba9-8bc1-3fb11187152c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9700a21e-19cb-4ba9-8bc1-3fb11187152c?source=api-prod","cve":"CVE-2025-6200","affectedVersions":"<=2.8.119","severity":"medium"},{"advisoryId":"WPSECADV/WF/98719f1b-31ac-4a21-9c4c-c404f39dede5/geodirectory","title":"GeoDirectory <= 2.8.193 - Authenticated (Subscriber+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"98719f1b-31ac-4a21-9c4c-c404f39dede5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98719f1b-31ac-4a21-9c4c-c404f39dede5?source=api-prod","cve":"CVE-2026-113489","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/a83e7d8b-a93a-4347-bb59-de1e2fd954a5/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.152 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"a83e7d8b-a93a-4347-bb59-de1e2fd954a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a83e7d8b-a93a-4347-bb59-de1e2fd954a5?source=api-prod","cve":"CVE-2026-39512","affectedVersions":"<=2.8.152","severity":"high"},{"advisoryId":"WPSECADV/WF/ac817587-1403-46e2-84bf-be5fcadc5425/geodirectory","title":"GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 17:09:20","sources":[{"name":"Wordfence","remoteId":"ac817587-1403-46e2-84bf-be5fcadc5425"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac817587-1403-46e2-84bf-be5fcadc5425?source=api-prod","cve":"CVE-2026-104899","affectedVersions":"<=2.8.187","severity":"high"},{"advisoryId":"WPSECADV/WF/b1acadaa-1211-4b0c-99e2-a137f77c198b/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.174 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"b1acadaa-1211-4b0c-99e2-a137f77c198b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b1acadaa-1211-4b0c-99e2-a137f77c198b?source=api-prod","cve":"CVE-2026-84813","affectedVersions":"<=2.8.174","severity":"high"},{"advisoryId":"WPSECADV/WF/b3d48aca-3db5-4585-bd71-5548f3b36ea1/geodirectory","title":"GeoDirectory <= 2.3.28 - Authenticated(Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3d48aca-3db5-4585-bd71-5548f3b36ea1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3d48aca-3db5-4585-bd71-5548f3b36ea1?source=api-prod","cve":"CVE-2023-50845","affectedVersions":"<2.3.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/b80b7152-be95-4737-b324-be0a3ff7c354/geodirectory","title":"GeoDirectory <= 2.8.167 - Information Exposure to Authenticated (Contributor+) User Email Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"b80b7152-be95-4737-b324-be0a3ff7c354"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b80b7152-be95-4737-b324-be0a3ff7c354?source=api-prod","cve":"CVE-2026-16968","affectedVersions":"<=2.8.167","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc743651-cfbc-487b-9d1b-9aab6d3a57b7/geodirectory","title":"GeoDirectory <= 2.8.183 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'business_hours' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:21:29","sources":[{"name":"Wordfence","remoteId":"bc743651-cfbc-487b-9d1b-9aab6d3a57b7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc743651-cfbc-487b-9d1b-9aab6d3a57b7?source=api-prod","cve":"CVE-2026-96766","affectedVersions":"<=2.8.183","severity":"medium"},{"advisoryId":"WPSECADV/WF/bcff5496-5fa7-4e74-8082-d143e8dbfbba/geodirectory","title":"GeoDirectory <= 2.8.193 - Authenticated (Administrator+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"bcff5496-5fa7-4e74-8082-d143e8dbfbba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bcff5496-5fa7-4e74-8082-d143e8dbfbba?source=api-prod","cve":"CVE-2026-113673","affectedVersions":"<=2.8.193","severity":"high"},{"advisoryId":"WPSECADV/WF/bd8a61d1-904d-4027-8f27-6e3018862d9b/geodirectory","title":"GeoDirectory <= 2.1.1.2 - Authenticated (admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd8a61d1-904d-4027-8f27-6e3018862d9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd8a61d1-904d-4027-8f27-6e3018862d9b?source=api-prod","cve":"CVE-2021-24720","affectedVersions":"<=2.1.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8815e53-f96b-44b2-8dae-9fcc481b6e0c/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.162 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8815e53-f96b-44b2-8dae-9fcc481b6e0c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8815e53-f96b-44b2-8dae-9fcc481b6e0c?source=api-prod","cve":"CVE-2026-54831","affectedVersions":"<=2.8.162","severity":"high"},{"advisoryId":"WPSECADV/WF/cb49f48e-98bf-4838-8eb0-91a7daad182c/geodirectory","title":"GeoDirectory <= 2.3.84 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb49f48e-98bf-4838-8eb0-91a7daad182c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb49f48e-98bf-4838-8eb0-91a7daad182c?source=api-prod","cve":"CVE-2024-56259","affectedVersions":"<=2.3.84","severity":"medium"},{"advisoryId":"WPSECADV/WF/d0d9ba14-c0c9-426e-927e-9139a0882f0d/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-10 22:19:26","sources":[{"name":"Wordfence","remoteId":"d0d9ba14-c0c9-426e-927e-9139a0882f0d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d0d9ba14-c0c9-426e-927e-9139a0882f0d?source=api-prod","cve":"CVE-2024-13506","affectedVersions":"<=2.8.97","severity":"medium"},{"advisoryId":"WPSECADV/WF/d1dd82a7-c9eb-4bc6-a9ae-0085392c68c5/geodirectory","title":"GeoDirectory <= 2.8.109 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"d1dd82a7-c9eb-4bc6-a9ae-0085392c68c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d1dd82a7-c9eb-4bc6-a9ae-0085392c68c5?source=api-prod","cve":"CVE-2025-15677","affectedVersions":"<=2.8.109","severity":"medium"},{"advisoryId":"WPSECADV/WF/d1fb652a-4490-43da-b069-b35d2f251b40/geodirectory","title":"GeoDirectory <= 2.8.193 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"d1fb652a-4490-43da-b069-b35d2f251b40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d1fb652a-4490-43da-b069-b35d2f251b40?source=api-prod","cve":"CVE-2026-113674","affectedVersions":"<=2.8.193","severity":"medium"},{"advisoryId":"WPSECADV/WF/d44184d0-2874-483b-9855-37a4f9cd141f/geodirectory","title":"GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.157 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"d44184d0-2874-483b-9855-37a4f9cd141f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d44184d0-2874-483b-9855-37a4f9cd141f?source=api-prod","cve":"CVE-2026-42671","affectedVersions":"<=2.8.157","severity":"medium"},{"advisoryId":"WPSECADV/WF/e4fb4127-2b3f-4c8c-95ee-611f1bacf4c5/geodirectory","title":"GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 06:44:04","sources":[{"name":"Wordfence","remoteId":"e4fb4127-2b3f-4c8c-95ee-611f1bacf4c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e4fb4127-2b3f-4c8c-95ee-611f1bacf4c5?source=api-prod","cve":"CVE-2026-19091","affectedVersions":"<=2.8.169","severity":"high"},{"advisoryId":"WPSECADV/WF/eb4b1871-7c13-4f7c-93b5-d5254f89da8f/geodirectory","title":"GeoDirectory <= 2.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb4b1871-7c13-4f7c-93b5-d5254f89da8f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb4b1871-7c13-4f7c-93b5-d5254f89da8f?source=api-prod","cve":"CVE-2022-4775","affectedVersions":"<=2.2.21","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee11d9e5-64d5-49b4-b5f5-b76605250028/geodirectory","title":"GeoDirectory <= 2.2.19 - CSV Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"ee11d9e5-64d5-49b4-b5f5-b76605250028"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee11d9e5-64d5-49b4-b5f5-b76605250028?source=api-prod","affectedVersions":"<=2.2.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/fcfe2625-3ee8-4822-8088-abf0b898bebb/geodirectory","title":"GeoDirectory <= 2.8.149 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"fcfe2625-3ee8-4822-8088-abf0b898bebb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fcfe2625-3ee8-4822-8088-abf0b898bebb?source=api-prod","cve":"CVE-2026-24549","affectedVersions":"<=2.8.149","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_67697665811c9dc5_gen.json b/internal/data/assets/plugin_67697665811c9dc5_gen.json
index d493f446..13a0c7b7 100644
--- a/internal/data/assets/plugin_67697665811c9dc5_gen.json
+++ b/internal/data/assets/plugin_67697665811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/04aca055-b62a-4c20-8347-0648a8545ef2/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.8.1 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"04aca055-b62a-4c20-8347-0648a8545ef2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/04aca055-b62a-4c20-8347-0648a8545ef2?source=api-prod","cve":"CVE-2026-96333","affectedVersions":"<=4.16.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/06a7ff0b-ec6b-490c-9bb0-fbb5c1c337c4/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.19.3 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"06a7ff0b-ec6b-490c-9bb0-fbb5c1c337c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06a7ff0b-ec6b-490c-9bb0-fbb5c1c337c4?source=api-prod","cve":"CVE-2025-22777","affectedVersions":"<=3.19.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/08f8f489-6b31-45d8-a122-bbaa283a2b10/give","title":"GiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 14:48:48","sources":[{"name":"Wordfence","remoteId":"08f8f489-6b31-45d8-a122-bbaa283a2b10"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/08f8f489-6b31-45d8-a122-bbaa283a2b10?source=api-prod","cve":"CVE-2026-13246","affectedVersions":"<=4.16.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/1861d943-ac58-4a44-ab50-e39101e82013/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.12.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"1861d943-ac58-4a44-ab50-e39101e82013"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1861d943-ac58-4a44-ab50-e39101e82013?source=api-prod","cve":"CVE-2024-35679","affectedVersions":"<=3.12.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/18c0f717-6825-4421-af53-68f1cf502f81/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.18.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"18c0f717-6825-4421-af53-68f1cf502f81"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/18c0f717-6825-4421-af53-68f1cf502f81?source=api-prod","cve":"CVE-2024-11921","affectedVersions":"<=3.18.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/1c9b7866-d4e4-4ed0-a94b-1daef73a10bc/give","title":"GiveWP <= 3.14.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"1c9b7866-d4e4-4ed0-a94b-1daef73a10bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1c9b7866-d4e4-4ed0-a94b-1daef73a10bc?source=api-prod","cve":"CVE-2024-37099","affectedVersions":"<=3.14.1","severity":"high"},{"advisoryId":"WPSECADV/WF/1d59151c-aa50-4183-b429-143580961cb1/give","title":"GiveWP <= 4.16.8 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d59151c-aa50-4183-b429-143580961cb1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d59151c-aa50-4183-b429-143580961cb1?source=api-prod","cve":"CVE-2026-85113","affectedVersions":"<=4.16.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/22b89c2f-a42d-4e2f-b344-81d8363a332f/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"22b89c2f-a42d-4e2f-b344-81d8363a332f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22b89c2f-a42d-4e2f-b344-81d8363a332f?source=api-prod","cve":"CVE-2026-96830","affectedVersions":"<=4.16.9","severity":"high"},{"advisoryId":"WPSECADV/WF/22ff4b09-063b-425e-9d59-be2e5d283186/give","title":"Give - Donation Plugin <= 2.33.0 - Authenticated(Give Manager+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"22ff4b09-063b-425e-9d59-be2e5d283186"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22ff4b09-063b-425e-9d59-be2e5d283186?source=api-prod","cve":"CVE-2023-41665","affectedVersions":"<2.33.1","severity":"high"},{"advisoryId":"WPSECADV/WF/2379a029-cc0d-4fa2-9aeb-47a4abd6b51a/give","title":"GiveWP <= 2.25.1 - Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2379a029-cc0d-4fa2-9aeb-47a4abd6b51a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2379a029-cc0d-4fa2-9aeb-47a4abd6b51a?source=api-prod","cve":"CVE-2022-40312","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a0381b1-9b63-41cb-8125-d22274b98867/give","title":"GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a0381b1-9b63-41cb-8125-d22274b98867"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a0381b1-9b63-41cb-8125-d22274b98867?source=api-prod","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a13ce09-b312-4186-b0e2-63065c47f15d/give","title":"GiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a13ce09-b312-4186-b0e2-63065c47f15d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a13ce09-b312-4186-b0e2-63065c47f15d?source=api-prod","cve":"CVE-2024-6551","affectedVersions":"<=3.15.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a541529-ef53-468c-a7f0-0cd6822bd17b/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.14.5 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a541529-ef53-468c-a7f0-0cd6822bd17b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a541529-ef53-468c-a7f0-0cd6822bd17b?source=api-prod","cve":"CVE-2026-42678","affectedVersions":"<=4.14.5","severity":"high"},{"advisoryId":"WPSECADV/WF/2bff8dea-6971-47d4-bd2c-0821687033e5/give","title":"GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"2bff8dea-6971-47d4-bd2c-0821687033e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2bff8dea-6971-47d4-bd2c-0821687033e5?source=api-prod","cve":"CVE-2023-4248","affectedVersions":"<=2.33.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/2c9e5440-9d66-416b-899f-2b453294885d/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated User Impersonation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c9e5440-9d66-416b-899f-2b453294885d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c9e5440-9d66-416b-899f-2b453294885d?source=api-prod","cve":"CVE-2026-97196","affectedVersions":"<=4.16.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/2dca6c29-9f05-4d82-90e3-834f1dd8005a/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"2dca6c29-9f05-4d82-90e3-834f1dd8005a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2dca6c29-9f05-4d82-90e3-834f1dd8005a?source=api-prod","cve":"CVE-2024-5977","affectedVersions":"<=3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/39e501d8-88a0-4625-aeb0-aa33fc89a8d4/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 19:18:44","sources":[{"name":"Wordfence","remoteId":"39e501d8-88a0-4625-aeb0-aa33fc89a8d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39e501d8-88a0-4625-aeb0-aa33fc89a8d4?source=api-prod","cve":"CVE-2025-7205","affectedVersions":"<=4.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3b6b1b7e-2ba4-4b72-9e3d-b54c00437cac/give","title":"GiveWP <= 2.33.1 - Missing Authorization via handleBeforeGateway\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"3b6b1b7e-2ba4-4b72-9e3d-b54c00437cac"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3b6b1b7e-2ba4-4b72-9e3d-b54c00437cac?source=api-prod","cve":"CVE-2023-47183","affectedVersions":"<=2.33.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3dc26eaa-2da5-4cd6-b613-4da2faad0f3b/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 2.21.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"3dc26eaa-2da5-4cd6-b613-4da2faad0f3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3dc26eaa-2da5-4cd6-b613-4da2faad0f3b?source=api-prod","cve":"CVE-2022-2260","affectedVersions":"<=2.21.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/3dc7bc0a-b209-431f-a9f1-f850b1a1d1b4/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.4.2 - Authenticated (GiveWP Manager+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"3dc7bc0a-b209-431f-a9f1-f850b1a1d1b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3dc7bc0a-b209-431f-a9f1-f850b1a1d1b4?source=api-prod","cve":"CVE-2024-30229","affectedVersions":"<=3.4.2","severity":"high"},{"advisoryId":"WPSECADV/WF/3fe1bb24-1f60-40f6-9b5e-58e0158bdfd3/give","title":"GiveWP <= 2.20.2 - Authenticated Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-12 14:18:00","sources":[{"name":"Wordfence","remoteId":"3fe1bb24-1f60-40f6-9b5e-58e0158bdfd3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3fe1bb24-1f60-40f6-9b5e-58e0158bdfd3?source=api-prod","cve":"CVE-2022-31475","affectedVersions":"<=2.20.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/40595943-121d-4492-a0ed-f2de1bd99fda/give","title":"Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-14 22:39:51","sources":[{"name":"Wordfence","remoteId":"40595943-121d-4492-a0ed-f2de1bd99fda"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40595943-121d-4492-a0ed-f2de1bd99fda?source=api-prod","cve":"CVE-2025-2025","affectedVersions":"<=3.22.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/40f79195-23e7-4091-9dcb-8b787f0606f4/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 0.8.5 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"40f79195-23e7-4091-9dcb-8b787f0606f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40f79195-23e7-4091-9dcb-8b787f0606f4?source=api-prod","affectedVersions":"<0.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/41c2edae-9788-47ad-bf0b-aa944893c4e2/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.14.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"41c2edae-9788-47ad-bf0b-aa944893c4e2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41c2edae-9788-47ad-bf0b-aa944893c4e2?source=api-prod","cve":"CVE-2026-34900","affectedVersions":"<=4.14.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/463fea25-c793-42fc-a8a8-28d001978133/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.3 - Authenticated (Custom role+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"463fea25-c793-42fc-a8a8-28d001978133"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/463fea25-c793-42fc-a8a8-28d001978133?source=api-prod","cve":"CVE-2026-14318","affectedVersions":"<4.16.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/4794858f-ebaf-4adf-ab08-309964c18c00/give","title":"GiveWP <= 2.5.4 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"4794858f-ebaf-4adf-ab08-309964c18c00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4794858f-ebaf-4adf-ab08-309964c18c00?source=api-prod","cve":"CVE-2019-20360","affectedVersions":"<=2.5.4","severity":"high"},{"advisoryId":"WPSECADV/WF/498087da-3887-475a-9796-676ee1d1fb99/give","title":"GiveWP <= 2.11.3 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"498087da-3887-475a-9796-676ee1d1fb99"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/498087da-3887-475a-9796-676ee1d1fb99?source=api-prod","cve":"CVE-2021-24524","affectedVersions":"<2.12.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/49954c72-df0d-46ec-a252-8af84dea41bf/give","title":"GiveWP <= 4.15.3 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 16:29:51","sources":[{"name":"Wordfence","remoteId":"49954c72-df0d-46ec-a252-8af84dea41bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49954c72-df0d-46ec-a252-8af84dea41bf?source=api-prod","cve":"CVE-2026-11981","affectedVersions":"<=4.15.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/49c3be3f-60b3-4b83-9683-a08e8e1cf9e9/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.7.1 - Unauthenticated PHP Object Injection to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"49c3be3f-60b3-4b83-9683-a08e8e1cf9e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49c3be3f-60b3-4b83-9683-a08e8e1cf9e9?source=api-prod","cve":"CVE-2026-82222","affectedVersions":"<=4.16.7.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/4a3cae01-620d-405e-baf6-2d66a5b429b3/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-26 17:03:51","sources":[{"name":"Wordfence","remoteId":"4a3cae01-620d-405e-baf6-2d66a5b429b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a3cae01-620d-405e-baf6-2d66a5b429b3?source=api-prod","cve":"CVE-2024-9130","affectedVersions":"<=3.16.1","severity":"high"},{"advisoryId":"WPSECADV/WF/50b811e0-c1f4-4970-a340-8c1619456e29/give","title":"GiveWP <= 2.21.2 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"50b811e0-c1f4-4970-a340-8c1619456e29"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50b811e0-c1f4-4970-a340-8c1619456e29?source=api-prod","cve":"CVE-2022-2215","affectedVersions":"<=2.21.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/53ddfd2d-7af1-4561-ab76-5cb3238e8f8b/give","title":"GiveWP <= 2.20.2 - Authenticated Arbitrary File Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-12 13:57:00","sources":[{"name":"Wordfence","remoteId":"53ddfd2d-7af1-4561-ab76-5cb3238e8f8b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53ddfd2d-7af1-4561-ab76-5cb3238e8f8b?source=api-prod","cve":"CVE-2022-28700","affectedVersions":"<=2.20.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/54db1807-69ff-445c-9e02-9abce9fd3940/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-03 14:14:48","sources":[{"name":"Wordfence","remoteId":"54db1807-69ff-445c-9e02-9abce9fd3940"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54db1807-69ff-445c-9e02-9abce9fd3940?source=api-prod","cve":"CVE-2025-11227","affectedVersions":"<=4.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5981b937-189f-4dc3-baf0-ee0d194229eb/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"5981b937-189f-4dc3-baf0-ee0d194229eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5981b937-189f-4dc3-baf0-ee0d194229eb?source=api-prod","cve":"CVE-2026-73348","affectedVersions":"<4.16.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ea02dd5-d837-471c-aa6a-264ffcedd55d/give","title":"GiveWP <= 2.25.2 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ea02dd5-d837-471c-aa6a-264ffcedd55d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ea02dd5-d837-471c-aa6a-264ffcedd55d?source=api-prod","affectedVersions":"<=2.25.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ec23f29-baa3-4bfc-a7b7-d664a81637c1/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ec23f29-baa3-4bfc-a7b7-d664a81637c1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ec23f29-baa3-4bfc-a7b7-d664a81637c1?source=api-prod","cve":"CVE-2026-73349","affectedVersions":"<4.16.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/61901d83-0d05-4be8-a318-43bea086293a/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"61901d83-0d05-4be8-a318-43bea086293a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61901d83-0d05-4be8-a318-43bea086293a?source=api-prod","cve":"CVE-2024-1957","affectedVersions":"<=3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/61d1bc0e-f66f-4bc3-9dfe-2fa19f07999f/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Authenticated (Donor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"61d1bc0e-f66f-4bc3-9dfe-2fa19f07999f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61d1bc0e-f66f-4bc3-9dfe-2fa19f07999f?source=api-prod","cve":"CVE-2026-73357","affectedVersions":"<4.16.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6368c397-0570-4304-a764-869bacc526c7/give","title":"GiveWP <= 2.25.1 - Unauthenticated CSV Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"6368c397-0570-4304-a764-869bacc526c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6368c397-0570-4304-a764-869bacc526c7?source=api-prod","cve":"CVE-2023-22719","affectedVersions":"<=2.25.1","severity":"high"},{"advisoryId":"WPSECADV/WF/6dc7c5a6-513e-4aa8-9538-0ac6fb37c867/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"6dc7c5a6-513e-4aa8-9538-0ac6fb37c867"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc7c5a6-513e-4aa8-9538-0ac6fb37c867?source=api-prod","cve":"CVE-2025-8620","affectedVersions":"<=4.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/715b0d61-1fac-4039-b18c-e9371788c24c/give","title":"GiveWP - Donation Plugin and Fundraising Platform <= 2.5.0 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"715b0d61-1fac-4039-b18c-e9371788c24c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/715b0d61-1fac-4039-b18c-e9371788c24c?source=api-prod","cve":"CVE-2019-13578","affectedVersions":"<=2.5.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/7a1a9cce-135a-4a5e-a477-ee2615237642/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"7a1a9cce-135a-4a5e-a477-ee2615237642"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a1a9cce-135a-4a5e-a477-ee2615237642?source=api-prod","cve":"CVE-2026-96834","affectedVersions":"<=4.16.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ccf6945-6f18-410b-9f1a-6d52a3cdda1a/give","title":"GiveWP <= 2.17.2 - Reflected Cross-Site Scripting via Import Tool\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ccf6945-6f18-410b-9f1a-6d52a3cdda1a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ccf6945-6f18-410b-9f1a-6d52a3cdda1a?source=api-prod","cve":"CVE-2022-0252","affectedVersions":"<2.17.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ce9bac7-60bb-4880-9e37-4d71f02ee941/give","title":"GiveWP <= 3.15.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ce9bac7-60bb-4880-9e37-4d71f02ee941"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ce9bac7-60bb-4880-9e37-4d71f02ee941?source=api-prod","cve":"CVE-2024-47315","affectedVersions":"<=3.15.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fa8c406-e64d-4093-a102-436ecfb7dd76/give","title":"GiveWP <= 2.25.3 - Authenticated (Admin+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fa8c406-e64d-4093-a102-436ecfb7dd76"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fa8c406-e64d-4093-a102-436ecfb7dd76?source=api-prod","cve":"CVE-2023-32513","affectedVersions":"<=2.25.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/818ef655-aef3-4808-88ae-ecf2ba209d67/give","title":"GiveWP <= 2.5.9 - Missing Authorization to Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"818ef655-aef3-4808-88ae-ecf2ba209d67"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/818ef655-aef3-4808-88ae-ecf2ba209d67?source=api-prod","cve":"CVE-2020-20627","affectedVersions":"<2.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/824ec2ba-b701-46e9-b237-53cd7d0e46da/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"824ec2ba-b701-46e9-b237-53cd7d0e46da"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/824ec2ba-b701-46e9-b237-53cd7d0e46da?source=api-prod","cve":"CVE-2024-5941","affectedVersions":"<=3.14.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/82ff0450-5a76-453e-bb27-45c11fff7419/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.5 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"82ff0450-5a76-453e-bb27-45c11fff7419"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/82ff0450-5a76-453e-bb27-45c11fff7419?source=api-prod","cve":"CVE-2026-66690","affectedVersions":"<=4.16.5","severity":"high"},{"advisoryId":"WPSECADV/WF/85198759-0b9c-4c8a-b650-ad268d0cb784/give","title":"GiveWP 2.4.0 - 2.9.7 - Reflected Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"85198759-0b9c-4c8a-b650-ad268d0cb784"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/85198759-0b9c-4c8a-b650-ad268d0cb784?source=api-prod","cve":"CVE-2021-24213","affectedVersions":">=2.4.0,<2.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8766608e-df72-4b9d-a301-a50c64fadc9a/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-20 16:38:25","sources":[{"name":"Wordfence","remoteId":"8766608e-df72-4b9d-a301-a50c64fadc9a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8766608e-df72-4b9d-a301-a50c64fadc9a?source=api-prod","cve":"CVE-2025-7221","affectedVersions":"<=4.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/89a9d925-6ca3-481f-ba7d-ea9869d51b52/give","title":"GiveWP <= 2.23.2 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"89a9d925-6ca3-481f-ba7d-ea9869d51b52"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/89a9d925-6ca3-481f-ba7d-ea9869d51b52?source=api-prod","cve":"CVE-2023-0224","affectedVersions":"<=2.23.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/8a106ebb-f3ec-4995-9717-358b91d468b4/give","title":"GiveWP <= 4.16.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a106ebb-f3ec-4995-9717-358b91d468b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a106ebb-f3ec-4995-9717-358b91d468b4?source=api-prod","cve":"CVE-2026-65441","affectedVersions":"<=4.16.3","severity":"high"},{"advisoryId":"WPSECADV/WF/8a20f582-10e7-4530-8d3c-9bc1e844badd/give","title":"GiveWP <= 2.23.2  - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a20f582-10e7-4530-8d3c-9bc1e844badd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a20f582-10e7-4530-8d3c-9bc1e844badd?source=api-prod","cve":"CVE-2022-4448","affectedVersions":"<=2.23.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8a5bf903-9da0-46fd-8134-3abe8e97e3b4/give","title":"GiveWP <= 2.10.3 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a5bf903-9da0-46fd-8134-3abe8e97e3b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a5bf903-9da0-46fd-8134-3abe8e97e3b4?source=api-prod","cve":"CVE-2021-24315","affectedVersions":"<2.10.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/8a8ae1b0-e9a0-4179-970b-dbcb0642547c/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a8ae1b0-e9a0-4179-970b-dbcb0642547c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a8ae1b0-e9a0-4179-970b-dbcb0642547c?source=api-prod","cve":"CVE-2025-0912","affectedVersions":"<=3.19.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/8f03b4ef-e877-430e-a440-3af0feca818c/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-18 17:35:14","sources":[{"name":"Wordfence","remoteId":"8f03b4ef-e877-430e-a440-3af0feca818c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f03b4ef-e877-430e-a440-3af0feca818c?source=api-prod","cve":"CVE-2025-4571","affectedVersions":"<=4.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/928dd5c1-c396-4ddb-b910-697884dbc824/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.3 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"928dd5c1-c396-4ddb-b910-697884dbc824"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/928dd5c1-c396-4ddb-b910-697884dbc824?source=api-prod","cve":"CVE-2026-65464","affectedVersions":"<=4.16.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/93e2d007-8157-42c5-92ad-704dc80749a3/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-19 13:55:41","sources":[{"name":"Wordfence","remoteId":"93e2d007-8157-42c5-92ad-704dc80749a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/93e2d007-8157-42c5-92ad-704dc80749a3?source=api-prod","cve":"CVE-2024-5932","affectedVersions":"<=3.14.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/95823720-e1dc-46c1-887b-ffd877b2fbe5/give","title":"GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"95823720-e1dc-46c1-887b-ffd877b2fbe5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95823720-e1dc-46c1-887b-ffd877b2fbe5?source=api-prod","cve":"CVE-2025-13206","affectedVersions":"<=4.13.0","severity":"high"},{"advisoryId":"WPSECADV/WF/95f49cbd-a794-4b39-92cb-9d9c8df82685/give","title":"GiveWP <= 4.16.2 - Unauthenticated Recurring Donor Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"95f49cbd-a794-4b39-92cb-9d9c8df82685"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95f49cbd-a794-4b39-92cb-9d9c8df82685?source=api-prod","cve":"CVE-2026-14319","affectedVersions":"<=4.16.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/9cf27806-e521-40b5-8ab6-1f90f3957d06/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"9cf27806-e521-40b5-8ab6-1f90f3957d06"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9cf27806-e521-40b5-8ab6-1f90f3957d06?source=api-prod","cve":"CVE-2026-97066","affectedVersions":"<=4.16.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/a104f88b-deae-465d-b4c1-9a1fc78e5ee9/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"a104f88b-deae-465d-b4c1-9a1fc78e5ee9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a104f88b-deae-465d-b4c1-9a1fc78e5ee9?source=api-prod","cve":"CVE-2024-5939","affectedVersions":"<=3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1e820d0-7d94-43d3-98db-db2b249b0a63/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 08:31:00","sources":[{"name":"Wordfence","remoteId":"a1e820d0-7d94-43d3-98db-db2b249b0a63"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1e820d0-7d94-43d3-98db-db2b249b0a63?source=api-prod","cve":"CVE-2026-104404","affectedVersions":"<=4.17.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2dc1a04-5503-412b-92e7-ed86910abd92/give","title":"GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_delete_payment_note\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2dc1a04-5503-412b-92e7-ed86910abd92"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2dc1a04-5503-412b-92e7-ed86910abd92?source=api-prod","affectedVersions":"<=2.25.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9939ffe-a5d5-45cb-b673-665acf1ff09d/give","title":"GiveWP <= 2.25.1 - Cross-Site Request Forgery via process_bulk_action\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9939ffe-a5d5-45cb-b673-665acf1ff09d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9939ffe-a5d5-45cb-b673-665acf1ff09d?source=api-prod","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9af1429-32c5-4907-acf4-83efc6727bb8/give","title":"GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9af1429-32c5-4907-acf4-83efc6727bb8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9af1429-32c5-4907-acf4-83efc6727bb8?source=api-prod","cve":"CVE-2023-23672","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ad7e3fe0-561e-40d8-b22c-bf8e7675b87f/give","title":"GiveWP <= 2.17.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ad7e3fe0-561e-40d8-b22c-bf8e7675b87f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ad7e3fe0-561e-40d8-b22c-bf8e7675b87f?source=api-prod","cve":"CVE-2021-25100","affectedVersions":"<2.17.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/addae413-1fc5-427f-a5ef-3da705cbeb5b/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"addae413-1fc5-427f-a5ef-3da705cbeb5b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/addae413-1fc5-427f-a5ef-3da705cbeb5b?source=api-prod","cve":"CVE-2022-2117","affectedVersions":"<=2.20.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2143edf-5423-4e79-8638-a5b98490d292/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"b2143edf-5423-4e79-8638-a5b98490d292"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2143edf-5423-4e79-8638-a5b98490d292?source=api-prod","cve":"CVE-2024-12877","affectedVersions":"<=3.19.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/b30261e0-1fa1-4794-98f6-851532b7615c/give","title":"GiveWP <= 2.25.1 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"b30261e0-1fa1-4794-98f6-851532b7615c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b30261e0-1fa1-4794-98f6-851532b7615c?source=api-prod","cve":"CVE-2022-40211","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4d9acfb-bb9d-4b00-b439-c7ccea751f8d/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4d9acfb-bb9d-4b00-b439-c7ccea751f8d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4d9acfb-bb9d-4b00-b439-c7ccea751f8d?source=api-prod","cve":"CVE-2025-2331","affectedVersions":"<=3.22.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b8eb3aa9-fe60-48b6-aa24-7873dd68b47e/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8eb3aa9-fe60-48b6-aa24-7873dd68b47e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8eb3aa9-fe60-48b6-aa24-7873dd68b47e?source=api-prod","cve":"CVE-2024-9634","affectedVersions":"<=3.16.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/b9860e0e-e330-42fc-8a74-336ceb787f39/give","title":"GiveWP <= 4.13.1 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"b9860e0e-e330-42fc-8a74-336ceb787f39"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9860e0e-e330-42fc-8a74-336ceb787f39?source=api-prod","cve":"CVE-2025-66533","affectedVersions":"<=4.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bdd0ba4b-56f1-4f4b-95f7-28c911c8de09/give","title":"GiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-15 13:43:51","sources":[{"name":"Wordfence","remoteId":"bdd0ba4b-56f1-4f4b-95f7-28c911c8de09"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdd0ba4b-56f1-4f4b-95f7-28c911c8de09?source=api-prod","cve":"CVE-2026-14987","affectedVersions":"<=4.16.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/c1710f84-e3c1-4fbc-841e-c7c9ccf3a2e5/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"c1710f84-e3c1-4fbc-841e-c7c9ccf3a2e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c1710f84-e3c1-4fbc-841e-c7c9ccf3a2e5?source=api-prod","cve":"CVE-2024-1424","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c177440a-4575-4202-be16-ac7ab0fbb90b/give","title":"GiveWP <= 2.4.6 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-05-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c177440a-4575-4202-be16-ac7ab0fbb90b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c177440a-4575-4202-be16-ac7ab0fbb90b?source=api-prod","cve":"CVE-2019-15317","affectedVersions":"<2.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c1da9295-e43c-4dea-b035-8ad165fc1d73/give","title":"GiveWP <= 4.19.0.0 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"c1da9295-e43c-4dea-b035-8ad165fc1d73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c1da9295-e43c-4dea-b035-8ad165fc1d73?source=api-prod","cve":"CVE-2026-111976","affectedVersions":"<=4.19.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/c4c530fa-eaf4-4721-bfb6-9fc06d7f343c/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-27 13:58:26","sources":[{"name":"Wordfence","remoteId":"c4c530fa-eaf4-4721-bfb6-9fc06d7f343c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4c530fa-eaf4-4721-bfb6-9fc06d7f343c?source=api-prod","cve":"CVE-2024-8353","affectedVersions":"<=3.16.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/c820003b-8f30-4557-a282-e3ad7e403062/give","title":"GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"c820003b-8f30-4557-a282-e3ad7e403062"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c820003b-8f30-4557-a282-e3ad7e403062?source=api-prod","cve":"CVE-2023-25450","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb7ec7ad-797b-4a5c-9b1c-31284083faef/give","title":"GiveWP <= 2.25.1 - Cross-Site Request Forgery via save\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb7ec7ad-797b-4a5c-9b1c-31284083faef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb7ec7ad-797b-4a5c-9b1c-31284083faef?source=api-prod","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc5f7a07-8117-4305-a72c-6afed80b6bcf/give","title":"GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"cc5f7a07-8117-4305-a72c-6afed80b6bcf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc5f7a07-8117-4305-a72c-6afed80b6bcf?source=api-prod","cve":"CVE-2023-23668","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc825b2f-43d0-42f0-972d-7d361f7e0b59/give","title":"GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 17:09:26","sources":[{"name":"Wordfence","remoteId":"cc825b2f-43d0-42f0-972d-7d361f7e0b59"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc825b2f-43d0-42f0-972d-7d361f7e0b59?source=api-prod","cve":"CVE-2026-97643","affectedVersions":"<=4.17.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d09a0b62-6556-4be5-a6f2-0cb0edcced3b/give","title":"GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_store_payment_note\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"d09a0b62-6556-4be5-a6f2-0cb0edcced3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d09a0b62-6556-4be5-a6f2-0cb0edcced3b?source=api-prod","affectedVersions":"<=2.25.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d32b458f-9fc3-4bcc-8009-9832070a7edb/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.18.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"d32b458f-9fc3-4bcc-8009-9832070a7edb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d32b458f-9fc3-4bcc-8009-9832070a7edb?source=api-prod","cve":"CVE-2026-106600","affectedVersions":"<=4.18.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3cda8d0-321c-4b15-980e-5ebf49fac367/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3cda8d0-321c-4b15-980e-5ebf49fac367"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3cda8d0-321c-4b15-980e-5ebf49fac367?source=api-prod","cve":"CVE-2024-5940","affectedVersions":"<=3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d57be728-6adc-401f-be90-e28734f85d41/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 10:38:47","sources":[{"name":"Wordfence","remoteId":"d57be728-6adc-401f-be90-e28734f85d41"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d57be728-6adc-401f-be90-e28734f85d41?source=api-prod","cve":"CVE-2026-104405","affectedVersions":"<=4.17.0","severity":"high"},{"advisoryId":"WPSECADV/WF/d60540ec-e176-42f3-a987-141a9aa184c6/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.5.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"d60540ec-e176-42f3-a987-141a9aa184c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d60540ec-e176-42f3-a987-141a9aa184c6?source=api-prod","cve":"CVE-2026-73352","affectedVersions":"<=4.16.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d74d71a8-774a-4ebb-b254-0e65a8044319/give","title":"GiveWP <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d74d71a8-774a-4ebb-b254-0e65a8044319"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d74d71a8-774a-4ebb-b254-0e65a8044319?source=api-prod","cve":"CVE-2023-51415","affectedVersions":"<=3.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d8bf1d64-8012-4588-9897-aa8bb0cacfb6/give","title":"GiveWP <= 3.3.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"d8bf1d64-8012-4588-9897-aa8bb0cacfb6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d8bf1d64-8012-4588-9897-aa8bb0cacfb6?source=api-prod","cve":"CVE-2024-27987","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/dc5c511f-dc79-468b-a107-cdf50999faf8/give","title":"GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"dc5c511f-dc79-468b-a107-cdf50999faf8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc5c511f-dc79-468b-a107-cdf50999faf8?source=api-prod","cve":"CVE-2023-4246","affectedVersions":"<=2.33.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/dd26a390-0de5-4699-a790-cac86bf4a057/give","title":"GiveWP <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"dd26a390-0de5-4699-a790-cac86bf4a057"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dd26a390-0de5-4699-a790-cac86bf4a057?source=api-prod","cve":"CVE-2026-5510","affectedVersions":"<=4.14.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/dd8f5cfa-3431-4617-b2cd-d5a8ce4530f4/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-17 16:06:14","sources":[{"name":"Wordfence","remoteId":"dd8f5cfa-3431-4617-b2cd-d5a8ce4530f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dd8f5cfa-3431-4617-b2cd-d5a8ce4530f4?source=api-prod","cve":"CVE-2024-3714","affectedVersions":"<=3.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ddf9a043-5eb6-46fd-88c2-0f5a04f73fc9/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-03 14:13:58","sources":[{"name":"Wordfence","remoteId":"ddf9a043-5eb6-46fd-88c2-0f5a04f73fc9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ddf9a043-5eb6-46fd-88c2-0f5a04f73fc9?source=api-prod","cve":"CVE-2025-11228","affectedVersions":"<=4.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/e32d9104-5a39-4455-b76a-e24ae787bdfd/give","title":"GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"e32d9104-5a39-4455-b76a-e24ae787bdfd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e32d9104-5a39-4455-b76a-e24ae787bdfd?source=api-prod","cve":"CVE-2023-4247","affectedVersions":"<=2.33.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e6a7ec29-6dc6-4c73-8cc4-4aa4da79941e/give","title":"GiveWP <= 4.13.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"e6a7ec29-6dc6-4c73-8cc4-4aa4da79941e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e6a7ec29-6dc6-4c73-8cc4-4aa4da79941e?source=api-prod","cve":"CVE-2025-67467","affectedVersions":"<=4.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/eaa01222-28e4-4718-83c1-c7af91ad0326/give","title":"GiveWP <= 4.14.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"eaa01222-28e4-4718-83c1-c7af91ad0326"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eaa01222-28e4-4718-83c1-c7af91ad0326?source=api-prod","cve":"CVE-2026-42642","affectedVersions":"<=4.14.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee18552b-2814-4598-9b7b-7c919d6d644e/give","title":"GiveWP <= 4.16.1 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa Form\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-01 17:15:16","sources":[{"name":"Wordfence","remoteId":"ee18552b-2814-4598-9b7b-7c919d6d644e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee18552b-2814-4598-9b7b-7c919d6d644e?source=api-prod","cve":"CVE-2026-13704","affectedVersions":"<=4.16.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3d597c3-fec9-4dda-a539-0df1d9358a15/give","title":"GiveWP <= 4.16.8.0 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3d597c3-fec9-4dda-a539-0df1d9358a15"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3d597c3-fec9-4dda-a539-0df1d9358a15?source=api-prod","cve":"CVE-2026-85530","affectedVersions":"<=4.16.8.0","severity":"high"},{"advisoryId":"WPSECADV/WF/f85478c4-ea66-4bca-b501-2e55425396f7/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.3 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"f85478c4-ea66-4bca-b501-2e55425396f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f85478c4-ea66-4bca-b501-2e55425396f7?source=api-prod","cve":"CVE-2026-14317","affectedVersions":"<4.16.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f90f5f35-ed84-4284-be21-15bfaf10175f/give","title":"GiveWP <= 2.17.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"f90f5f35-ed84-4284-be21-15bfaf10175f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f90f5f35-ed84-4284-be21-15bfaf10175f?source=api-prod","cve":"CVE-2021-25099","affectedVersions":"<2.17.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/fb0b24b6-38da-4650-b542-a31ba8c98fb9/give","title":"GiveWP <= 2.3.0 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"fb0b24b6-38da-4650-b542-a31ba8c98fb9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fb0b24b6-38da-4650-b542-a31ba8c98fb9?source=api-prod","cve":"CVE-2019-9909","affectedVersions":"<2.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/fcf740e1-5dbe-4849-a8b8-02d21b4d5543/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 10:49:31","sources":[{"name":"Wordfence","remoteId":"fcf740e1-5dbe-4849-a8b8-02d21b4d5543"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fcf740e1-5dbe-4849-a8b8-02d21b4d5543?source=api-prod","cve":"CVE-2026-104672","affectedVersions":"<=4.17.0","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/04aca055-b62a-4c20-8347-0648a8545ef2/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.8.1 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"04aca055-b62a-4c20-8347-0648a8545ef2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/04aca055-b62a-4c20-8347-0648a8545ef2?source=api-prod","cve":"CVE-2026-96333","affectedVersions":"<=4.16.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/06a7ff0b-ec6b-490c-9bb0-fbb5c1c337c4/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.19.3 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"06a7ff0b-ec6b-490c-9bb0-fbb5c1c337c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06a7ff0b-ec6b-490c-9bb0-fbb5c1c337c4?source=api-prod","cve":"CVE-2025-22777","affectedVersions":"<=3.19.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/08f8f489-6b31-45d8-a122-bbaa283a2b10/give","title":"GiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 14:48:48","sources":[{"name":"Wordfence","remoteId":"08f8f489-6b31-45d8-a122-bbaa283a2b10"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/08f8f489-6b31-45d8-a122-bbaa283a2b10?source=api-prod","cve":"CVE-2026-13246","affectedVersions":"<=4.16.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/1861d943-ac58-4a44-ab50-e39101e82013/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.12.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"1861d943-ac58-4a44-ab50-e39101e82013"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1861d943-ac58-4a44-ab50-e39101e82013?source=api-prod","cve":"CVE-2024-35679","affectedVersions":"<=3.12.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/18c0f717-6825-4421-af53-68f1cf502f81/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.18.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"18c0f717-6825-4421-af53-68f1cf502f81"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/18c0f717-6825-4421-af53-68f1cf502f81?source=api-prod","cve":"CVE-2024-11921","affectedVersions":"<=3.18.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/1c9b7866-d4e4-4ed0-a94b-1daef73a10bc/give","title":"GiveWP <= 3.14.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"1c9b7866-d4e4-4ed0-a94b-1daef73a10bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1c9b7866-d4e4-4ed0-a94b-1daef73a10bc?source=api-prod","cve":"CVE-2024-37099","affectedVersions":"<=3.14.1","severity":"high"},{"advisoryId":"WPSECADV/WF/1d59151c-aa50-4183-b429-143580961cb1/give","title":"GiveWP <= 4.16.8 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d59151c-aa50-4183-b429-143580961cb1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d59151c-aa50-4183-b429-143580961cb1?source=api-prod","cve":"CVE-2026-85113","affectedVersions":"<=4.16.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/22b89c2f-a42d-4e2f-b344-81d8363a332f/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"22b89c2f-a42d-4e2f-b344-81d8363a332f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22b89c2f-a42d-4e2f-b344-81d8363a332f?source=api-prod","cve":"CVE-2026-96830","affectedVersions":"<=4.16.9","severity":"high"},{"advisoryId":"WPSECADV/WF/22ff4b09-063b-425e-9d59-be2e5d283186/give","title":"Give - Donation Plugin <= 2.33.0 - Authenticated(Give Manager+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"22ff4b09-063b-425e-9d59-be2e5d283186"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22ff4b09-063b-425e-9d59-be2e5d283186?source=api-prod","cve":"CVE-2023-41665","affectedVersions":"<2.33.1","severity":"high"},{"advisoryId":"WPSECADV/WF/231b1b64-96fd-4d58-a312-2bdc4a05090a/give","title":"GiveWP <= 4.19.0.0 - Authenticated (Give Worker+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"231b1b64-96fd-4d58-a312-2bdc4a05090a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/231b1b64-96fd-4d58-a312-2bdc4a05090a?source=api-prod","cve":"CVE-2026-111979","affectedVersions":"<=4.19.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/2379a029-cc0d-4fa2-9aeb-47a4abd6b51a/give","title":"GiveWP <= 2.25.1 - Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2379a029-cc0d-4fa2-9aeb-47a4abd6b51a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2379a029-cc0d-4fa2-9aeb-47a4abd6b51a?source=api-prod","cve":"CVE-2022-40312","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a0381b1-9b63-41cb-8125-d22274b98867/give","title":"GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a0381b1-9b63-41cb-8125-d22274b98867"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a0381b1-9b63-41cb-8125-d22274b98867?source=api-prod","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a13ce09-b312-4186-b0e2-63065c47f15d/give","title":"GiveWP <= 3.15.1 - Unauthenticated Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a13ce09-b312-4186-b0e2-63065c47f15d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a13ce09-b312-4186-b0e2-63065c47f15d?source=api-prod","cve":"CVE-2024-6551","affectedVersions":"<=3.15.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a541529-ef53-468c-a7f0-0cd6822bd17b/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.14.5 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a541529-ef53-468c-a7f0-0cd6822bd17b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a541529-ef53-468c-a7f0-0cd6822bd17b?source=api-prod","cve":"CVE-2026-42678","affectedVersions":"<=4.14.5","severity":"high"},{"advisoryId":"WPSECADV/WF/2bff8dea-6971-47d4-bd2c-0821687033e5/give","title":"GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"2bff8dea-6971-47d4-bd2c-0821687033e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2bff8dea-6971-47d4-bd2c-0821687033e5?source=api-prod","cve":"CVE-2023-4248","affectedVersions":"<=2.33.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/2c9e5440-9d66-416b-899f-2b453294885d/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated User Impersonation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c9e5440-9d66-416b-899f-2b453294885d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c9e5440-9d66-416b-899f-2b453294885d?source=api-prod","cve":"CVE-2026-97196","affectedVersions":"<=4.16.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/2dca6c29-9f05-4d82-90e3-834f1dd8005a/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"2dca6c29-9f05-4d82-90e3-834f1dd8005a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2dca6c29-9f05-4d82-90e3-834f1dd8005a?source=api-prod","cve":"CVE-2024-5977","affectedVersions":"<=3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/39e501d8-88a0-4625-aeb0-aa33fc89a8d4/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 19:18:44","sources":[{"name":"Wordfence","remoteId":"39e501d8-88a0-4625-aeb0-aa33fc89a8d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39e501d8-88a0-4625-aeb0-aa33fc89a8d4?source=api-prod","cve":"CVE-2025-7205","affectedVersions":"<=4.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3b6b1b7e-2ba4-4b72-9e3d-b54c00437cac/give","title":"GiveWP <= 2.33.1 - Missing Authorization via handleBeforeGateway\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"3b6b1b7e-2ba4-4b72-9e3d-b54c00437cac"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3b6b1b7e-2ba4-4b72-9e3d-b54c00437cac?source=api-prod","cve":"CVE-2023-47183","affectedVersions":"<=2.33.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3dc26eaa-2da5-4cd6-b613-4da2faad0f3b/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 2.21.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"3dc26eaa-2da5-4cd6-b613-4da2faad0f3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3dc26eaa-2da5-4cd6-b613-4da2faad0f3b?source=api-prod","cve":"CVE-2022-2260","affectedVersions":"<=2.21.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/3dc7bc0a-b209-431f-a9f1-f850b1a1d1b4/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.4.2 - Authenticated (GiveWP Manager+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"3dc7bc0a-b209-431f-a9f1-f850b1a1d1b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3dc7bc0a-b209-431f-a9f1-f850b1a1d1b4?source=api-prod","cve":"CVE-2024-30229","affectedVersions":"<=3.4.2","severity":"high"},{"advisoryId":"WPSECADV/WF/3fe1bb24-1f60-40f6-9b5e-58e0158bdfd3/give","title":"GiveWP <= 2.20.2 - Authenticated Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-12 14:18:00","sources":[{"name":"Wordfence","remoteId":"3fe1bb24-1f60-40f6-9b5e-58e0158bdfd3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3fe1bb24-1f60-40f6-9b5e-58e0158bdfd3?source=api-prod","cve":"CVE-2022-31475","affectedVersions":"<=2.20.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/40595943-121d-4492-a0ed-f2de1bd99fda/give","title":"Give <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings Function\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-14 22:39:51","sources":[{"name":"Wordfence","remoteId":"40595943-121d-4492-a0ed-f2de1bd99fda"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40595943-121d-4492-a0ed-f2de1bd99fda?source=api-prod","cve":"CVE-2025-2025","affectedVersions":"<=3.22.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/40f79195-23e7-4091-9dcb-8b787f0606f4/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 0.8.5 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"40f79195-23e7-4091-9dcb-8b787f0606f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40f79195-23e7-4091-9dcb-8b787f0606f4?source=api-prod","affectedVersions":"<0.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/41c2edae-9788-47ad-bf0b-aa944893c4e2/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.14.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"41c2edae-9788-47ad-bf0b-aa944893c4e2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41c2edae-9788-47ad-bf0b-aa944893c4e2?source=api-prod","cve":"CVE-2026-34900","affectedVersions":"<=4.14.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/463fea25-c793-42fc-a8a8-28d001978133/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.3 - Authenticated (Custom role+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"463fea25-c793-42fc-a8a8-28d001978133"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/463fea25-c793-42fc-a8a8-28d001978133?source=api-prod","cve":"CVE-2026-14318","affectedVersions":"<4.16.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/4794858f-ebaf-4adf-ab08-309964c18c00/give","title":"GiveWP <= 2.5.4 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"4794858f-ebaf-4adf-ab08-309964c18c00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4794858f-ebaf-4adf-ab08-309964c18c00?source=api-prod","cve":"CVE-2019-20360","affectedVersions":"<=2.5.4","severity":"high"},{"advisoryId":"WPSECADV/WF/498087da-3887-475a-9796-676ee1d1fb99/give","title":"GiveWP <= 2.11.3 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"498087da-3887-475a-9796-676ee1d1fb99"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/498087da-3887-475a-9796-676ee1d1fb99?source=api-prod","cve":"CVE-2021-24524","affectedVersions":"<2.12.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/49954c72-df0d-46ec-a252-8af84dea41bf/give","title":"GiveWP <= 4.15.3 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 16:29:51","sources":[{"name":"Wordfence","remoteId":"49954c72-df0d-46ec-a252-8af84dea41bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49954c72-df0d-46ec-a252-8af84dea41bf?source=api-prod","cve":"CVE-2026-11981","affectedVersions":"<=4.15.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/49c3be3f-60b3-4b83-9683-a08e8e1cf9e9/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.7.1 - Unauthenticated PHP Object Injection to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"49c3be3f-60b3-4b83-9683-a08e8e1cf9e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49c3be3f-60b3-4b83-9683-a08e8e1cf9e9?source=api-prod","cve":"CVE-2026-82222","affectedVersions":"<=4.16.7.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/4a3cae01-620d-405e-baf6-2d66a5b429b3/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-26 17:03:51","sources":[{"name":"Wordfence","remoteId":"4a3cae01-620d-405e-baf6-2d66a5b429b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a3cae01-620d-405e-baf6-2d66a5b429b3?source=api-prod","cve":"CVE-2024-9130","affectedVersions":"<=3.16.1","severity":"high"},{"advisoryId":"WPSECADV/WF/4b9d0ef9-ec09-4c72-9090-0f676976ff82/give","title":"GiveWP <= 4.19.0.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b9d0ef9-ec09-4c72-9090-0f676976ff82"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b9d0ef9-ec09-4c72-9090-0f676976ff82?source=api-prod","cve":"CVE-2026-111980","affectedVersions":"<=4.19.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/50b811e0-c1f4-4970-a340-8c1619456e29/give","title":"GiveWP <= 2.21.2 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"50b811e0-c1f4-4970-a340-8c1619456e29"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50b811e0-c1f4-4970-a340-8c1619456e29?source=api-prod","cve":"CVE-2022-2215","affectedVersions":"<=2.21.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/53ddfd2d-7af1-4561-ab76-5cb3238e8f8b/give","title":"GiveWP <= 2.20.2 - Authenticated Arbitrary File Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-12 13:57:00","sources":[{"name":"Wordfence","remoteId":"53ddfd2d-7af1-4561-ab76-5cb3238e8f8b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53ddfd2d-7af1-4561-ab76-5cb3238e8f8b?source=api-prod","cve":"CVE-2022-28700","affectedVersions":"<=2.20.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/54db1807-69ff-445c-9e02-9abce9fd3940/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-03 14:14:48","sources":[{"name":"Wordfence","remoteId":"54db1807-69ff-445c-9e02-9abce9fd3940"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54db1807-69ff-445c-9e02-9abce9fd3940?source=api-prod","cve":"CVE-2025-11227","affectedVersions":"<=4.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5981b937-189f-4dc3-baf0-ee0d194229eb/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"5981b937-189f-4dc3-baf0-ee0d194229eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5981b937-189f-4dc3-baf0-ee0d194229eb?source=api-prod","cve":"CVE-2026-73348","affectedVersions":"<4.16.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ea02dd5-d837-471c-aa6a-264ffcedd55d/give","title":"GiveWP <= 2.25.2 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ea02dd5-d837-471c-aa6a-264ffcedd55d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ea02dd5-d837-471c-aa6a-264ffcedd55d?source=api-prod","affectedVersions":"<=2.25.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ec23f29-baa3-4bfc-a7b7-d664a81637c1/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ec23f29-baa3-4bfc-a7b7-d664a81637c1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ec23f29-baa3-4bfc-a7b7-d664a81637c1?source=api-prod","cve":"CVE-2026-73349","affectedVersions":"<4.16.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/61901d83-0d05-4be8-a318-43bea086293a/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"61901d83-0d05-4be8-a318-43bea086293a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61901d83-0d05-4be8-a318-43bea086293a?source=api-prod","cve":"CVE-2024-1957","affectedVersions":"<=3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/61d1bc0e-f66f-4bc3-9dfe-2fa19f07999f/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Authenticated (Donor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"61d1bc0e-f66f-4bc3-9dfe-2fa19f07999f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61d1bc0e-f66f-4bc3-9dfe-2fa19f07999f?source=api-prod","cve":"CVE-2026-73357","affectedVersions":"<4.16.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6368c397-0570-4304-a764-869bacc526c7/give","title":"GiveWP <= 2.25.1 - Unauthenticated CSV Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"6368c397-0570-4304-a764-869bacc526c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6368c397-0570-4304-a764-869bacc526c7?source=api-prod","cve":"CVE-2023-22719","affectedVersions":"<=2.25.1","severity":"high"},{"advisoryId":"WPSECADV/WF/6b13b275-e2d9-427a-aed7-e52cee13e05d/give","title":"GiveWP <= 4.19.0.0 - Unauthenticated Donation Amount Restriction Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b13b275-e2d9-427a-aed7-e52cee13e05d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b13b275-e2d9-427a-aed7-e52cee13e05d?source=api-prod","cve":"CVE-2026-111974","affectedVersions":"<=4.19.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/6dc7c5a6-513e-4aa8-9538-0ac6fb37c867/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"6dc7c5a6-513e-4aa8-9538-0ac6fb37c867"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc7c5a6-513e-4aa8-9538-0ac6fb37c867?source=api-prod","cve":"CVE-2025-8620","affectedVersions":"<=4.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/715b0d61-1fac-4039-b18c-e9371788c24c/give","title":"GiveWP - Donation Plugin and Fundraising Platform <= 2.5.0 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"715b0d61-1fac-4039-b18c-e9371788c24c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/715b0d61-1fac-4039-b18c-e9371788c24c?source=api-prod","cve":"CVE-2019-13578","affectedVersions":"<=2.5.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/7a1a9cce-135a-4a5e-a477-ee2615237642/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"7a1a9cce-135a-4a5e-a477-ee2615237642"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a1a9cce-135a-4a5e-a477-ee2615237642?source=api-prod","cve":"CVE-2026-96834","affectedVersions":"<=4.16.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ccf6945-6f18-410b-9f1a-6d52a3cdda1a/give","title":"GiveWP <= 2.17.2 - Reflected Cross-Site Scripting via Import Tool\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ccf6945-6f18-410b-9f1a-6d52a3cdda1a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ccf6945-6f18-410b-9f1a-6d52a3cdda1a?source=api-prod","cve":"CVE-2022-0252","affectedVersions":"<2.17.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ce9bac7-60bb-4880-9e37-4d71f02ee941/give","title":"GiveWP <= 3.15.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ce9bac7-60bb-4880-9e37-4d71f02ee941"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ce9bac7-60bb-4880-9e37-4d71f02ee941?source=api-prod","cve":"CVE-2024-47315","affectedVersions":"<=3.15.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fa8c406-e64d-4093-a102-436ecfb7dd76/give","title":"GiveWP <= 2.25.3 - Authenticated (Admin+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fa8c406-e64d-4093-a102-436ecfb7dd76"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fa8c406-e64d-4093-a102-436ecfb7dd76?source=api-prod","cve":"CVE-2023-32513","affectedVersions":"<=2.25.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/818ef655-aef3-4808-88ae-ecf2ba209d67/give","title":"GiveWP <= 2.5.9 - Missing Authorization to Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-10-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"818ef655-aef3-4808-88ae-ecf2ba209d67"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/818ef655-aef3-4808-88ae-ecf2ba209d67?source=api-prod","cve":"CVE-2020-20627","affectedVersions":"<2.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/824ec2ba-b701-46e9-b237-53cd7d0e46da/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"824ec2ba-b701-46e9-b237-53cd7d0e46da"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/824ec2ba-b701-46e9-b237-53cd7d0e46da?source=api-prod","cve":"CVE-2024-5941","affectedVersions":"<=3.14.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/82ff0450-5a76-453e-bb27-45c11fff7419/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.5 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"82ff0450-5a76-453e-bb27-45c11fff7419"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/82ff0450-5a76-453e-bb27-45c11fff7419?source=api-prod","cve":"CVE-2026-66690","affectedVersions":"<=4.16.5","severity":"high"},{"advisoryId":"WPSECADV/WF/85198759-0b9c-4c8a-b650-ad268d0cb784/give","title":"GiveWP 2.4.0 - 2.9.7 - Reflected Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"85198759-0b9c-4c8a-b650-ad268d0cb784"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/85198759-0b9c-4c8a-b650-ad268d0cb784?source=api-prod","cve":"CVE-2021-24213","affectedVersions":">=2.4.0,<2.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8766608e-df72-4b9d-a301-a50c64fadc9a/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-20 16:38:25","sources":[{"name":"Wordfence","remoteId":"8766608e-df72-4b9d-a301-a50c64fadc9a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8766608e-df72-4b9d-a301-a50c64fadc9a?source=api-prod","cve":"CVE-2025-7221","affectedVersions":"<=4.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/89a9d925-6ca3-481f-ba7d-ea9869d51b52/give","title":"GiveWP <= 2.23.2 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"89a9d925-6ca3-481f-ba7d-ea9869d51b52"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/89a9d925-6ca3-481f-ba7d-ea9869d51b52?source=api-prod","cve":"CVE-2023-0224","affectedVersions":"<=2.23.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/8a106ebb-f3ec-4995-9717-358b91d468b4/give","title":"GiveWP <= 4.16.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a106ebb-f3ec-4995-9717-358b91d468b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a106ebb-f3ec-4995-9717-358b91d468b4?source=api-prod","cve":"CVE-2026-65441","affectedVersions":"<=4.16.3","severity":"high"},{"advisoryId":"WPSECADV/WF/8a20f582-10e7-4530-8d3c-9bc1e844badd/give","title":"GiveWP <= 2.23.2  - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a20f582-10e7-4530-8d3c-9bc1e844badd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a20f582-10e7-4530-8d3c-9bc1e844badd?source=api-prod","cve":"CVE-2022-4448","affectedVersions":"<=2.23.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8a5bf903-9da0-46fd-8134-3abe8e97e3b4/give","title":"GiveWP <= 2.10.3 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a5bf903-9da0-46fd-8134-3abe8e97e3b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a5bf903-9da0-46fd-8134-3abe8e97e3b4?source=api-prod","cve":"CVE-2021-24315","affectedVersions":"<2.10.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/8a8ae1b0-e9a0-4179-970b-dbcb0642547c/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a8ae1b0-e9a0-4179-970b-dbcb0642547c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a8ae1b0-e9a0-4179-970b-dbcb0642547c?source=api-prod","cve":"CVE-2025-0912","affectedVersions":"<=3.19.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/8f03b4ef-e877-430e-a440-3af0feca818c/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-18 17:35:14","sources":[{"name":"Wordfence","remoteId":"8f03b4ef-e877-430e-a440-3af0feca818c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f03b4ef-e877-430e-a440-3af0feca818c?source=api-prod","cve":"CVE-2025-4571","affectedVersions":"<=4.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/928dd5c1-c396-4ddb-b910-697884dbc824/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.3 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"928dd5c1-c396-4ddb-b910-697884dbc824"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/928dd5c1-c396-4ddb-b910-697884dbc824?source=api-prod","cve":"CVE-2026-65464","affectedVersions":"<=4.16.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/93e2d007-8157-42c5-92ad-704dc80749a3/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-19 13:55:41","sources":[{"name":"Wordfence","remoteId":"93e2d007-8157-42c5-92ad-704dc80749a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/93e2d007-8157-42c5-92ad-704dc80749a3?source=api-prod","cve":"CVE-2024-5932","affectedVersions":"<=3.14.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/95823720-e1dc-46c1-887b-ffd877b2fbe5/give","title":"GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"95823720-e1dc-46c1-887b-ffd877b2fbe5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95823720-e1dc-46c1-887b-ffd877b2fbe5?source=api-prod","cve":"CVE-2025-13206","affectedVersions":"<=4.13.0","severity":"high"},{"advisoryId":"WPSECADV/WF/95f49cbd-a794-4b39-92cb-9d9c8df82685/give","title":"GiveWP <= 4.16.2 - Unauthenticated Recurring Donor Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"95f49cbd-a794-4b39-92cb-9d9c8df82685"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95f49cbd-a794-4b39-92cb-9d9c8df82685?source=api-prod","cve":"CVE-2026-14319","affectedVersions":"<=4.16.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/9cf27806-e521-40b5-8ab6-1f90f3957d06/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"9cf27806-e521-40b5-8ab6-1f90f3957d06"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9cf27806-e521-40b5-8ab6-1f90f3957d06?source=api-prod","cve":"CVE-2026-97066","affectedVersions":"<=4.16.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/a104f88b-deae-465d-b4c1-9a1fc78e5ee9/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"a104f88b-deae-465d-b4c1-9a1fc78e5ee9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a104f88b-deae-465d-b4c1-9a1fc78e5ee9?source=api-prod","cve":"CVE-2024-5939","affectedVersions":"<=3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1e820d0-7d94-43d3-98db-db2b249b0a63/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 08:31:00","sources":[{"name":"Wordfence","remoteId":"a1e820d0-7d94-43d3-98db-db2b249b0a63"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1e820d0-7d94-43d3-98db-db2b249b0a63?source=api-prod","cve":"CVE-2026-104404","affectedVersions":"<=4.17.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2dc1a04-5503-412b-92e7-ed86910abd92/give","title":"GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_delete_payment_note\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2dc1a04-5503-412b-92e7-ed86910abd92"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2dc1a04-5503-412b-92e7-ed86910abd92?source=api-prod","affectedVersions":"<=2.25.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9939ffe-a5d5-45cb-b673-665acf1ff09d/give","title":"GiveWP <= 2.25.1 - Cross-Site Request Forgery via process_bulk_action\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9939ffe-a5d5-45cb-b673-665acf1ff09d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9939ffe-a5d5-45cb-b673-665acf1ff09d?source=api-prod","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9af1429-32c5-4907-acf4-83efc6727bb8/give","title":"GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9af1429-32c5-4907-acf4-83efc6727bb8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9af1429-32c5-4907-acf4-83efc6727bb8?source=api-prod","cve":"CVE-2023-23672","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ad7e3fe0-561e-40d8-b22c-bf8e7675b87f/give","title":"GiveWP <= 2.17.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ad7e3fe0-561e-40d8-b22c-bf8e7675b87f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ad7e3fe0-561e-40d8-b22c-bf8e7675b87f?source=api-prod","cve":"CVE-2021-25100","affectedVersions":"<2.17.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/addae413-1fc5-427f-a5ef-3da705cbeb5b/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"addae413-1fc5-427f-a5ef-3da705cbeb5b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/addae413-1fc5-427f-a5ef-3da705cbeb5b?source=api-prod","cve":"CVE-2022-2117","affectedVersions":"<=2.20.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2143edf-5423-4e79-8638-a5b98490d292/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"b2143edf-5423-4e79-8638-a5b98490d292"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2143edf-5423-4e79-8638-a5b98490d292?source=api-prod","cve":"CVE-2024-12877","affectedVersions":"<=3.19.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/b30261e0-1fa1-4794-98f6-851532b7615c/give","title":"GiveWP <= 2.25.1 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"b30261e0-1fa1-4794-98f6-851532b7615c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b30261e0-1fa1-4794-98f6-851532b7615c?source=api-prod","cve":"CVE-2022-40211","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b33978d0-2680-44ab-9bdf-e0db1910fb6a/give","title":"GiveWP <= 4.19.0.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b33978d0-2680-44ab-9bdf-e0db1910fb6a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b33978d0-2680-44ab-9bdf-e0db1910fb6a?source=api-prod","cve":"CVE-2026-111981","affectedVersions":"<=4.19.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4d9acfb-bb9d-4b00-b439-c7ccea751f8d/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4d9acfb-bb9d-4b00-b439-c7ccea751f8d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4d9acfb-bb9d-4b00-b439-c7ccea751f8d?source=api-prod","cve":"CVE-2025-2331","affectedVersions":"<=3.22.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b8eb3aa9-fe60-48b6-aa24-7873dd68b47e/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8eb3aa9-fe60-48b6-aa24-7873dd68b47e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8eb3aa9-fe60-48b6-aa24-7873dd68b47e?source=api-prod","cve":"CVE-2024-9634","affectedVersions":"<=3.16.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/b9860e0e-e330-42fc-8a74-336ceb787f39/give","title":"GiveWP <= 4.13.1 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"b9860e0e-e330-42fc-8a74-336ceb787f39"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9860e0e-e330-42fc-8a74-336ceb787f39?source=api-prod","cve":"CVE-2025-66533","affectedVersions":"<=4.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bdd0ba4b-56f1-4f4b-95f7-28c911c8de09/give","title":"GiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-15 13:43:51","sources":[{"name":"Wordfence","remoteId":"bdd0ba4b-56f1-4f4b-95f7-28c911c8de09"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdd0ba4b-56f1-4f4b-95f7-28c911c8de09?source=api-prod","cve":"CVE-2026-14987","affectedVersions":"<=4.16.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/c1710f84-e3c1-4fbc-841e-c7c9ccf3a2e5/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"c1710f84-e3c1-4fbc-841e-c7c9ccf3a2e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c1710f84-e3c1-4fbc-841e-c7c9ccf3a2e5?source=api-prod","cve":"CVE-2024-1424","affectedVersions":"<=3.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c177440a-4575-4202-be16-ac7ab0fbb90b/give","title":"GiveWP <= 2.4.6 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-05-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c177440a-4575-4202-be16-ac7ab0fbb90b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c177440a-4575-4202-be16-ac7ab0fbb90b?source=api-prod","cve":"CVE-2019-15317","affectedVersions":"<2.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c1da9295-e43c-4dea-b035-8ad165fc1d73/give","title":"GiveWP <= 4.19.0.0 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"c1da9295-e43c-4dea-b035-8ad165fc1d73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c1da9295-e43c-4dea-b035-8ad165fc1d73?source=api-prod","cve":"CVE-2026-111976","affectedVersions":"<=4.19.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/c4c530fa-eaf4-4721-bfb6-9fc06d7f343c/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-27 13:58:26","sources":[{"name":"Wordfence","remoteId":"c4c530fa-eaf4-4721-bfb6-9fc06d7f343c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4c530fa-eaf4-4721-bfb6-9fc06d7f343c?source=api-prod","cve":"CVE-2024-8353","affectedVersions":"<=3.16.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/c820003b-8f30-4557-a282-e3ad7e403062/give","title":"GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"c820003b-8f30-4557-a282-e3ad7e403062"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c820003b-8f30-4557-a282-e3ad7e403062?source=api-prod","cve":"CVE-2023-25450","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8d19086-53db-49f3-bc29-88ef869cc18b/give","title":"GiveWP <= 4.19.0.0 - Authenticated (Give Manager+) Path Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8d19086-53db-49f3-bc29-88ef869cc18b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8d19086-53db-49f3-bc29-88ef869cc18b?source=api-prod","cve":"CVE-2026-111978","affectedVersions":"<=4.19.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb7ec7ad-797b-4a5c-9b1c-31284083faef/give","title":"GiveWP <= 2.25.1 - Cross-Site Request Forgery via save\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb7ec7ad-797b-4a5c-9b1c-31284083faef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb7ec7ad-797b-4a5c-9b1c-31284083faef?source=api-prod","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc5f7a07-8117-4305-a72c-6afed80b6bcf/give","title":"GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"cc5f7a07-8117-4305-a72c-6afed80b6bcf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc5f7a07-8117-4305-a72c-6afed80b6bcf?source=api-prod","cve":"CVE-2023-23668","affectedVersions":"<=2.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc825b2f-43d0-42f0-972d-7d361f7e0b59/give","title":"GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 17:09:26","sources":[{"name":"Wordfence","remoteId":"cc825b2f-43d0-42f0-972d-7d361f7e0b59"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc825b2f-43d0-42f0-972d-7d361f7e0b59?source=api-prod","cve":"CVE-2026-97643","affectedVersions":"<=4.17.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d09a0b62-6556-4be5-a6f2-0cb0edcced3b/give","title":"GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_store_payment_note\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"d09a0b62-6556-4be5-a6f2-0cb0edcced3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d09a0b62-6556-4be5-a6f2-0cb0edcced3b?source=api-prod","affectedVersions":"<=2.25.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d32b458f-9fc3-4bcc-8009-9832070a7edb/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.18.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"d32b458f-9fc3-4bcc-8009-9832070a7edb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d32b458f-9fc3-4bcc-8009-9832070a7edb?source=api-prod","cve":"CVE-2026-106600","affectedVersions":"<=4.18.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3cda8d0-321c-4b15-980e-5ebf49fac367/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3cda8d0-321c-4b15-980e-5ebf49fac367"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3cda8d0-321c-4b15-980e-5ebf49fac367?source=api-prod","cve":"CVE-2024-5940","affectedVersions":"<=3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d57be728-6adc-401f-be90-e28734f85d41/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 10:38:47","sources":[{"name":"Wordfence","remoteId":"d57be728-6adc-401f-be90-e28734f85d41"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d57be728-6adc-401f-be90-e28734f85d41?source=api-prod","cve":"CVE-2026-104405","affectedVersions":"<=4.17.0","severity":"high"},{"advisoryId":"WPSECADV/WF/d60540ec-e176-42f3-a987-141a9aa184c6/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.16.5.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"d60540ec-e176-42f3-a987-141a9aa184c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d60540ec-e176-42f3-a987-141a9aa184c6?source=api-prod","cve":"CVE-2026-73352","affectedVersions":"<=4.16.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d74d71a8-774a-4ebb-b254-0e65a8044319/give","title":"GiveWP <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d74d71a8-774a-4ebb-b254-0e65a8044319"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d74d71a8-774a-4ebb-b254-0e65a8044319?source=api-prod","cve":"CVE-2023-51415","affectedVersions":"<=3.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d8bf1d64-8012-4588-9897-aa8bb0cacfb6/give","title":"GiveWP <= 3.3.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"d8bf1d64-8012-4588-9897-aa8bb0cacfb6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d8bf1d64-8012-4588-9897-aa8bb0cacfb6?source=api-prod","cve":"CVE-2024-27987","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/dc5c511f-dc79-468b-a107-cdf50999faf8/give","title":"GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"dc5c511f-dc79-468b-a107-cdf50999faf8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc5c511f-dc79-468b-a107-cdf50999faf8?source=api-prod","cve":"CVE-2023-4246","affectedVersions":"<=2.33.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/dd26a390-0de5-4699-a790-cac86bf4a057/give","title":"GiveWP <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"dd26a390-0de5-4699-a790-cac86bf4a057"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dd26a390-0de5-4699-a790-cac86bf4a057?source=api-prod","cve":"CVE-2026-5510","affectedVersions":"<=4.14.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/dd8f5cfa-3431-4617-b2cd-d5a8ce4530f4/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-17 16:06:14","sources":[{"name":"Wordfence","remoteId":"dd8f5cfa-3431-4617-b2cd-d5a8ce4530f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dd8f5cfa-3431-4617-b2cd-d5a8ce4530f4?source=api-prod","cve":"CVE-2024-3714","affectedVersions":"<=3.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ddf9a043-5eb6-46fd-88c2-0f5a04f73fc9/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-03 14:13:58","sources":[{"name":"Wordfence","remoteId":"ddf9a043-5eb6-46fd-88c2-0f5a04f73fc9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ddf9a043-5eb6-46fd-88c2-0f5a04f73fc9?source=api-prod","cve":"CVE-2025-11228","affectedVersions":"<=4.10.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/e32d9104-5a39-4455-b76a-e24ae787bdfd/give","title":"GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"e32d9104-5a39-4455-b76a-e24ae787bdfd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e32d9104-5a39-4455-b76a-e24ae787bdfd?source=api-prod","cve":"CVE-2023-4247","affectedVersions":"<=2.33.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e6a7ec29-6dc6-4c73-8cc4-4aa4da79941e/give","title":"GiveWP <= 4.13.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"e6a7ec29-6dc6-4c73-8cc4-4aa4da79941e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e6a7ec29-6dc6-4c73-8cc4-4aa4da79941e?source=api-prod","cve":"CVE-2025-67467","affectedVersions":"<=4.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/eaa01222-28e4-4718-83c1-c7af91ad0326/give","title":"GiveWP <= 4.14.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"eaa01222-28e4-4718-83c1-c7af91ad0326"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eaa01222-28e4-4718-83c1-c7af91ad0326?source=api-prod","cve":"CVE-2026-42642","affectedVersions":"<=4.14.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee18552b-2814-4598-9b7b-7c919d6d644e/give","title":"GiveWP <= 4.16.1 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa Form\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-01 17:15:16","sources":[{"name":"Wordfence","remoteId":"ee18552b-2814-4598-9b7b-7c919d6d644e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee18552b-2814-4598-9b7b-7c919d6d644e?source=api-prod","cve":"CVE-2026-13704","affectedVersions":"<=4.16.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3d597c3-fec9-4dda-a539-0df1d9358a15/give","title":"GiveWP <= 4.16.8.0 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3d597c3-fec9-4dda-a539-0df1d9358a15"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3d597c3-fec9-4dda-a539-0df1d9358a15?source=api-prod","cve":"CVE-2026-85530","affectedVersions":"<=4.16.8.0","severity":"high"},{"advisoryId":"WPSECADV/WF/f85478c4-ea66-4bca-b501-2e55425396f7/give","title":"GiveWP – Donation Plugin and Fundraising Platform < 4.16.3 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"f85478c4-ea66-4bca-b501-2e55425396f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f85478c4-ea66-4bca-b501-2e55425396f7?source=api-prod","cve":"CVE-2026-14317","affectedVersions":"<4.16.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f90f5f35-ed84-4284-be21-15bfaf10175f/give","title":"GiveWP <= 2.17.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"f90f5f35-ed84-4284-be21-15bfaf10175f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f90f5f35-ed84-4284-be21-15bfaf10175f?source=api-prod","cve":"CVE-2021-25099","affectedVersions":"<2.17.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/fb0b24b6-38da-4650-b542-a31ba8c98fb9/give","title":"GiveWP <= 2.3.0 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"fb0b24b6-38da-4650-b542-a31ba8c98fb9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fb0b24b6-38da-4650-b542-a31ba8c98fb9?source=api-prod","cve":"CVE-2019-9909","affectedVersions":"<2.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/fcf740e1-5dbe-4849-a8b8-02d21b4d5543/give","title":"GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 10:49:31","sources":[{"name":"Wordfence","remoteId":"fcf740e1-5dbe-4849-a8b8-02d21b4d5543"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fcf740e1-5dbe-4849-a8b8-02d21b4d5543?source=api-prod","cve":"CVE-2026-104672","affectedVersions":"<=4.17.0","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_676f736d7470811c9dc5_gen.json b/internal/data/assets/plugin_676f736d7470811c9dc5_gen.json
new file mode 100644
index 00000000..9f6a72da
--- /dev/null
+++ b/internal/data/assets/plugin_676f736d7470811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/203f20b0-5bf1-457c-b8fa-7788d21fa32f/gosmtp","title":"GoSMTP – SMTP for WordPress < 1.2.5 - Authenticated (Custom Role+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"203f20b0-5bf1-457c-b8fa-7788d21fa32f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/203f20b0-5bf1-457c-b8fa-7788d21fa32f?source=api-prod","cve":"CVE-2026-111577","affectedVersions":"<1.2.5","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6772616e642d6d65646961811c9dc5_gen.json b/internal/data/assets/plugin_6772616e642d6d65646961811c9dc5_gen.json
index 7b7e793a..515ae344 100644
--- a/internal/data/assets/plugin_6772616e642d6d65646961811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6772616e642d6d65646961811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0592050d-4e72-4b40-a88b-b92e53c49e9e/grand-media","title":"Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 15:37:47","sources":[{"name":"Wordfence","remoteId":"0592050d-4e72-4b40-a88b-b92e53c49e9e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0592050d-4e72-4b40-a88b-b92e53c49e9e?source=api-prod","cve":"CVE-2026-96661","affectedVersions":"<=1.25.1","severity":"high"},{"advisoryId":"WPSECADV/WF/094c5011-41f6-420b-b566-e77fd55d9011/grand-media","title":"Gmedia Photo Gallery < 1.2.2 - Arbitrary File Upload\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"094c5011-41f6-420b-b566-e77fd55d9011"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/094c5011-41f6-420b-b566-e77fd55d9011?source=api-prod","affectedVersions":"<1.2.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/0ad0eed1-777a-432b-a190-b8a7ed10d71a/grand-media","title":"Gmedia Photo Gallery <= 1.6.4 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ad0eed1-777a-432b-a190-b8a7ed10d71a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ad0eed1-777a-432b-a190-b8a7ed10d71a?source=api-prod","affectedVersions":"<=1.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/2c9f657b-82a5-40da-9e9a-95ea6f62d895/grand-media","title":"Gmedia Photo Gallery <= 1.18.4 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c9f657b-82a5-40da-9e9a-95ea6f62d895"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c9f657b-82a5-40da-9e9a-95ea6f62d895?source=api-prod","affectedVersions":"<1.18.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/408cd4a7-d850-40fb-9b46-9381815c1222/grand-media","title":"Gmedia Photo Gallery <= 1.6.4 - Open Proxy\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"408cd4a7-d850-40fb-9b46-9381815c1222"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/408cd4a7-d850-40fb-9b46-9381815c1222?source=api-prod","cve":"CVE-2015-4339","affectedVersions":"<1.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c74d5ad-30f3-4fde-b240-97318fc3c7d6/grand-media","title":"Gmedia Photo Gallery < 1.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c74d5ad-30f3-4fde-b240-97318fc3c7d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c74d5ad-30f3-4fde-b240-97318fc3c7d6?source=api-prod","cve":"CVE-2022-0873","affectedVersions":"<1.20.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a161bd23-0b82-49ef-b3cc-a117823ec8a7/grand-media","title":"Gmedia Photo Gallery <= 1.6.4 - Denial of Service\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"a161bd23-0b82-49ef-b3cc-a117823ec8a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a161bd23-0b82-49ef-b3cc-a117823ec8a7?source=api-prod","affectedVersions":"<1.6.5","severity":"high"},{"advisoryId":"WPSECADV/WF/a1bf7283-2ad7-4a4e-b5b7-7b944c5001a0/grand-media","title":"Gmedia Photo Gallery <= 1.24.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1bf7283-2ad7-4a4e-b5b7-7b944c5001a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1bf7283-2ad7-4a4e-b5b7-7b944c5001a0?source=api-prod","cve":"CVE-2025-63014","affectedVersions":"<=1.24.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2c4b389-4a43-4b6d-ad19-1d6c201580cc/grand-media","title":"Gmedia Photo Gallery <= 1.23.0 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2c4b389-4a43-4b6d-ad19-1d6c201580cc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2c4b389-4a43-4b6d-ad19-1d6c201580cc?source=api-prod","cve":"CVE-2025-53257","affectedVersions":"<=1.23.0","severity":"high"},{"advisoryId":"WPSECADV/WF/adb4644c-6ef6-4899-b0f1-2629ffacd19c/grand-media","title":"Gmedia Photo Gallery <= 1.6.4 - Local File Inclusion\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"adb4644c-6ef6-4899-b0f1-2629ffacd19c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/adb4644c-6ef6-4899-b0f1-2629ffacd19c?source=api-prod","affectedVersions":"<1.6.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/d588a33a-ba2d-4201-9171-97abb16d44c1/grand-media","title":"Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 16:41:56","sources":[{"name":"Wordfence","remoteId":"d588a33a-ba2d-4201-9171-97abb16d44c1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d588a33a-ba2d-4201-9171-97abb16d44c1?source=api-prod","cve":"CVE-2026-39785","affectedVersions":"<=1.25.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f787e299-21f8-4662-935a-ff1e25c7d275/grand-media","title":"Gmedia Photo Gallery < 0.9.4 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"f787e299-21f8-4662-935a-ff1e25c7d275"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f787e299-21f8-4662-935a-ff1e25c7d275?source=api-prod","affectedVersions":"<=0.9.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0592050d-4e72-4b40-a88b-b92e53c49e9e/grand-media","title":"Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 15:37:47","sources":[{"name":"Wordfence","remoteId":"0592050d-4e72-4b40-a88b-b92e53c49e9e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0592050d-4e72-4b40-a88b-b92e53c49e9e?source=api-prod","cve":"CVE-2026-96661","affectedVersions":"<=1.25.1","severity":"high"},{"advisoryId":"WPSECADV/WF/094c5011-41f6-420b-b566-e77fd55d9011/grand-media","title":"Gmedia Photo Gallery < 1.2.2 - Arbitrary File Upload\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"094c5011-41f6-420b-b566-e77fd55d9011"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/094c5011-41f6-420b-b566-e77fd55d9011?source=api-prod","affectedVersions":"<1.2.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/0ad0eed1-777a-432b-a190-b8a7ed10d71a/grand-media","title":"Gmedia Photo Gallery <= 1.6.4 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ad0eed1-777a-432b-a190-b8a7ed10d71a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ad0eed1-777a-432b-a190-b8a7ed10d71a?source=api-prod","affectedVersions":"<=1.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/2c9f657b-82a5-40da-9e9a-95ea6f62d895/grand-media","title":"Gmedia Photo Gallery <= 1.18.4 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c9f657b-82a5-40da-9e9a-95ea6f62d895"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c9f657b-82a5-40da-9e9a-95ea6f62d895?source=api-prod","affectedVersions":"<1.18.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/408cd4a7-d850-40fb-9b46-9381815c1222/grand-media","title":"Gmedia Photo Gallery <= 1.6.4 - Open Proxy\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"408cd4a7-d850-40fb-9b46-9381815c1222"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/408cd4a7-d850-40fb-9b46-9381815c1222?source=api-prod","cve":"CVE-2015-4339","affectedVersions":"<1.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c74d5ad-30f3-4fde-b240-97318fc3c7d6/grand-media","title":"Gmedia Photo Gallery < 1.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c74d5ad-30f3-4fde-b240-97318fc3c7d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c74d5ad-30f3-4fde-b240-97318fc3c7d6?source=api-prod","cve":"CVE-2022-0873","affectedVersions":"<1.20.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a161bd23-0b82-49ef-b3cc-a117823ec8a7/grand-media","title":"Gmedia Photo Gallery <= 1.6.4 - Denial of Service\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"a161bd23-0b82-49ef-b3cc-a117823ec8a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a161bd23-0b82-49ef-b3cc-a117823ec8a7?source=api-prod","affectedVersions":"<1.6.5","severity":"high"},{"advisoryId":"WPSECADV/WF/a1bf7283-2ad7-4a4e-b5b7-7b944c5001a0/grand-media","title":"Gmedia Photo Gallery <= 1.25.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1bf7283-2ad7-4a4e-b5b7-7b944c5001a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1bf7283-2ad7-4a4e-b5b7-7b944c5001a0?source=api-prod","cve":"CVE-2025-63014","affectedVersions":"<=1.25.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2c4b389-4a43-4b6d-ad19-1d6c201580cc/grand-media","title":"Gmedia Photo Gallery <= 1.23.0 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2c4b389-4a43-4b6d-ad19-1d6c201580cc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2c4b389-4a43-4b6d-ad19-1d6c201580cc?source=api-prod","cve":"CVE-2025-53257","affectedVersions":"<=1.23.0","severity":"high"},{"advisoryId":"WPSECADV/WF/adb4644c-6ef6-4899-b0f1-2629ffacd19c/grand-media","title":"Gmedia Photo Gallery <= 1.6.4 - Local File Inclusion\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-05-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"adb4644c-6ef6-4899-b0f1-2629ffacd19c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/adb4644c-6ef6-4899-b0f1-2629ffacd19c?source=api-prod","affectedVersions":"<1.6.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/d588a33a-ba2d-4201-9171-97abb16d44c1/grand-media","title":"Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 16:41:56","sources":[{"name":"Wordfence","remoteId":"d588a33a-ba2d-4201-9171-97abb16d44c1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d588a33a-ba2d-4201-9171-97abb16d44c1?source=api-prod","cve":"CVE-2026-39785","affectedVersions":"<=1.25.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f787e299-21f8-4662-935a-ff1e25c7d275/grand-media","title":"Gmedia Photo Gallery < 0.9.4 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-05-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"f787e299-21f8-4662-935a-ff1e25c7d275"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f787e299-21f8-4662-935a-ff1e25c7d275?source=api-prod","affectedVersions":"<=0.9.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_677265656e73686966742d616e696d6174696f6e2d616e642d706167652d6275696c6465722d626c6f636b73811c9dc5_gen.json b/internal/data/assets/plugin_677265656e73686966742d616e696d6174696f6e2d616e642d706167652d6275696c6465722d626c6f636b73811c9dc5_gen.json
index ede48d25..81c537ab 100644
--- a/internal/data/assets/plugin_677265656e73686966742d616e696d6174696f6e2d616e642d706167652d6275696c6465722d626c6f636b73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_677265656e73686966742d616e696d6174696f6e2d616e642d706167652d6275696c6465722d626c6f636b73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/06047667-2a24-4e1c-9389-11daceff4d23/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"06047667-2a24-4e1c-9389-11daceff4d23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06047667-2a24-4e1c-9389-11daceff4d23?source=api-prod","cve":"CVE-2024-11181","affectedVersions":"<=9.9.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0b19e8c0-4451-4fe2-9915-e879aa0ab410/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 11.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b19e8c0-4451-4fe2-9915-e879aa0ab410"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b19e8c0-4451-4fe2-9915-e879aa0ab410?source=api-prod","cve":"CVE-2025-30873","affectedVersions":"<=11.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c822394-4ce1-4bb0-a8cd-bc3557f0e65d/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c822394-4ce1-4bb0-a8cd-bc3557f0e65d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c822394-4ce1-4bb0-a8cd-bc3557f0e65d?source=api-prod","cve":"CVE-2026-5092","affectedVersions":"<=12.8.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/0cd63116-cb0e-4ba6-bd25-18b68cd982d9/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks < 13.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"0cd63116-cb0e-4ba6-bd25-18b68cd982d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0cd63116-cb0e-4ba6-bd25-18b68cd982d9?source=api-prod","cve":"CVE-2026-83544","affectedVersions":"<13.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0db4671e-1989-44a4-babe-ed699c7f3a52/greenshift-animation-and-page-builder-blocks","title":"Greenshift  11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-21 15:48:15","sources":[{"name":"Wordfence","remoteId":"0db4671e-1989-44a4-babe-ed699c7f3a52"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0db4671e-1989-44a4-babe-ed699c7f3a52?source=api-prod","cve":"CVE-2025-3616","affectedVersions":">=11.4,<=11.4.5","severity":"high"},{"advisoryId":"WPSECADV/WF/133a7a71-4428-4ada-8ed7-a7c6fe54a0cb/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 18:56:55","sources":[{"name":"Wordfence","remoteId":"133a7a71-4428-4ada-8ed7-a7c6fe54a0cb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/133a7a71-4428-4ada-8ed7-a7c6fe54a0cb?source=api-prod","cve":"CVE-2026-93880","affectedVersions":"<=13.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/1bd8b315-97a9-40f4-99cb-76f347a5c1e9/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.1.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"1bd8b315-97a9-40f4-99cb-76f347a5c1e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1bd8b315-97a9-40f4-99cb-76f347a5c1e9?source=api-prod","cve":"CVE-2025-57884","affectedVersions":"<=12.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2be2e028-81b8-4fd9-8197-eccf391fee65/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-05 10:58:47","sources":[{"name":"Wordfence","remoteId":"2be2e028-81b8-4fd9-8197-eccf391fee65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2be2e028-81b8-4fd9-8197-eccf391fee65?source=api-prod","cve":"CVE-2026-2589","affectedVersions":"<=12.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/33275478-59ad-412b-b970-9a39d522bd66/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 9.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"33275478-59ad-412b-b970-9a39d522bd66"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33275478-59ad-412b-b970-9a39d522bd66?source=api-prod","cve":"CVE-2024-44005","affectedVersions":"<=9.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/3949a3a9-b02b-415a-a418-73756f6355a5/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"3949a3a9-b02b-415a-a418-73756f6355a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3949a3a9-b02b-415a-a418-73756f6355a5?source=api-prod","cve":"CVE-2025-26884","affectedVersions":"<=10.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/greenshift-animation-and-page-builder-blocks","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/52632b50-9755-4ebd-a1a8-587cc633debb/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-06 11:20:33","sources":[{"name":"Wordfence","remoteId":"52632b50-9755-4ebd-a1a8-587cc633debb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52632b50-9755-4ebd-a1a8-587cc633debb?source=api-prod","cve":"CVE-2026-2371","affectedVersions":"<=12.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/57b7b171-cd25-4bcd-aa75-3ccbfbb1452a/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-05 08:57:22","sources":[{"name":"Wordfence","remoteId":"57b7b171-cd25-4bcd-aa75-3ccbfbb1452a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57b7b171-cd25-4bcd-aa75-3ccbfbb1452a?source=api-prod","cve":"CVE-2026-2593","affectedVersions":"<=12.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/69911634-1281-487c-87f1-37f6e4b016c9/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"69911634-1281-487c-87f1-37f6e4b016c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69911634-1281-487c-87f1-37f6e4b016c9?source=api-prod","cve":"CVE-2026-5093","affectedVersions":"<=12.8.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e2128db-ca9f-4211-8bc5-01a2cc1cba64/greenshift-animation-and-page-builder-blocks","title":"GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-05 00:53:48","sources":[{"name":"Wordfence","remoteId":"6e2128db-ca9f-4211-8bc5-01a2cc1cba64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e2128db-ca9f-4211-8bc5-01a2cc1cba64?source=api-prod","cve":"CVE-2026-1927","affectedVersions":"<=12.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e3ae3c6-a7d1-46f0-a006-996c1fbe7c7e/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-10 11:49:09","sources":[{"name":"Wordfence","remoteId":"6e3ae3c6-a7d1-46f0-a006-996c1fbe7c7e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e3ae3c6-a7d1-46f0-a006-996c1fbe7c7e?source=api-prod","cve":"CVE-2026-4895","affectedVersions":"<=12.8.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/732fb8ec-b520-4e24-a479-4c7be15b67f7/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks < 13.2.0 - Authenticated (Contributor+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"732fb8ec-b520-4e24-a479-4c7be15b67f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/732fb8ec-b520-4e24-a479-4c7be15b67f7?source=api-prod","cve":"CVE-2026-83543","affectedVersions":"<13.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/821462d6-970e-4e3e-b91d-e7153296ba9f/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"821462d6-970e-4e3e-b91d-e7153296ba9f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/821462d6-970e-4e3e-b91d-e7153296ba9f?source=api-prod","cve":"CVE-2023-6636","affectedVersions":"<=7.6.2","severity":"high"},{"advisoryId":"WPSECADV/WF/826b5dac-4a54-44c7-979b-8901bb468777/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"826b5dac-4a54-44c7-979b-8901bb468777"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/826b5dac-4a54-44c7-979b-8901bb468777?source=api-prod","cve":"CVE-2023-22707","affectedVersions":"<=4.9.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9bc9e382-9902-4b2d-ac50-ecb2b94a2803/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"9bc9e382-9902-4b2d-ac50-ecb2b94a2803"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9bc9e382-9902-4b2d-ac50-ecb2b94a2803?source=api-prod","cve":"CVE-2024-35765","affectedVersions":"<=8.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1dbd87e-2449-4d59-9f08-f708b93d41cb/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <=9.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1dbd87e-2449-4d59-9f08-f708b93d41cb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1dbd87e-2449-4d59-9f08-f708b93d41cb?source=api-prod","cve":"CVE-2024-50419","affectedVersions":"<=9.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/abbdf198-b6f3-41dd-ada1-b14fc9946142/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"abbdf198-b6f3-41dd-ada1-b14fc9946142"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/abbdf198-b6f3-41dd-ada1-b14fc9946142?source=api-prod","cve":"CVE-2023-0378","affectedVersions":"<=4.9.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3498ebe-5e13-4ced-b92d-4908b8775996/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3498ebe-5e13-4ced-b92d-4908b8775996"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3498ebe-5e13-4ced-b92d-4908b8775996?source=api-prod","cve":"CVE-2022-4653","affectedVersions":"<=4.8.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3ee4563-cf28-42f6-8b50-fd996ad90152/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 11.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3ee4563-cf28-42f6-8b50-fd996ad90152"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3ee4563-cf28-42f6-8b50-fd996ad90152?source=api-prod","cve":"CVE-2025-49301","affectedVersions":"<=11.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee2455fb-69b9-4dbc-9c59-fd2cdd5b4d0f/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-03 13:41:01","sources":[{"name":"Wordfence","remoteId":"ee2455fb-69b9-4dbc-9c59-fd2cdd5b4d0f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee2455fb-69b9-4dbc-9c59-fd2cdd5b4d0f?source=api-prod","cve":"CVE-2025-11841","affectedVersions":"<=12.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/fe3cfaf4-67c8-47af-bd58-e8ad27a03fae/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-08 22:19:00","sources":[{"name":"Wordfence","remoteId":"fe3cfaf4-67c8-47af-bd58-e8ad27a03fae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe3cfaf4-67c8-47af-bd58-e8ad27a03fae?source=api-prod","cve":"CVE-2024-6155","affectedVersions":"<=9.0.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/06047667-2a24-4e1c-9389-11daceff4d23/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"06047667-2a24-4e1c-9389-11daceff4d23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06047667-2a24-4e1c-9389-11daceff4d23?source=api-prod","cve":"CVE-2024-11181","affectedVersions":"<=9.9.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0b19e8c0-4451-4fe2-9915-e879aa0ab410/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 11.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b19e8c0-4451-4fe2-9915-e879aa0ab410"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b19e8c0-4451-4fe2-9915-e879aa0ab410?source=api-prod","cve":"CVE-2025-30873","affectedVersions":"<=11.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c822394-4ce1-4bb0-a8cd-bc3557f0e65d/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c822394-4ce1-4bb0-a8cd-bc3557f0e65d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c822394-4ce1-4bb0-a8cd-bc3557f0e65d?source=api-prod","cve":"CVE-2026-5092","affectedVersions":"<=12.8.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/0cd63116-cb0e-4ba6-bd25-18b68cd982d9/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks < 13.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"0cd63116-cb0e-4ba6-bd25-18b68cd982d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0cd63116-cb0e-4ba6-bd25-18b68cd982d9?source=api-prod","cve":"CVE-2026-83544","affectedVersions":"<13.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0db4671e-1989-44a4-babe-ed699c7f3a52/greenshift-animation-and-page-builder-blocks","title":"Greenshift  11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-21 15:48:15","sources":[{"name":"Wordfence","remoteId":"0db4671e-1989-44a4-babe-ed699c7f3a52"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0db4671e-1989-44a4-babe-ed699c7f3a52?source=api-prod","cve":"CVE-2025-3616","affectedVersions":">=11.4,<=11.4.5","severity":"high"},{"advisoryId":"WPSECADV/WF/133a7a71-4428-4ada-8ed7-a7c6fe54a0cb/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 18:56:55","sources":[{"name":"Wordfence","remoteId":"133a7a71-4428-4ada-8ed7-a7c6fe54a0cb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/133a7a71-4428-4ada-8ed7-a7c6fe54a0cb?source=api-prod","cve":"CVE-2026-93880","affectedVersions":"<=13.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/1bd8b315-97a9-40f4-99cb-76f347a5c1e9/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.1.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"1bd8b315-97a9-40f4-99cb-76f347a5c1e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1bd8b315-97a9-40f4-99cb-76f347a5c1e9?source=api-prod","cve":"CVE-2025-57884","affectedVersions":"<=12.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2be2e028-81b8-4fd9-8197-eccf391fee65/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-05 10:58:47","sources":[{"name":"Wordfence","remoteId":"2be2e028-81b8-4fd9-8197-eccf391fee65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2be2e028-81b8-4fd9-8197-eccf391fee65?source=api-prod","cve":"CVE-2026-2589","affectedVersions":"<=12.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/33275478-59ad-412b-b970-9a39d522bd66/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 9.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"33275478-59ad-412b-b970-9a39d522bd66"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33275478-59ad-412b-b970-9a39d522bd66?source=api-prod","cve":"CVE-2024-44005","affectedVersions":"<=9.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/3949a3a9-b02b-415a-a418-73756f6355a5/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"3949a3a9-b02b-415a-a418-73756f6355a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3949a3a9-b02b-415a-a418-73756f6355a5?source=api-prod","cve":"CVE-2025-26884","affectedVersions":"<=10.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/greenshift-animation-and-page-builder-blocks","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/52632b50-9755-4ebd-a1a8-587cc633debb/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-06 11:20:33","sources":[{"name":"Wordfence","remoteId":"52632b50-9755-4ebd-a1a8-587cc633debb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52632b50-9755-4ebd-a1a8-587cc633debb?source=api-prod","cve":"CVE-2026-2371","affectedVersions":"<=12.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/57280079-9843-4e9e-9060-492f72c9ca44/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:03:32","sources":[{"name":"Wordfence","remoteId":"57280079-9843-4e9e-9060-492f72c9ca44"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57280079-9843-4e9e-9060-492f72c9ca44?source=api-prod","cve":"CVE-2026-107629","affectedVersions":"<=13.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/57b7b171-cd25-4bcd-aa75-3ccbfbb1452a/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-05 08:57:22","sources":[{"name":"Wordfence","remoteId":"57b7b171-cd25-4bcd-aa75-3ccbfbb1452a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57b7b171-cd25-4bcd-aa75-3ccbfbb1452a?source=api-prod","cve":"CVE-2026-2593","affectedVersions":"<=12.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/69911634-1281-487c-87f1-37f6e4b016c9/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"69911634-1281-487c-87f1-37f6e4b016c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69911634-1281-487c-87f1-37f6e4b016c9?source=api-prod","cve":"CVE-2026-5093","affectedVersions":"<=12.8.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/6c3ad041-8e93-4e2b-b38d-9e0b1149950f/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:02:39","sources":[{"name":"Wordfence","remoteId":"6c3ad041-8e93-4e2b-b38d-9e0b1149950f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6c3ad041-8e93-4e2b-b38d-9e0b1149950f?source=api-prod","cve":"CVE-2026-107627","affectedVersions":"<=13.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e2128db-ca9f-4211-8bc5-01a2cc1cba64/greenshift-animation-and-page-builder-blocks","title":"GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-05 00:53:48","sources":[{"name":"Wordfence","remoteId":"6e2128db-ca9f-4211-8bc5-01a2cc1cba64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e2128db-ca9f-4211-8bc5-01a2cc1cba64?source=api-prod","cve":"CVE-2026-1927","affectedVersions":"<=12.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e3ae3c6-a7d1-46f0-a006-996c1fbe7c7e/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-10 11:49:09","sources":[{"name":"Wordfence","remoteId":"6e3ae3c6-a7d1-46f0-a006-996c1fbe7c7e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e3ae3c6-a7d1-46f0-a006-996c1fbe7c7e?source=api-prod","cve":"CVE-2026-4895","affectedVersions":"<=12.8.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/732fb8ec-b520-4e24-a479-4c7be15b67f7/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks < 13.2.0 - Authenticated (Contributor+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"732fb8ec-b520-4e24-a479-4c7be15b67f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/732fb8ec-b520-4e24-a479-4c7be15b67f7?source=api-prod","cve":"CVE-2026-83543","affectedVersions":"<13.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/821462d6-970e-4e3e-b91d-e7153296ba9f/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"821462d6-970e-4e3e-b91d-e7153296ba9f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/821462d6-970e-4e3e-b91d-e7153296ba9f?source=api-prod","cve":"CVE-2023-6636","affectedVersions":"<=7.6.2","severity":"high"},{"advisoryId":"WPSECADV/WF/826b5dac-4a54-44c7-979b-8901bb468777/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"826b5dac-4a54-44c7-979b-8901bb468777"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/826b5dac-4a54-44c7-979b-8901bb468777?source=api-prod","cve":"CVE-2023-22707","affectedVersions":"<=4.9.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9bc9e382-9902-4b2d-ac50-ecb2b94a2803/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"9bc9e382-9902-4b2d-ac50-ecb2b94a2803"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9bc9e382-9902-4b2d-ac50-ecb2b94a2803?source=api-prod","cve":"CVE-2024-35765","affectedVersions":"<=8.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1dbd87e-2449-4d59-9f08-f708b93d41cb/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <=9.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1dbd87e-2449-4d59-9f08-f708b93d41cb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1dbd87e-2449-4d59-9f08-f708b93d41cb?source=api-prod","cve":"CVE-2024-50419","affectedVersions":"<=9.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/abbdf198-b6f3-41dd-ada1-b14fc9946142/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"abbdf198-b6f3-41dd-ada1-b14fc9946142"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/abbdf198-b6f3-41dd-ada1-b14fc9946142?source=api-prod","cve":"CVE-2023-0378","affectedVersions":"<=4.9.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3498ebe-5e13-4ced-b92d-4908b8775996/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3498ebe-5e13-4ced-b92d-4908b8775996"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3498ebe-5e13-4ced-b92d-4908b8775996?source=api-prod","cve":"CVE-2022-4653","affectedVersions":"<=4.8.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3ee4563-cf28-42f6-8b50-fd996ad90152/greenshift-animation-and-page-builder-blocks","title":"Greenshift <= 11.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3ee4563-cf28-42f6-8b50-fd996ad90152"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3ee4563-cf28-42f6-8b50-fd996ad90152?source=api-prod","cve":"CVE-2025-49301","affectedVersions":"<=11.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee2455fb-69b9-4dbc-9c59-fd2cdd5b4d0f/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-03 13:41:01","sources":[{"name":"Wordfence","remoteId":"ee2455fb-69b9-4dbc-9c59-fd2cdd5b4d0f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee2455fb-69b9-4dbc-9c59-fd2cdd5b4d0f?source=api-prod","cve":"CVE-2025-11841","affectedVersions":"<=12.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/fe3cfaf4-67c8-47af-bd58-e8ad27a03fae/greenshift-animation-and-page-builder-blocks","title":"Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-08 22:19:00","sources":[{"name":"Wordfence","remoteId":"fe3cfaf4-67c8-47af-bd58-e8ad27a03fae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe3cfaf4-67c8-47af-bd58-e8ad27a03fae?source=api-prod","cve":"CVE-2024-6155","affectedVersions":"<=9.0.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6861707079666f726d73811c9dc5_gen.json b/internal/data/assets/plugin_6861707079666f726d73811c9dc5_gen.json
index 0ec11533..3fa0b7fd 100644
--- a/internal/data/assets/plugin_6861707079666f726d73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6861707079666f726d73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/022ab125-d086-40bf-aafb-65059b3c455f/happyforms","title":"Happyforms <= 1.26.2 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"022ab125-d086-40bf-aafb-65059b3c455f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/022ab125-d086-40bf-aafb-65059b3c455f?source=api-prod","cve":"CVE-2024-10054","affectedVersions":"<=1.26.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0578c49e-f820-42dd-bd53-f4a281843e69/happyforms","title":"Happyforms <= 1.25.10 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"0578c49e-f820-42dd-bd53-f4a281843e69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0578c49e-f820-42dd-bd53-f4a281843e69?source=api-prod","cve":"CVE-2024-23521","affectedVersions":"<=1.25.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/2bcb155d-a544-4315-921b-62a0bd6b1ca9/happyforms","title":"Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms <= 1.26.13 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"2bcb155d-a544-4315-921b-62a0bd6b1ca9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2bcb155d-a544-4315-921b-62a0bd6b1ca9?source=api-prod","cve":"CVE-2026-49768","affectedVersions":"<=1.26.13","severity":"high"},{"advisoryId":"WPSECADV/WF/4b86374a-8bae-4c97-8df5-e19a3a848a8b/happyforms","title":"Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms <= 1.26.15 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b86374a-8bae-4c97-8df5-e19a3a848a8b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b86374a-8bae-4c97-8df5-e19a3a848a8b?source=api-prod","cve":"CVE-2026-97065","affectedVersions":"<=1.26.15","severity":"high"},{"advisoryId":"WPSECADV/WF/63f43fb9-3d8d-48ea-b760-0e068570b16d/happyforms","title":"Happyforms <= 1.26.0 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"63f43fb9-3d8d-48ea-b760-0e068570b16d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63f43fb9-3d8d-48ea-b760-0e068570b16d?source=api-prod","cve":"CVE-2024-44063","affectedVersions":"<=1.26.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/72f1ffe1-d8af-4aa2-bc58-5f1cd4eaa856/happyforms","title":"Happyforms <= 1.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blocks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"72f1ffe1-d8af-4aa2-bc58-5f1cd4eaa856"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72f1ffe1-d8af-4aa2-bc58-5f1cd4eaa856?source=api-prod","cve":"CVE-2023-0096","affectedVersions":"<=1.21.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e31119ab-963d-48a4-9948-0a0dce761918/happyforms","title":"HappyForms <= 1.26.12 - Authenticated (Admin+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-09 19:34:47","sources":[{"name":"Wordfence","remoteId":"e31119ab-963d-48a4-9948-0a0dce761918"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e31119ab-963d-48a4-9948-0a0dce761918?source=api-prod","cve":"CVE-2025-11977","affectedVersions":"<=1.26.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/ff986a66-93f7-4926-8818-7af745c0166c/happyforms","title":"Happyforms <= 1.25.9 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"ff986a66-93f7-4926-8818-7af745c0166c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ff986a66-93f7-4926-8818-7af745c0166c?source=api-prod","cve":"CVE-2023-48752","affectedVersions":"<=1.25.9","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/022ab125-d086-40bf-aafb-65059b3c455f/happyforms","title":"Happyforms <= 1.26.2 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"022ab125-d086-40bf-aafb-65059b3c455f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/022ab125-d086-40bf-aafb-65059b3c455f?source=api-prod","cve":"CVE-2024-10054","affectedVersions":"<=1.26.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0578c49e-f820-42dd-bd53-f4a281843e69/happyforms","title":"Happyforms <= 1.25.10 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"0578c49e-f820-42dd-bd53-f4a281843e69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0578c49e-f820-42dd-bd53-f4a281843e69?source=api-prod","cve":"CVE-2024-23521","affectedVersions":"<=1.25.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/2bcb155d-a544-4315-921b-62a0bd6b1ca9/happyforms","title":"Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms <= 1.26.13 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"2bcb155d-a544-4315-921b-62a0bd6b1ca9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2bcb155d-a544-4315-921b-62a0bd6b1ca9?source=api-prod","cve":"CVE-2026-49768","affectedVersions":"<=1.26.13","severity":"high"},{"advisoryId":"WPSECADV/WF/4b86374a-8bae-4c97-8df5-e19a3a848a8b/happyforms","title":"Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms <= 1.26.15 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b86374a-8bae-4c97-8df5-e19a3a848a8b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b86374a-8bae-4c97-8df5-e19a3a848a8b?source=api-prod","cve":"CVE-2026-97065","affectedVersions":"<=1.26.15","severity":"high"},{"advisoryId":"WPSECADV/WF/63f43fb9-3d8d-48ea-b760-0e068570b16d/happyforms","title":"Happyforms <= 1.26.0 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"63f43fb9-3d8d-48ea-b760-0e068570b16d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63f43fb9-3d8d-48ea-b760-0e068570b16d?source=api-prod","cve":"CVE-2024-44063","affectedVersions":"<=1.26.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/72f1ffe1-d8af-4aa2-bc58-5f1cd4eaa856/happyforms","title":"Happyforms <= 1.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blocks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"72f1ffe1-d8af-4aa2-bc58-5f1cd4eaa856"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72f1ffe1-d8af-4aa2-bc58-5f1cd4eaa856?source=api-prod","cve":"CVE-2023-0096","affectedVersions":"<=1.21.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ad7c56bf-44e5-4eaf-8342-10e66ee49092/happyforms","title":"Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms < 1.26.15 - Unauthenticated HTML Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"ad7c56bf-44e5-4eaf-8342-10e66ee49092"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ad7c56bf-44e5-4eaf-8342-10e66ee49092?source=api-prod","cve":"CVE-2026-14556","affectedVersions":"<1.26.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/e31119ab-963d-48a4-9948-0a0dce761918/happyforms","title":"HappyForms <= 1.26.12 - Authenticated (Admin+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-09 19:34:47","sources":[{"name":"Wordfence","remoteId":"e31119ab-963d-48a4-9948-0a0dce761918"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e31119ab-963d-48a4-9948-0a0dce761918?source=api-prod","cve":"CVE-2025-11977","affectedVersions":"<=1.26.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/ff986a66-93f7-4926-8818-7af745c0166c/happyforms","title":"Happyforms <= 1.25.9 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"ff986a66-93f7-4926-8818-7af745c0166c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ff986a66-93f7-4926-8818-7af745c0166c?source=api-prod","cve":"CVE-2023-48752","affectedVersions":"<=1.25.9","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_686b2d696472616d2d7061796d656e742d67617465776179811c9dc5_gen.json b/internal/data/assets/plugin_686b2d696472616d2d7061796d656e742d67617465776179811c9dc5_gen.json
new file mode 100644
index 00000000..1a0667ff
--- /dev/null
+++ b/internal/data/assets/plugin_686b2d696472616d2d7061796d656e742d67617465776179811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/e98a42c4-b5fa-42fa-a444-7af779644d8d/hk-idram-payment-gateway","title":"Payment Gateway for Idram < 2.1.6 - Unauthenticated Arbitrary Order Status Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"e98a42c4-b5fa-42fa-a444-7af779644d8d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e98a42c4-b5fa-42fa-a444-7af779644d8d?source=api-prod","cve":"CVE-2026-103302","affectedVersions":"<2.1.6","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_68742d6d6567612d666f722d656c656d656e746f72811c9dc5_gen.json b/internal/data/assets/plugin_68742d6d6567612d666f722d656c656d656e746f72811c9dc5_gen.json
index 3119a4e7..cde1d322 100644
--- a/internal/data/assets/plugin_68742d6d6567612d666f722d656c656d656e746f72811c9dc5_gen.json
+++ b/internal/data/assets/plugin_68742d6d6567612d666f722d656c656d656e746f72811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/03fba6bb-ff30-42bb-936b-93c009a7e3f7/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"03fba6bb-ff30-42bb-936b-93c009a7e3f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/03fba6bb-ff30-42bb-936b-93c009a7e3f7?source=api-prod","cve":"CVE-2024-3989","affectedVersions":"<=2.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/09fb88e4-4846-40d3-8a79-a6a867bfb59f/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"09fb88e4-4846-40d3-8a79-a6a867bfb59f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09fb88e4-4846-40d3-8a79-a6a867bfb59f?source=api-prod","cve":"CVE-2024-8910","affectedVersions":"<=2.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/0f9c5bed-a399-43e2-be40-d669e90d3736/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"0f9c5bed-a399-43e2-be40-d669e90d3736"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0f9c5bed-a399-43e2-be40-d669e90d3736?source=api-prod","cve":"CVE-2024-2085","affectedVersions":"<=2.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/11b5f0a1-bf22-46be-a165-c62f1077da0f/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-23 16:06:00","sources":[{"name":"Wordfence","remoteId":"11b5f0a1-bf22-46be-a165-c62f1077da0f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/11b5f0a1-bf22-46be-a165-c62f1077da0f?source=api-prod","cve":"CVE-2024-1974","affectedVersions":"<=2.4.6","severity":"high"},{"advisoryId":"WPSECADV/WF/17f12e75-0bb6-48ed-9ba2-17caab268d61/ht-mega-for-elementor","title":"HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"17f12e75-0bb6-48ed-9ba2-17caab268d61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/17f12e75-0bb6-48ed-9ba2-17caab268d61?source=api-prod","cve":"CVE-2024-12597","affectedVersions":"<=2.7.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/20a67cde-612a-4c57-83d6-a5d8f3716a2d/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"20a67cde-612a-4c57-83d6-a5d8f3716a2d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20a67cde-612a-4c57-83d6-a5d8f3716a2d?source=api-prod","cve":"CVE-2024-12599","affectedVersions":"<=2.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/249ad768-3706-47c6-ad1d-f11900b87608/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.7 - Missing Authorization to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"249ad768-3706-47c6-ad1d-f11900b87608"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/249ad768-3706-47c6-ad1d-f11900b87608?source=api-prod","cve":"CVE-2024-32782","affectedVersions":"<=2.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/2cf71a67-5b09-4aa6-b244-4d32ee7b312a/ht-mega-for-elementor","title":"HT Mega 3.2.0 - 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"2cf71a67-5b09-4aa6-b244-4d32ee7b312a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2cf71a67-5b09-4aa6-b244-4d32ee7b312a?source=api-prod","cve":"CVE-2026-86788","affectedVersions":">=3.2.0,<=3.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/316a1ca9-e5fd-463f-ba1e-32589740270a/ht-mega-for-elementor","title":"HT Mega <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"316a1ca9-e5fd-463f-ba1e-32589740270a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/316a1ca9-e5fd-463f-ba1e-32589740270a?source=api-prod","cve":"CVE-2024-30182","affectedVersions":"<=2.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/33b5e231-1b53-4646-ae9c-48babf1ebbd7/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"33b5e231-1b53-4646-ae9c-48babf1ebbd7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33b5e231-1b53-4646-ae9c-48babf1ebbd7?source=api-prod","cve":"CVE-2024-3308","affectedVersions":"<=2.4.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/39e104fa-591a-41e8-af7e-f8b32a199170/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"39e104fa-591a-41e8-af7e-f8b32a199170"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39e104fa-591a-41e8-af7e-f8b32a199170?source=api-prod","cve":"CVE-2024-4876","affectedVersions":"<=2.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/46f3cc62-c2d8-45af-bb92-c2040789cbc0/ht-mega-for-elementor","title":"HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"46f3cc62-c2d8-45af-bb92-c2040789cbc0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/46f3cc62-c2d8-45af-bb92-c2040789cbc0?source=api-prod","cve":"CVE-2023-37999","affectedVersions":"<2.2.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/4abba5ab-523c-4b4f-8d3e-bb7ee57cd280/ht-mega-for-elementor","title":"HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-29 19:36:43","sources":[{"name":"Wordfence","remoteId":"4abba5ab-523c-4b4f-8d3e-bb7ee57cd280"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4abba5ab-523c-4b4f-8d3e-bb7ee57cd280?source=api-prod","cve":"CVE-2026-11895","affectedVersions":"<=3.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/52ba91f1-21a2-4d7c-8801-b5e72a00c37d/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"52ba91f1-21a2-4d7c-8801-b5e72a00c37d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52ba91f1-21a2-4d7c-8801-b5e72a00c37d?source=api-prod","cve":"CVE-2024-2790","affectedVersions":"<=2.4.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/54043c6a-48a1-48e8-ba61-a7e8a1773036/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"54043c6a-48a1-48e8-ba61-a7e8a1773036"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54043c6a-48a1-48e8-ba61-a7e8a1773036?source=api-prod","cve":"CVE-2023-6214","affectedVersions":"<=2.4.6","severity":"high"},{"advisoryId":"WPSECADV/WF/6745be2e-d151-452a-8e65-0db2409dd54d/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.3.8 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"6745be2e-d151-452a-8e65-0db2409dd54d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6745be2e-d151-452a-8e65-0db2409dd54d?source=api-prod","cve":"CVE-2023-50901","affectedVersions":"<=2.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/68530904-22d2-4228-b9f2-76f5ee1fd541/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"68530904-22d2-4228-b9f2-76f5ee1fd541"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68530904-22d2-4228-b9f2-76f5ee1fd541?source=api-prod","cve":"CVE-2025-1802","affectedVersions":"<=2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6b3e93bf-af5c-4ca3-a531-2d91df880c51/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b3e93bf-af5c-4ca3-a531-2d91df880c51"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b3e93bf-af5c-4ca3-a531-2d91df880c51?source=api-prod","cve":"CVE-2025-8151","affectedVersions":"<=2.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6f26b04f-2a25-40a6-9b2c-27d9970acb8f/ht-mega-for-elementor","title":"HT Mega <= 2.3.3 - Cross-Site Request Forgery via Several Functions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f26b04f-2a25-40a6-9b2c-27d9970acb8f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f26b04f-2a25-40a6-9b2c-27d9970acb8f?source=api-prod","cve":"CVE-2023-51529","affectedVersions":"<=2.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/86dfdc4f-1cc2-4b0d-b79c-bee3d6956eb4/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-25 18:16:09","sources":[{"name":"Wordfence","remoteId":"86dfdc4f-1cc2-4b0d-b79c-bee3d6956eb4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86dfdc4f-1cc2-4b0d-b79c-bee3d6956eb4?source=api-prod","cve":"CVE-2024-5215","affectedVersions":"<=2.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ac66027-14b8-4e0a-a483-c014905ef04e/ht-mega-for-elementor","title":"HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ac66027-14b8-4e0a-a483-c014905ef04e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ac66027-14b8-4e0a-a483-c014905ef04e?source=api-prod","cve":"CVE-2024-1397","affectedVersions":"<=2.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/8bf04325-e313-4a68-89a0-b560bdef5a14/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-20 19:53:23","sources":[{"name":"Wordfence","remoteId":"8bf04325-e313-4a68-89a0-b560bdef5a14"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8bf04325-e313-4a68-89a0-b560bdef5a14?source=api-prod","cve":"CVE-2025-13141","affectedVersions":"<=3.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e5417d3-c466-4caf-9fb6-26d6e2c06fe1/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e5417d3-c466-4caf-9fb6-26d6e2c06fe1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e5417d3-c466-4caf-9fb6-26d6e2c06fe1?source=api-prod","cve":"CVE-2024-2084","affectedVersions":"<=2.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/9540b339-3386-4ee8-8141-acb9f3d83772/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"9540b339-3386-4ee8-8141-acb9f3d83772"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9540b339-3386-4ee8-8141-acb9f3d83772?source=api-prod","cve":"CVE-2025-8401","affectedVersions":"<=2.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/98e74a23-b586-4d6a-b1ab-78838b0eed61/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"98e74a23-b586-4d6a-b1ab-78838b0eed61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98e74a23-b586-4d6a-b1ab-78838b0eed61?source=api-prod","cve":"CVE-2024-3990","affectedVersions":"<=2.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1b3bcad-4bee-4848-8d68-0aacaf199910/ht-mega-for-elementor","title":"HT Mega <= 2.5.7 - Authenticated (Contributor+) JSON File Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1b3bcad-4bee-4848-8d68-0aacaf199910"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1b3bcad-4bee-4848-8d68-0aacaf199910?source=api-prod","cve":"CVE-2024-38706","affectedVersions":"<=2.5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/a71cbe66-4187-4260-bb87-8579bc6e75f5/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a71cbe66-4187-4260-bb87-8579bc6e75f5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a71cbe66-4187-4260-bb87-8579bc6e75f5?source=api-prod","cve":"CVE-2024-1421","affectedVersions":"<=2.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/aac9569e-d33d-45b3-bd03-2e7f48536ae5/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-25 13:45:59","sources":[{"name":"Wordfence","remoteId":"aac9569e-d33d-45b3-bd03-2e7f48536ae5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aac9569e-d33d-45b3-bd03-2e7f48536ae5?source=api-prod","cve":"CVE-2024-5173","affectedVersions":"<=2.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/bdd3868a-d741-42b4-bc7f-6fb5d33bb71b/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-20 19:51:49","sources":[{"name":"Wordfence","remoteId":"bdd3868a-d741-42b4-bc7f-6fb5d33bb71b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdd3868a-d741-42b4-bc7f-6fb5d33bb71b?source=api-prod","cve":"CVE-2024-4875","affectedVersions":"<=2.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/bead5edb-402a-44bc-9e2b-89201fa4603c/ht-mega-for-elementor","title":"HT Mega - Absolute Addons for Elementor Page Builder <= 1.5.5 - Contributor+ Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"bead5edb-402a-44bc-9e2b-89201fa4603c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bead5edb-402a-44bc-9e2b-89201fa4603c?source=api-prod","cve":"CVE-2021-24261","affectedVersions":"<=1.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8452e54-7a81-4921-b531-8cb3b0953dab/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8452e54-7a81-4921-b531-8cb3b0953dab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8452e54-7a81-4921-b531-8cb3b0953dab?source=api-prod","cve":"CVE-2024-3307","affectedVersions":"<=2.4.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/d9cf6dae-572f-4eaa-8e8a-bca9e74fe738/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"d9cf6dae-572f-4eaa-8e8a-bca9e74fe738"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d9cf6dae-572f-4eaa-8e8a-bca9e74fe738?source=api-prod","cve":"CVE-2025-8068","affectedVersions":"<=2.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e533f20e-825b-443c-93b2-cf451284ae96/ht-mega-for-elementor","title":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder < 3.0.7 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"e533f20e-825b-443c-93b2-cf451284ae96"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e533f20e-825b-443c-93b2-cf451284ae96?source=api-prod","cve":"CVE-2026-4106","affectedVersions":"<3.0.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e553135d-88e0-4840-99ad-9514c2243b7d/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"e553135d-88e0-4840-99ad-9514c2243b7d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e553135d-88e0-4840-99ad-9514c2243b7d?source=api-prod","cve":"CVE-2025-1261","affectedVersions":"<=2.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f1d3b954-2a3f-4be9-ad0a-dfc0774d8d91/ht-mega-for-elementor","title":"HT Mega <= 2.9.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"f1d3b954-2a3f-4be9-ad0a-dfc0774d8d91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f1d3b954-2a3f-4be9-ad0a-dfc0774d8d91?source=api-prod","cve":"CVE-2025-54695","affectedVersions":"<=2.9.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/03fba6bb-ff30-42bb-936b-93c009a7e3f7/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"03fba6bb-ff30-42bb-936b-93c009a7e3f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/03fba6bb-ff30-42bb-936b-93c009a7e3f7?source=api-prod","cve":"CVE-2024-3989","affectedVersions":"<=2.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/09fb88e4-4846-40d3-8a79-a6a867bfb59f/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"09fb88e4-4846-40d3-8a79-a6a867bfb59f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09fb88e4-4846-40d3-8a79-a6a867bfb59f?source=api-prod","cve":"CVE-2024-8910","affectedVersions":"<=2.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/0f9c5bed-a399-43e2-be40-d669e90d3736/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"0f9c5bed-a399-43e2-be40-d669e90d3736"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0f9c5bed-a399-43e2-be40-d669e90d3736?source=api-prod","cve":"CVE-2024-2085","affectedVersions":"<=2.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/11b5f0a1-bf22-46be-a165-c62f1077da0f/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-23 16:06:00","sources":[{"name":"Wordfence","remoteId":"11b5f0a1-bf22-46be-a165-c62f1077da0f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/11b5f0a1-bf22-46be-a165-c62f1077da0f?source=api-prod","cve":"CVE-2024-1974","affectedVersions":"<=2.4.6","severity":"high"},{"advisoryId":"WPSECADV/WF/17f12e75-0bb6-48ed-9ba2-17caab268d61/ht-mega-for-elementor","title":"HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"17f12e75-0bb6-48ed-9ba2-17caab268d61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/17f12e75-0bb6-48ed-9ba2-17caab268d61?source=api-prod","cve":"CVE-2024-12597","affectedVersions":"<=2.7.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/20a67cde-612a-4c57-83d6-a5d8f3716a2d/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"20a67cde-612a-4c57-83d6-a5d8f3716a2d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20a67cde-612a-4c57-83d6-a5d8f3716a2d?source=api-prod","cve":"CVE-2024-12599","affectedVersions":"<=2.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/249ad768-3706-47c6-ad1d-f11900b87608/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.7 - Missing Authorization to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"249ad768-3706-47c6-ad1d-f11900b87608"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/249ad768-3706-47c6-ad1d-f11900b87608?source=api-prod","cve":"CVE-2024-32782","affectedVersions":"<=2.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/2cf71a67-5b09-4aa6-b244-4d32ee7b312a/ht-mega-for-elementor","title":"HT Mega 3.2.0 - 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"2cf71a67-5b09-4aa6-b244-4d32ee7b312a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2cf71a67-5b09-4aa6-b244-4d32ee7b312a?source=api-prod","cve":"CVE-2026-86788","affectedVersions":">=3.2.0,<=3.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/316a1ca9-e5fd-463f-ba1e-32589740270a/ht-mega-for-elementor","title":"HT Mega <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"316a1ca9-e5fd-463f-ba1e-32589740270a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/316a1ca9-e5fd-463f-ba1e-32589740270a?source=api-prod","cve":"CVE-2024-30182","affectedVersions":"<=2.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/33b5e231-1b53-4646-ae9c-48babf1ebbd7/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"33b5e231-1b53-4646-ae9c-48babf1ebbd7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33b5e231-1b53-4646-ae9c-48babf1ebbd7?source=api-prod","cve":"CVE-2024-3308","affectedVersions":"<=2.4.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/39e104fa-591a-41e8-af7e-f8b32a199170/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"39e104fa-591a-41e8-af7e-f8b32a199170"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39e104fa-591a-41e8-af7e-f8b32a199170?source=api-prod","cve":"CVE-2024-4876","affectedVersions":"<=2.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/46f3cc62-c2d8-45af-bb92-c2040789cbc0/ht-mega-for-elementor","title":"HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"46f3cc62-c2d8-45af-bb92-c2040789cbc0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/46f3cc62-c2d8-45af-bb92-c2040789cbc0?source=api-prod","cve":"CVE-2023-37999","affectedVersions":"<2.2.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/4abba5ab-523c-4b4f-8d3e-bb7ee57cd280/ht-mega-for-elementor","title":"HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-29 19:36:43","sources":[{"name":"Wordfence","remoteId":"4abba5ab-523c-4b4f-8d3e-bb7ee57cd280"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4abba5ab-523c-4b4f-8d3e-bb7ee57cd280?source=api-prod","cve":"CVE-2026-11895","affectedVersions":"<=3.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/52ba91f1-21a2-4d7c-8801-b5e72a00c37d/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"52ba91f1-21a2-4d7c-8801-b5e72a00c37d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52ba91f1-21a2-4d7c-8801-b5e72a00c37d?source=api-prod","cve":"CVE-2024-2790","affectedVersions":"<=2.4.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/54043c6a-48a1-48e8-ba61-a7e8a1773036/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"54043c6a-48a1-48e8-ba61-a7e8a1773036"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54043c6a-48a1-48e8-ba61-a7e8a1773036?source=api-prod","cve":"CVE-2023-6214","affectedVersions":"<=2.4.6","severity":"high"},{"advisoryId":"WPSECADV/WF/6745be2e-d151-452a-8e65-0db2409dd54d/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.3.8 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"6745be2e-d151-452a-8e65-0db2409dd54d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6745be2e-d151-452a-8e65-0db2409dd54d?source=api-prod","cve":"CVE-2023-50901","affectedVersions":"<=2.3.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/68530904-22d2-4228-b9f2-76f5ee1fd541/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"68530904-22d2-4228-b9f2-76f5ee1fd541"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68530904-22d2-4228-b9f2-76f5ee1fd541?source=api-prod","cve":"CVE-2025-1802","affectedVersions":"<=2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6b3e93bf-af5c-4ca3-a531-2d91df880c51/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b3e93bf-af5c-4ca3-a531-2d91df880c51"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b3e93bf-af5c-4ca3-a531-2d91df880c51?source=api-prod","cve":"CVE-2025-8151","affectedVersions":"<=2.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6f26b04f-2a25-40a6-9b2c-27d9970acb8f/ht-mega-for-elementor","title":"HT Mega <= 2.3.3 - Cross-Site Request Forgery via Several Functions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f26b04f-2a25-40a6-9b2c-27d9970acb8f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f26b04f-2a25-40a6-9b2c-27d9970acb8f?source=api-prod","cve":"CVE-2023-51529","affectedVersions":"<=2.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/86dfdc4f-1cc2-4b0d-b79c-bee3d6956eb4/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-25 18:16:09","sources":[{"name":"Wordfence","remoteId":"86dfdc4f-1cc2-4b0d-b79c-bee3d6956eb4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86dfdc4f-1cc2-4b0d-b79c-bee3d6956eb4?source=api-prod","cve":"CVE-2024-5215","affectedVersions":"<=2.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ac66027-14b8-4e0a-a483-c014905ef04e/ht-mega-for-elementor","title":"HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ac66027-14b8-4e0a-a483-c014905ef04e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ac66027-14b8-4e0a-a483-c014905ef04e?source=api-prod","cve":"CVE-2024-1397","affectedVersions":"<=2.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/8bf04325-e313-4a68-89a0-b560bdef5a14/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-20 19:53:23","sources":[{"name":"Wordfence","remoteId":"8bf04325-e313-4a68-89a0-b560bdef5a14"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8bf04325-e313-4a68-89a0-b560bdef5a14?source=api-prod","cve":"CVE-2025-13141","affectedVersions":"<=3.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e5417d3-c466-4caf-9fb6-26d6e2c06fe1/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e5417d3-c466-4caf-9fb6-26d6e2c06fe1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e5417d3-c466-4caf-9fb6-26d6e2c06fe1?source=api-prod","cve":"CVE-2024-2084","affectedVersions":"<=2.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/9540b339-3386-4ee8-8141-acb9f3d83772/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"9540b339-3386-4ee8-8141-acb9f3d83772"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9540b339-3386-4ee8-8141-acb9f3d83772?source=api-prod","cve":"CVE-2025-8401","affectedVersions":"<=2.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/98e74a23-b586-4d6a-b1ab-78838b0eed61/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"98e74a23-b586-4d6a-b1ab-78838b0eed61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98e74a23-b586-4d6a-b1ab-78838b0eed61?source=api-prod","cve":"CVE-2024-3990","affectedVersions":"<=2.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1b3bcad-4bee-4848-8d68-0aacaf199910/ht-mega-for-elementor","title":"HT Mega <= 2.5.7 - Authenticated (Contributor+) JSON File Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1b3bcad-4bee-4848-8d68-0aacaf199910"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1b3bcad-4bee-4848-8d68-0aacaf199910?source=api-prod","cve":"CVE-2024-38706","affectedVersions":"<=2.5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/a71cbe66-4187-4260-bb87-8579bc6e75f5/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a71cbe66-4187-4260-bb87-8579bc6e75f5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a71cbe66-4187-4260-bb87-8579bc6e75f5?source=api-prod","cve":"CVE-2024-1421","affectedVersions":"<=2.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/aac9569e-d33d-45b3-bd03-2e7f48536ae5/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-25 13:45:59","sources":[{"name":"Wordfence","remoteId":"aac9569e-d33d-45b3-bd03-2e7f48536ae5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aac9569e-d33d-45b3-bd03-2e7f48536ae5?source=api-prod","cve":"CVE-2024-5173","affectedVersions":"<=2.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/bdd3868a-d741-42b4-bc7f-6fb5d33bb71b/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-20 19:51:49","sources":[{"name":"Wordfence","remoteId":"bdd3868a-d741-42b4-bc7f-6fb5d33bb71b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdd3868a-d741-42b4-bc7f-6fb5d33bb71b?source=api-prod","cve":"CVE-2024-4875","affectedVersions":"<=2.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/bead5edb-402a-44bc-9e2b-89201fa4603c/ht-mega-for-elementor","title":"HT Mega - Absolute Addons for Elementor Page Builder <= 1.5.5 - Contributor+ Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"bead5edb-402a-44bc-9e2b-89201fa4603c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bead5edb-402a-44bc-9e2b-89201fa4603c?source=api-prod","cve":"CVE-2021-24261","affectedVersions":"<=1.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8452e54-7a81-4921-b531-8cb3b0953dab/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8452e54-7a81-4921-b531-8cb3b0953dab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8452e54-7a81-4921-b531-8cb3b0953dab?source=api-prod","cve":"CVE-2024-3307","affectedVersions":"<=2.4.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/d9cf6dae-572f-4eaa-8e8a-bca9e74fe738/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"d9cf6dae-572f-4eaa-8e8a-bca9e74fe738"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d9cf6dae-572f-4eaa-8e8a-bca9e74fe738?source=api-prod","cve":"CVE-2025-8068","affectedVersions":"<=2.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e533f20e-825b-443c-93b2-cf451284ae96/ht-mega-for-elementor","title":"HT Mega Addons for Elementor – Elementor Widgets & Template Builder < 3.0.7 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"e533f20e-825b-443c-93b2-cf451284ae96"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e533f20e-825b-443c-93b2-cf451284ae96?source=api-prod","cve":"CVE-2026-4106","affectedVersions":"<3.0.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e553135d-88e0-4840-99ad-9514c2243b7d/ht-mega-for-elementor","title":"HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"e553135d-88e0-4840-99ad-9514c2243b7d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e553135d-88e0-4840-99ad-9514c2243b7d?source=api-prod","cve":"CVE-2025-1261","affectedVersions":"<=2.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f1d3b954-2a3f-4be9-ad0a-dfc0774d8d91/ht-mega-for-elementor","title":"HT Mega <= 2.9.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"f1d3b954-2a3f-4be9-ad0a-dfc0774d8d91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f1d3b954-2a3f-4be9-ad0a-dfc0774d8d91?source=api-prod","cve":"CVE-2025-54695","affectedVersions":"<=2.9.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/fe67064b-7b22-48e8-9a07-9870af6c453a/ht-mega-for-elementor","title":"HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:11:54","sources":[{"name":"Wordfence","remoteId":"fe67064b-7b22-48e8-9a07-9870af6c453a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe67064b-7b22-48e8-9a07-9870af6c453a?source=api-prod","cve":"CVE-2026-111318","affectedVersions":"<=3.2.7","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_696e73746177702d636f6e6e656374811c9dc5_gen.json b/internal/data/assets/plugin_696e73746177702d636f6e6e656374811c9dc5_gen.json
index 75fef3eb..5e4f44ed 100644
--- a/internal/data/assets/plugin_696e73746177702d636f6e6e656374811c9dc5_gen.json
+++ b/internal/data/assets/plugin_696e73746177702d636f6e6e656374811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2a681cef-649f-4342-beb6-914674bbf6d6/instawp-connect","title":"InstaWP Connect <= 0.1.0.8 - Authenticated (Subscriber+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a681cef-649f-4342-beb6-914674bbf6d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a681cef-649f-4342-beb6-914674bbf6d6?source=api-prod","cve":"CVE-2024-25918","affectedVersions":"<=0.1.0.8","severity":"high"},{"advisoryId":"WPSECADV/WF/2b2a10b6-e7dc-47c7-9f59-c4350d58b0d1/instawp-connect","title":"InstaWP Connect <= 0.1.0.24 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b2a10b6-e7dc-47c7-9f59-c4350d58b0d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b2a10b6-e7dc-47c7-9f59-c4350d58b0d1?source=api-prod","cve":"CVE-2024-32701","affectedVersions":"<=0.1.0.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/48e7acf2-61d4-4762-8657-0701910ce69b/instawp-connect","title":"InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"48e7acf2-61d4-4762-8657-0701910ce69b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/48e7acf2-61d4-4762-8657-0701910ce69b?source=api-prod","cve":"CVE-2023-3956","affectedVersions":"<=0.0.9.18","severity":"critical"},{"advisoryId":"WPSECADV/WF/4c8f2c6f-c231-477c-895b-df892569ef95/instawp-connect","title":"InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"4c8f2c6f-c231-477c-895b-df892569ef95"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c8f2c6f-c231-477c-895b-df892569ef95?source=api-prod","cve":"CVE-2025-2636","affectedVersions":"<=0.1.0.85","severity":"high"},{"advisoryId":"WPSECADV/WF/578cf704-e84d-469f-bf26-e60268506a78/instawp-connect","title":"InstaWP Connect <= 0.1.0.9 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"578cf704-e84d-469f-bf26-e60268506a78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/578cf704-e84d-469f-bf26-e60268506a78?source=api-prod","cve":"CVE-2024-23507","affectedVersions":"<=0.1.0.9","severity":"high"},{"advisoryId":"WPSECADV/WF/5954c35a-7d0a-4bc5-9cad-3223e7be56eb/instawp-connect","title":"InstaWP Connect <= 0.1.0.8 - Cross-Site Request Forgery via create_file_db_manager\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"5954c35a-7d0a-4bc5-9cad-3223e7be56eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5954c35a-7d0a-4bc5-9cad-3223e7be56eb?source=api-prod","affectedVersions":"<=0.1.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/6aa4fd08-a1b1-4f61-a9d1-9812071b61c9/instawp-connect","title":"InstaWP Connect <= 0.1.0.8 - Missing Authorization to Arbitrary Options Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"6aa4fd08-a1b1-4f61-a9d1-9812071b61c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6aa4fd08-a1b1-4f61-a9d1-9812071b61c9?source=api-prod","cve":"CVE-2024-22145","affectedVersions":"<=0.1.0.8","severity":"high"},{"advisoryId":"WPSECADV/WF/82bfdacf-86e1-4383-995e-e757fd389aab/instawp-connect","title":"InstaWP Connect <= 0.1.1.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"82bfdacf-86e1-4383-995e-e757fd389aab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/82bfdacf-86e1-4383-995e-e757fd389aab?source=api-prod","cve":"CVE-2025-66068","affectedVersions":"<=0.1.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/925b009e-3aeb-496d-8218-6ea5dc9d9989/instawp-connect","title":"InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 15:51:06","sources":[{"name":"Wordfence","remoteId":"925b009e-3aeb-496d-8218-6ea5dc9d9989"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/925b009e-3aeb-496d-8218-6ea5dc9d9989?source=api-prod","cve":"CVE-2026-109400","affectedVersions":"<=0.1.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/92a00fb4-7b50-43fd-ac04-5d6e29336e9c/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-11 21:44:53","sources":[{"name":"Wordfence","remoteId":"92a00fb4-7b50-43fd-ac04-5d6e29336e9c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92a00fb4-7b50-43fd-ac04-5d6e29336e9c?source=api-prod","cve":"CVE-2024-4898","affectedVersions":"<=0.1.0.38","severity":"critical"},{"advisoryId":"WPSECADV/WF/963f2485-3afa-4e17-8278-b75415af3915/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"963f2485-3afa-4e17-8278-b75415af3915"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/963f2485-3afa-4e17-8278-b75415af3915?source=api-prod","cve":"CVE-2024-6397","affectedVersions":"<=0.1.0.44","severity":"critical"},{"advisoryId":"WPSECADV/WF/9a184384-9162-4509-957b-d97dd4089856/instawp-connect","title":"InstaWP Connect <= 0.1.0.9 - Missing Authorization to Sensitive Information Dislcosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"9a184384-9162-4509-957b-d97dd4089856"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a184384-9162-4509-957b-d97dd4089856?source=api-prod","cve":"CVE-2024-23506","affectedVersions":"<=0.1.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d6a2238-eca4-4189-a6fe-dd605cd47703/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.3.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"9d6a2238-eca4-4189-a6fe-dd605cd47703"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d6a2238-eca4-4189-a6fe-dd605cd47703?source=api-prod","cve":"CVE-2026-73401","affectedVersions":"<=0.1.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c0e9726f-45cc-4759-909d-3de2ae9b2334/instawp-connect","title":"InstaWP Connect <= 0.1.0.82 - Unauthenticated Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"c0e9726f-45cc-4759-909d-3de2ae9b2334"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c0e9726f-45cc-4759-909d-3de2ae9b2334?source=api-prod","cve":"CVE-2025-31387","affectedVersions":"<=0.1.0.82","severity":"critical"},{"advisoryId":"WPSECADV/WF/c6ab1328-b5a0-4592-8455-0bc1874f2b3e/instawp-connect","title":"InstaWP Connect <= 0.1.2.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"c6ab1328-b5a0-4592-8455-0bc1874f2b3e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c6ab1328-b5a0-4592-8455-0bc1874f2b3e?source=api-prod","cve":"CVE-2026-39504","affectedVersions":"<=0.1.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/cedc575c-ee8f-4c62-bc44-95252a0c8b6f/instawp-connect","title":"InstaWP Connect <= 0.1.0.38 - Unauthenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"cedc575c-ee8f-4c62-bc44-95252a0c8b6f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cedc575c-ee8f-4c62-bc44-95252a0c8b6f?source=api-prod","cve":"CVE-2024-37228","affectedVersions":"<=0.1.0.38","severity":"critical"},{"advisoryId":"WPSECADV/WF/ea6c7b63-00da-4476-a024-97fe99af643d/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea6c7b63-00da-4476-a024-97fe99af643d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea6c7b63-00da-4476-a024-97fe99af643d?source=api-prod","cve":"CVE-2024-13913","affectedVersions":"<=0.1.0.83","severity":"high"},{"advisoryId":"WPSECADV/WF/f5319467-92f6-4d4f-a76a-12aeb25d3c6b/instawp-connect","title":"InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 06:27:45","sources":[{"name":"Wordfence","remoteId":"f5319467-92f6-4d4f-a76a-12aeb25d3c6b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f5319467-92f6-4d4f-a76a-12aeb25d3c6b?source=api-prod","cve":"CVE-2026-13457","affectedVersions":"<=0.1.3.6","severity":"high"},{"advisoryId":"WPSECADV/WF/f6aead8d-c136-4952-ad03-86fe0f144dea/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f6aead8d-c136-4952-ad03-86fe0f144dea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f6aead8d-c136-4952-ad03-86fe0f144dea?source=api-prod","cve":"CVE-2024-2667","affectedVersions":"<=0.1.0.22","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2a681cef-649f-4342-beb6-914674bbf6d6/instawp-connect","title":"InstaWP Connect <= 0.1.0.8 - Authenticated (Subscriber+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a681cef-649f-4342-beb6-914674bbf6d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a681cef-649f-4342-beb6-914674bbf6d6?source=api-prod","cve":"CVE-2024-25918","affectedVersions":"<=0.1.0.8","severity":"high"},{"advisoryId":"WPSECADV/WF/2b2a10b6-e7dc-47c7-9f59-c4350d58b0d1/instawp-connect","title":"InstaWP Connect <= 0.1.0.24 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b2a10b6-e7dc-47c7-9f59-c4350d58b0d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b2a10b6-e7dc-47c7-9f59-c4350d58b0d1?source=api-prod","cve":"CVE-2024-32701","affectedVersions":"<=0.1.0.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/48e7acf2-61d4-4762-8657-0701910ce69b/instawp-connect","title":"InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"48e7acf2-61d4-4762-8657-0701910ce69b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/48e7acf2-61d4-4762-8657-0701910ce69b?source=api-prod","cve":"CVE-2023-3956","affectedVersions":"<=0.0.9.18","severity":"critical"},{"advisoryId":"WPSECADV/WF/4c8f2c6f-c231-477c-895b-df892569ef95/instawp-connect","title":"InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"4c8f2c6f-c231-477c-895b-df892569ef95"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c8f2c6f-c231-477c-895b-df892569ef95?source=api-prod","cve":"CVE-2025-2636","affectedVersions":"<=0.1.0.85","severity":"high"},{"advisoryId":"WPSECADV/WF/578cf704-e84d-469f-bf26-e60268506a78/instawp-connect","title":"InstaWP Connect <= 0.1.0.9 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"578cf704-e84d-469f-bf26-e60268506a78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/578cf704-e84d-469f-bf26-e60268506a78?source=api-prod","cve":"CVE-2024-23507","affectedVersions":"<=0.1.0.9","severity":"high"},{"advisoryId":"WPSECADV/WF/5954c35a-7d0a-4bc5-9cad-3223e7be56eb/instawp-connect","title":"InstaWP Connect <= 0.1.0.8 - Cross-Site Request Forgery via create_file_db_manager\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"5954c35a-7d0a-4bc5-9cad-3223e7be56eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5954c35a-7d0a-4bc5-9cad-3223e7be56eb?source=api-prod","affectedVersions":"<=0.1.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/6aa4fd08-a1b1-4f61-a9d1-9812071b61c9/instawp-connect","title":"InstaWP Connect <= 0.1.0.8 - Missing Authorization to Arbitrary Options Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"6aa4fd08-a1b1-4f61-a9d1-9812071b61c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6aa4fd08-a1b1-4f61-a9d1-9812071b61c9?source=api-prod","cve":"CVE-2024-22145","affectedVersions":"<=0.1.0.8","severity":"high"},{"advisoryId":"WPSECADV/WF/82bfdacf-86e1-4383-995e-e757fd389aab/instawp-connect","title":"InstaWP Connect <= 0.1.1.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"82bfdacf-86e1-4383-995e-e757fd389aab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/82bfdacf-86e1-4383-995e-e757fd389aab?source=api-prod","cve":"CVE-2025-66068","affectedVersions":"<=0.1.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/925b009e-3aeb-496d-8218-6ea5dc9d9989/instawp-connect","title":"InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 15:51:06","sources":[{"name":"Wordfence","remoteId":"925b009e-3aeb-496d-8218-6ea5dc9d9989"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/925b009e-3aeb-496d-8218-6ea5dc9d9989?source=api-prod","cve":"CVE-2026-109400","affectedVersions":"<=0.1.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/92a00fb4-7b50-43fd-ac04-5d6e29336e9c/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-11 21:44:53","sources":[{"name":"Wordfence","remoteId":"92a00fb4-7b50-43fd-ac04-5d6e29336e9c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92a00fb4-7b50-43fd-ac04-5d6e29336e9c?source=api-prod","cve":"CVE-2024-4898","affectedVersions":"<=0.1.0.38","severity":"critical"},{"advisoryId":"WPSECADV/WF/9598ba18-1fcc-4f2f-af57-a33ae98ed46b/instawp-connect","title":"InstaWP Connect <= 0.1.4.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"9598ba18-1fcc-4f2f-af57-a33ae98ed46b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9598ba18-1fcc-4f2f-af57-a33ae98ed46b?source=api-prod","cve":"CVE-2026-114743","affectedVersions":"<=0.1.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/963f2485-3afa-4e17-8278-b75415af3915/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"963f2485-3afa-4e17-8278-b75415af3915"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/963f2485-3afa-4e17-8278-b75415af3915?source=api-prod","cve":"CVE-2024-6397","affectedVersions":"<=0.1.0.44","severity":"critical"},{"advisoryId":"WPSECADV/WF/9a184384-9162-4509-957b-d97dd4089856/instawp-connect","title":"InstaWP Connect <= 0.1.0.9 - Missing Authorization to Sensitive Information Dislcosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"9a184384-9162-4509-957b-d97dd4089856"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a184384-9162-4509-957b-d97dd4089856?source=api-prod","cve":"CVE-2024-23506","affectedVersions":"<=0.1.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d6a2238-eca4-4189-a6fe-dd605cd47703/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.3.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"9d6a2238-eca4-4189-a6fe-dd605cd47703"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d6a2238-eca4-4189-a6fe-dd605cd47703?source=api-prod","cve":"CVE-2026-73401","affectedVersions":"<=0.1.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c0e9726f-45cc-4759-909d-3de2ae9b2334/instawp-connect","title":"InstaWP Connect <= 0.1.0.82 - Unauthenticated Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"c0e9726f-45cc-4759-909d-3de2ae9b2334"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c0e9726f-45cc-4759-909d-3de2ae9b2334?source=api-prod","cve":"CVE-2025-31387","affectedVersions":"<=0.1.0.82","severity":"critical"},{"advisoryId":"WPSECADV/WF/c6ab1328-b5a0-4592-8455-0bc1874f2b3e/instawp-connect","title":"InstaWP Connect <= 0.1.2.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"c6ab1328-b5a0-4592-8455-0bc1874f2b3e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c6ab1328-b5a0-4592-8455-0bc1874f2b3e?source=api-prod","cve":"CVE-2026-39504","affectedVersions":"<=0.1.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/cedc575c-ee8f-4c62-bc44-95252a0c8b6f/instawp-connect","title":"InstaWP Connect <= 0.1.0.38 - Unauthenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"cedc575c-ee8f-4c62-bc44-95252a0c8b6f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cedc575c-ee8f-4c62-bc44-95252a0c8b6f?source=api-prod","cve":"CVE-2024-37228","affectedVersions":"<=0.1.0.38","severity":"critical"},{"advisoryId":"WPSECADV/WF/ea6c7b63-00da-4476-a024-97fe99af643d/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea6c7b63-00da-4476-a024-97fe99af643d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea6c7b63-00da-4476-a024-97fe99af643d?source=api-prod","cve":"CVE-2024-13913","affectedVersions":"<=0.1.0.83","severity":"high"},{"advisoryId":"WPSECADV/WF/f5319467-92f6-4d4f-a76a-12aeb25d3c6b/instawp-connect","title":"InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 06:27:45","sources":[{"name":"Wordfence","remoteId":"f5319467-92f6-4d4f-a76a-12aeb25d3c6b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f5319467-92f6-4d4f-a76a-12aeb25d3c6b?source=api-prod","cve":"CVE-2026-13457","affectedVersions":"<=0.1.3.6","severity":"high"},{"advisoryId":"WPSECADV/WF/f6aead8d-c136-4952-ad03-86fe0f144dea/instawp-connect","title":"InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f6aead8d-c136-4952-ad03-86fe0f144dea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f6aead8d-c136-4952-ad03-86fe0f144dea?source=api-prod","cve":"CVE-2024-2667","affectedVersions":"<=0.1.0.22","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_69737375752d70616e656c811c9dc5_gen.json b/internal/data/assets/plugin_69737375752d70616e656c811c9dc5_gen.json
index 95b5c651..f08c3045 100644
--- a/internal/data/assets/plugin_69737375752d70616e656c811c9dc5_gen.json
+++ b/internal/data/assets/plugin_69737375752d70616e656c811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/8de3b45c-e0f2-48a6-a7b3-207981161691/issuu-panel","title":"Issuu Panel <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"8de3b45c-e0f2-48a6-a7b3-207981161691"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8de3b45c-e0f2-48a6-a7b3-207981161691?source=api-prod","cve":"CVE-2025-23976","affectedVersions":"<=2.1.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/8de3b45c-e0f2-48a6-a7b3-207981161691/issuu-panel","title":"Issuu Panel <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"8de3b45c-e0f2-48a6-a7b3-207981161691"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8de3b45c-e0f2-48a6-a7b3-207981161691?source=api-prod","cve":"CVE-2025-23976","affectedVersions":"<=2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e061a9de-a6a3-4bdb-a2cf-7bf7e7795041/issuu-panel","title":"Issuu Panel < 1.6.6 - Unauthenticated Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"e061a9de-a6a3-4bdb-a2cf-7bf7e7795041"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e061a9de-a6a3-4bdb-a2cf-7bf7e7795041?source=api-prod","cve":"CVE-2016-20101","affectedVersions":"<1.6.6","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6a6f6f6d73706f72742d73706f7274732d6c65616775652d726573756c74732d6d616e6167656d656e74811c9dc5_gen.json b/internal/data/assets/plugin_6a6f6f6d73706f72742d73706f7274732d6c65616775652d726573756c74732d6d616e6167656d656e74811c9dc5_gen.json
index 3bb003d6..423c6b7f 100644
--- a/internal/data/assets/plugin_6a6f6f6d73706f72742d73706f7274732d6c65616775652d726573756c74732d6d616e6167656d656e74811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6a6f6f6d73706f72742d73706f7274732d6c65616775652d726573756c74732d6d616e6167656d656e74811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/03122c29-4ca5-426a-8240-74ce96dd21f2/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 14:47:14","sources":[{"name":"Wordfence","remoteId":"03122c29-4ca5-426a-8240-74ce96dd21f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/03122c29-4ca5-426a-8240-74ce96dd21f2?source=api-prod","cve":"CVE-2026-12133","affectedVersions":"<=5.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/28b730b3-4260-414f-8a4a-65ba5509449b/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-12 17:13:07","sources":[{"name":"Wordfence","remoteId":"28b730b3-4260-414f-8a4a-65ba5509449b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28b730b3-4260-414f-8a4a-65ba5509449b?source=api-prod","cve":"CVE-2026-6929","affectedVersions":"<=5.7.7","severity":"high"},{"advisoryId":"WPSECADV/WF/31ca2de5-d63c-4ff8-9963-b96213d17cd0/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more < 3.4 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"31ca2de5-d63c-4ff8-9963-b96213d17cd0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/31ca2de5-d63c-4ff8-9963-b96213d17cd0?source=api-prod","cve":"CVE-2019-14348","affectedVersions":"<3.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/3f202cc3-ab74-4abb-9eed-b4caf9fccb71/joomsport-sports-league-results-management","title":"JoomSport <= 5.2.7 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f202cc3-ab74-4abb-9eed-b4caf9fccb71"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f202cc3-ab74-4abb-9eed-b4caf9fccb71?source=api-prod","cve":"CVE-2022-4050","affectedVersions":"<=5.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/4f3900c7-2acb-4031-9854-b0b13e172e1f/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-02 22:17:24","sources":[{"name":"Wordfence","remoteId":"4f3900c7-2acb-4031-9854-b0b13e172e1f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4f3900c7-2acb-4031-9854-b0b13e172e1f?source=api-prod","cve":"CVE-2025-7721","affectedVersions":"<=5.7.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/9b6cf4ab-9e4d-4fd7-9e9e-c678ccc4d810/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b6cf4ab-9e4d-4fd7-9e9e-c678ccc4d810"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b6cf4ab-9e4d-4fd7-9e9e-c678ccc4d810?source=api-prod","cve":"CVE-2022-2717","affectedVersions":"<=5.2.5","severity":"high"},{"advisoryId":"WPSECADV/WF/9eee9bec-609a-468b-8b44-ac4af409df93/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"9eee9bec-609a-468b-8b44-ac4af409df93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9eee9bec-609a-468b-8b44-ac4af409df93?source=api-prod","cve":"CVE-2022-2718","affectedVersions":"<=5.2.5","severity":"high"},{"advisoryId":"WPSECADV/WF/a00997d4-f242-4d49-8542-0738efa66222/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-01 19:58:08","sources":[{"name":"Wordfence","remoteId":"a00997d4-f242-4d49-8542-0738efa66222"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a00997d4-f242-4d49-8542-0738efa66222?source=api-prod","cve":"CVE-2026-12134","affectedVersions":"<=5.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3aa680f-4ce2-43b2-81fb-c664e398c868/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-09 20:51:51","sources":[{"name":"Wordfence","remoteId":"a3aa680f-4ce2-43b2-81fb-c664e398c868"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3aa680f-4ce2-43b2-81fb-c664e398c868?source=api-prod","cve":"CVE-2026-13010","affectedVersions":"<=5.7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4503e2c-0d0d-45de-a597-baace44a98a7/joomsport-sports-league-results-management","title":"JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4503e2c-0d0d-45de-a597-baace44a98a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4503e2c-0d0d-45de-a597-baace44a98a7?source=api-prod","cve":"CVE-2024-12633","affectedVersions":"<=5.6.17","severity":"high"},{"advisoryId":"WPSECADV/WF/b96273e8-29a8-4802-8c83-1ce5ab9600b6/joomsport-sports-league-results-management","title":"JoomSport <= 5.3.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"b96273e8-29a8-4802-8c83-1ce5ab9600b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b96273e8-29a8-4802-8c83-1ce5ab9600b6?source=api-prod","cve":"CVE-2024-43355","affectedVersions":"<=5.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/c2b9c6ab-28b4-49c7-9dc2-32bca81300f8/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.7.7 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2b9c6ab-28b4-49c7-9dc2-32bca81300f8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2b9c6ab-28b4-49c7-9dc2-32bca81300f8?source=api-prod","cve":"CVE-2026-42647","affectedVersions":"<=5.7.7","severity":"high"},{"advisoryId":"WPSECADV/WF/ca7e7419-5e1f-42f3-8dad-78d536b36888/joomsport-sports-league-results-management","title":"JoomSport <= 5.6.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ca7e7419-5e1f-42f3-8dad-78d536b36888"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca7e7419-5e1f-42f3-8dad-78d536b36888?source=api-prod","cve":"CVE-2024-44031","affectedVersions":"<=5.6.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/d5400ec0-383b-4ac5-9b38-44533519e44d/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.1.7 - Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-06-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"d5400ec0-383b-4ac5-9b38-44533519e44d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d5400ec0-383b-4ac5-9b38-44533519e44d?source=api-prod","cve":"CVE-2021-24384","affectedVersions":"<5.1.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/ffc2fe31-9bc2-497a-a8f4-1bc4f93de5a2/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-04 18:43:21","sources":[{"name":"Wordfence","remoteId":"ffc2fe31-9bc2-497a-a8f4-1bc4f93de5a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ffc2fe31-9bc2-497a-a8f4-1bc4f93de5a2?source=api-prod","cve":"CVE-2026-11920","affectedVersions":"<=5.7.9","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/03122c29-4ca5-426a-8240-74ce96dd21f2/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 14:47:14","sources":[{"name":"Wordfence","remoteId":"03122c29-4ca5-426a-8240-74ce96dd21f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/03122c29-4ca5-426a-8240-74ce96dd21f2?source=api-prod","cve":"CVE-2026-12133","affectedVersions":"<=5.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/28b730b3-4260-414f-8a4a-65ba5509449b/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-12 17:13:07","sources":[{"name":"Wordfence","remoteId":"28b730b3-4260-414f-8a4a-65ba5509449b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28b730b3-4260-414f-8a4a-65ba5509449b?source=api-prod","cve":"CVE-2026-6929","affectedVersions":"<=5.7.7","severity":"high"},{"advisoryId":"WPSECADV/WF/31931ac8-08f8-4fe7-9318-5a1d8dc89bed/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 20:36:50","sources":[{"name":"Wordfence","remoteId":"31931ac8-08f8-4fe7-9318-5a1d8dc89bed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/31931ac8-08f8-4fe7-9318-5a1d8dc89bed?source=api-prod","cve":"CVE-2026-118192","affectedVersions":"<=5.7.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/31ca2de5-d63c-4ff8-9963-b96213d17cd0/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more < 3.4 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"31ca2de5-d63c-4ff8-9963-b96213d17cd0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/31ca2de5-d63c-4ff8-9963-b96213d17cd0?source=api-prod","cve":"CVE-2019-14348","affectedVersions":"<3.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/3f202cc3-ab74-4abb-9eed-b4caf9fccb71/joomsport-sports-league-results-management","title":"JoomSport <= 5.2.7 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f202cc3-ab74-4abb-9eed-b4caf9fccb71"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f202cc3-ab74-4abb-9eed-b4caf9fccb71?source=api-prod","cve":"CVE-2022-4050","affectedVersions":"<=5.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/4f3900c7-2acb-4031-9854-b0b13e172e1f/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-02 22:17:24","sources":[{"name":"Wordfence","remoteId":"4f3900c7-2acb-4031-9854-b0b13e172e1f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4f3900c7-2acb-4031-9854-b0b13e172e1f?source=api-prod","cve":"CVE-2025-7721","affectedVersions":"<=5.7.3","severity":"critical"},{"advisoryId":"WPSECADV/WF/9b6cf4ab-9e4d-4fd7-9e9e-c678ccc4d810/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b6cf4ab-9e4d-4fd7-9e9e-c678ccc4d810"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b6cf4ab-9e4d-4fd7-9e9e-c678ccc4d810?source=api-prod","cve":"CVE-2022-2717","affectedVersions":"<=5.2.5","severity":"high"},{"advisoryId":"WPSECADV/WF/9eee9bec-609a-468b-8b44-ac4af409df93/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"9eee9bec-609a-468b-8b44-ac4af409df93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9eee9bec-609a-468b-8b44-ac4af409df93?source=api-prod","cve":"CVE-2022-2718","affectedVersions":"<=5.2.5","severity":"high"},{"advisoryId":"WPSECADV/WF/a00997d4-f242-4d49-8542-0738efa66222/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-01 19:58:08","sources":[{"name":"Wordfence","remoteId":"a00997d4-f242-4d49-8542-0738efa66222"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a00997d4-f242-4d49-8542-0738efa66222?source=api-prod","cve":"CVE-2026-12134","affectedVersions":"<=5.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3aa680f-4ce2-43b2-81fb-c664e398c868/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-09 20:51:51","sources":[{"name":"Wordfence","remoteId":"a3aa680f-4ce2-43b2-81fb-c664e398c868"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3aa680f-4ce2-43b2-81fb-c664e398c868?source=api-prod","cve":"CVE-2026-13010","affectedVersions":"<=5.7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4503e2c-0d0d-45de-a597-baace44a98a7/joomsport-sports-league-results-management","title":"JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4503e2c-0d0d-45de-a597-baace44a98a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4503e2c-0d0d-45de-a597-baace44a98a7?source=api-prod","cve":"CVE-2024-12633","affectedVersions":"<=5.6.17","severity":"high"},{"advisoryId":"WPSECADV/WF/b96273e8-29a8-4802-8c83-1ce5ab9600b6/joomsport-sports-league-results-management","title":"JoomSport <= 5.3.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"b96273e8-29a8-4802-8c83-1ce5ab9600b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b96273e8-29a8-4802-8c83-1ce5ab9600b6?source=api-prod","cve":"CVE-2024-43355","affectedVersions":"<=5.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/c2b9c6ab-28b4-49c7-9dc2-32bca81300f8/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.7.7 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2b9c6ab-28b4-49c7-9dc2-32bca81300f8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2b9c6ab-28b4-49c7-9dc2-32bca81300f8?source=api-prod","cve":"CVE-2026-42647","affectedVersions":"<=5.7.7","severity":"high"},{"advisoryId":"WPSECADV/WF/ca7e7419-5e1f-42f3-8dad-78d536b36888/joomsport-sports-league-results-management","title":"JoomSport <= 5.6.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ca7e7419-5e1f-42f3-8dad-78d536b36888"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca7e7419-5e1f-42f3-8dad-78d536b36888?source=api-prod","cve":"CVE-2024-44031","affectedVersions":"<=5.6.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/d5400ec0-383b-4ac5-9b38-44533519e44d/joomsport-sports-league-results-management","title":"JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.1.7 - Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-06-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"d5400ec0-383b-4ac5-9b38-44533519e44d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d5400ec0-383b-4ac5-9b38-44533519e44d?source=api-prod","cve":"CVE-2021-24384","affectedVersions":"<5.1.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/ffc2fe31-9bc2-497a-a8f4-1bc4f93de5a2/joomsport-sports-league-results-management","title":"JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-04 18:43:21","sources":[{"name":"Wordfence","remoteId":"ffc2fe31-9bc2-497a-a8f4-1bc4f93de5a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ffc2fe31-9bc2-497a-a8f4-1bc4f93de5a2?source=api-prod","cve":"CVE-2026-11920","affectedVersions":"<=5.7.9","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6a6f74666f726d2d61692d63686174626f74811c9dc5_gen.json b/internal/data/assets/plugin_6a6f74666f726d2d61692d63686174626f74811c9dc5_gen.json
index 030d5833..ebb21335 100644
--- a/internal/data/assets/plugin_6a6f74666f726d2d61692d63686174626f74811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6a6f74666f726d2d61692d63686174626f74811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/d8af9d7e-e99e-4d60-ac02-9b0e3699e59f/jotform-ai-chatbot","title":"Jotform – AI Chatbot <= 3.8.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"d8af9d7e-e99e-4d60-ac02-9b0e3699e59f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d8af9d7e-e99e-4d60-ac02-9b0e3699e59f?source=api-prod","cve":"CVE-2026-40803","affectedVersions":"<=3.8.2","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/d8af9d7e-e99e-4d60-ac02-9b0e3699e59f/jotform-ai-chatbot","title":"Jotform – AI Chatbot <= 3.8.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"d8af9d7e-e99e-4d60-ac02-9b0e3699e59f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d8af9d7e-e99e-4d60-ac02-9b0e3699e59f?source=api-prod","cve":"CVE-2026-40803","affectedVersions":"<=3.8.3","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6b6e657773811c9dc5_gen.json b/internal/data/assets/plugin_6b6e657773811c9dc5_gen.json
index 9963a1b6..995b9375 100644
--- a/internal/data/assets/plugin_6b6e657773811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6b6e657773811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/a60bb585-3c71-4381-8ba7-28ee63abdb14/knews","title":"Knews Multilingual Newsletters <= 1.1.0 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"a60bb585-3c71-4381-8ba7-28ee63abdb14"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a60bb585-3c71-4381-8ba7-28ee63abdb14?source=api-prod","affectedVersions":"<=1.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d4994d7d-82f7-4cb0-869f-e27abe04b621/knews","title":"Knews Multilingual Newsletters Plugin <= 1.7.0 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d4994d7d-82f7-4cb0-869f-e27abe04b621"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d4994d7d-82f7-4cb0-869f-e27abe04b621?source=api-prod","affectedVersions":"<=1.7.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/f52d5c44-4a5e-4a45-b622-66aa4e509fd8/knews","title":"Knews Multilingual Newsletters < 1.2.6 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f52d5c44-4a5e-4a45-b622-66aa4e509fd8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f52d5c44-4a5e-4a45-b622-66aa4e509fd8?source=api-prod","affectedVersions":"<1.2.6","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/a60bb585-3c71-4381-8ba7-28ee63abdb14/knews","title":"Knews Multilingual Newsletters <= 1.1.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"a60bb585-3c71-4381-8ba7-28ee63abdb14"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a60bb585-3c71-4381-8ba7-28ee63abdb14?source=api-prod","cve":"CVE-2012-20004","affectedVersions":"<=1.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d4994d7d-82f7-4cb0-869f-e27abe04b621/knews","title":"Knews Multilingual Newsletters Plugin <= 1.7.0 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d4994d7d-82f7-4cb0-869f-e27abe04b621"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d4994d7d-82f7-4cb0-869f-e27abe04b621?source=api-prod","affectedVersions":"<=1.7.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/f52d5c44-4a5e-4a45-b622-66aa4e509fd8/knews","title":"Knews Multilingual Newsletters < 1.2.6 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-12-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f52d5c44-4a5e-4a45-b622-66aa4e509fd8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f52d5c44-4a5e-4a45-b622-66aa4e509fd8?source=api-prod","affectedVersions":"<1.2.6","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6c6561726e7072657373811c9dc5_gen.json b/internal/data/assets/plugin_6c6561726e7072657373811c9dc5_gen.json
index 4b7c1547..c0630bfa 100644
--- a/internal/data/assets/plugin_6c6561726e7072657373811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6c6561726e7072657373811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/021bd566-1663-46ba-a616-ab554b691cbb/learnpress","title":"LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-13 12:59:29","sources":[{"name":"Wordfence","remoteId":"021bd566-1663-46ba-a616-ab554b691cbb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/021bd566-1663-46ba-a616-ab554b691cbb?source=api-prod","cve":"CVE-2026-4365","affectedVersions":"<=4.3.2.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/09c8db69-60fa-4087-9096-5d34ce44f616/learnpress","title":"LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 19:00:11","sources":[{"name":"Wordfence","remoteId":"09c8db69-60fa-4087-9096-5d34ce44f616"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09c8db69-60fa-4087-9096-5d34ce44f616?source=api-prod","cve":"CVE-2026-12732","affectedVersions":"<=4.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0a79f8f6-a708-4db1-806d-1f782bbcfd16/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a79f8f6-a708-4db1-806d-1f782bbcfd16"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a79f8f6-a708-4db1-806d-1f782bbcfd16?source=api-prod","cve":"CVE-2024-13127","affectedVersions":"<=4.2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/0a8453c4-effd-48fc-99c8-fc1f90cd23ea/learnpress","title":"LearnPress <= 4.3.6 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a8453c4-effd-48fc-99c8-fc1f90cd23ea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a8453c4-effd-48fc-99c8-fc1f90cd23ea?source=api-prod","cve":"CVE-2026-8383","affectedVersions":"<=4.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ba153e1-b46c-404d-81ec-21bc7dfa3d8a/learnpress","title":"LearnPress <= 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ba153e1-b46c-404d-81ec-21bc7dfa3d8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ba153e1-b46c-404d-81ec-21bc7dfa3d8a?source=api-prod","cve":"CVE-2026-86448","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c410d91-08cc-496d-9c8e-c57f107399da/learnpress","title":"LearnPress <= 4.2.6.3 - Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c410d91-08cc-496d-9c8e-c57f107399da"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c410d91-08cc-496d-9c8e-c57f107399da?source=api-prod","cve":"CVE-2024-1289","affectedVersions":"<=4.2.6.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c9856db-3779-4649-9a48-1c7b6d019816/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-20 16:53:10","sources":[{"name":"Wordfence","remoteId":"0c9856db-3779-4649-9a48-1c7b6d019816"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c9856db-3779-4649-9a48-1c7b6d019816?source=api-prod","cve":"CVE-2025-11368","affectedVersions":"<=4.2.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/10b08a05-3561-4d05-985b-6a2339a547a7/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-21 16:40:45","sources":[{"name":"Wordfence","remoteId":"10b08a05-3561-4d05-985b-6a2339a547a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10b08a05-3561-4d05-985b-6a2339a547a7?source=api-prod","cve":"CVE-2024-4971","affectedVersions":"<=4.2.6.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/122b75d2-e882-45b9-baf1-acf847f8d60a/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-04 14:20:10","sources":[{"name":"Wordfence","remoteId":"122b75d2-e882-45b9-baf1-acf847f8d60a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/122b75d2-e882-45b9-baf1-acf847f8d60a?source=api-prod","cve":"CVE-2024-5483","affectedVersions":"<=4.2.6.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/1239fa45-f914-4922-ac4e-c0753553730a/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.10 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"1239fa45-f914-4922-ac4e-c0753553730a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1239fa45-f914-4922-ac4e-c0753553730a?source=api-prod","cve":"CVE-2026-42690","affectedVersions":"<=4.4.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/15fb0a26-e415-4ccb-b83d-d8f7b36bce66/learnpress","title":"LearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-07 15:19:06","sources":[{"name":"Wordfence","remoteId":"15fb0a26-e415-4ccb-b83d-d8f7b36bce66"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/15fb0a26-e415-4ccb-b83d-d8f7b36bce66?source=api-prod","cve":"CVE-2026-4333","affectedVersions":"<=4.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d79432d-7977-4279-ac69-8e9db682800e/learnpress","title":"LearnPress <= 3.2.6.7 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d79432d-7977-4279-ac69-8e9db682800e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d79432d-7977-4279-ac69-8e9db682800e?source=api-prod","cve":"CVE-2020-6010","affectedVersions":"<=3.2.6.7","severity":"high"},{"advisoryId":"WPSECADV/WF/1f35f646-1bd6-4785-bdc2-c815644b2b2d/learnpress","title":"LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 19:10:55","sources":[{"name":"Wordfence","remoteId":"1f35f646-1bd6-4785-bdc2-c815644b2b2d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f35f646-1bd6-4785-bdc2-c815644b2b2d?source=api-prod","cve":"CVE-2026-93882","affectedVersions":"<=4.4.8","severity":"high"},{"advisoryId":"WPSECADV/WF/21291ed7-cdc0-4698-9ec4-8417160845ed/learnpress","title":"LearnPress <= 4.2.5.7 - Command Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"21291ed7-cdc0-4698-9ec4-8417160845ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21291ed7-cdc0-4698-9ec4-8417160845ed?source=api-prod","cve":"CVE-2023-6634","affectedVersions":"<=4.2.5.7","severity":"high"},{"advisoryId":"WPSECADV/WF/2158052d-aff0-4492-94a4-a0ffe3dd013c/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 14:49:00","sources":[{"name":"Wordfence","remoteId":"2158052d-aff0-4492-94a4-a0ffe3dd013c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2158052d-aff0-4492-94a4-a0ffe3dd013c?source=api-prod","cve":"CVE-2026-39717","affectedVersions":"<=4.4.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/215d5d9e-dabb-462d-8c51-952f8c497b78/learnpress","title":"LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"215d5d9e-dabb-462d-8c51-952f8c497b78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/215d5d9e-dabb-462d-8c51-952f8c497b78?source=api-prod","cve":"CVE-2023-6223","affectedVersions":"<=4.2.5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d64e1c6-1e25-4438-974d-b7da0979cc40/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 19:40:23","sources":[{"name":"Wordfence","remoteId":"2d64e1c6-1e25-4438-974d-b7da0979cc40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d64e1c6-1e25-4438-974d-b7da0979cc40?source=api-prod","cve":"CVE-2024-4434","affectedVersions":"<=4.2.6.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/2e78bcfd-9764-49ae-9cac-cbc5419a0aa5/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.6 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2e78bcfd-9764-49ae-9cac-cbc5419a0aa5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2e78bcfd-9764-49ae-9cac-cbc5419a0aa5?source=api-prod","cve":"CVE-2026-48865","affectedVersions":"<=4.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2f8b8bfe-8d73-4289-b212-7baf7bceaaf6/learnpress","title":"LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 13:28:13","sources":[{"name":"Wordfence","remoteId":"2f8b8bfe-8d73-4289-b212-7baf7bceaaf6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f8b8bfe-8d73-4289-b212-7baf7bceaaf6?source=api-prod","cve":"CVE-2026-75982","affectedVersions":"<=4.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/342a4482-f5d3-4cc9-a998-e3abac7142cf/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"342a4482-f5d3-4cc9-a998-e3abac7142cf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/342a4482-f5d3-4cc9-a998-e3abac7142cf?source=api-prod","cve":"CVE-2024-2115","affectedVersions":"<=4.0.0","severity":"high"},{"advisoryId":"WPSECADV/WF/389277fd-e47e-42df-9305-61ceedbcfb29/learnpress","title":"LearnPress <= 4.2.3 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"389277fd-e47e-42df-9305-61ceedbcfb29"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/389277fd-e47e-42df-9305-61ceedbcfb29?source=api-prod","affectedVersions":"<4.2.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e28e008-0ec1-4262-9ac0-6170cf8b8bdf/learnpress","title":"LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 14:33:32","sources":[{"name":"Wordfence","remoteId":"3e28e008-0ec1-4262-9ac0-6170cf8b8bdf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e28e008-0ec1-4262-9ac0-6170cf8b8bdf?source=api-prod","cve":"CVE-2026-104736","affectedVersions":"<=4.4.10","severity":"critical"},{"advisoryId":"WPSECADV/WF/4122a963-b8e2-448a-b268-3192613fa3df/learnpress","title":"LearnPress <= 4.1.3 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"4122a963-b8e2-448a-b268-3192613fa3df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4122a963-b8e2-448a-b268-3192613fa3df?source=api-prod","cve":"CVE-2021-24951","affectedVersions":"<4.1.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/4489d26b-dcdc-475c-b1e1-3626cc75ae75/learnpress","title":"LearnPress <= 4.1.3 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"4489d26b-dcdc-475c-b1e1-3626cc75ae75"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4489d26b-dcdc-475c-b1e1-3626cc75ae75?source=api-prod","cve":"CVE-2021-24702","affectedVersions":"<=4.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/46217022-f16a-46c9-abca-680b7e35948c/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 10:11:40","sources":[{"name":"Wordfence","remoteId":"46217022-f16a-46c9-abca-680b7e35948c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/46217022-f16a-46c9-abca-680b7e35948c?source=api-prod","cve":"CVE-2026-104670","affectedVersions":"<=4.4.9","severity":"high"},{"advisoryId":"WPSECADV/WF/46693edf-bcc6-4af8-9f26-5ede865f4694/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 21:13:13","sources":[{"name":"Wordfence","remoteId":"46693edf-bcc6-4af8-9f26-5ede865f4694"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/46693edf-bcc6-4af8-9f26-5ede865f4694?source=api-prod","cve":"CVE-2024-4277","affectedVersions":"<=4.2.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/4ac1ddf0-9164-45a8-b1dc-e684b1b4b447/learnpress","title":"LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 14:28:58","sources":[{"name":"Wordfence","remoteId":"4ac1ddf0-9164-45a8-b1dc-e684b1b4b447"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ac1ddf0-9164-45a8-b1dc-e684b1b4b447?source=api-prod","cve":"CVE-2026-109208","affectedVersions":"<=4.4.10","severity":"high"},{"advisoryId":"WPSECADV/WF/520018db-d33b-4f2c-aaa5-611de792e11f/learnpress","title":"LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-11 13:32:56","sources":[{"name":"Wordfence","remoteId":"520018db-d33b-4f2c-aaa5-611de792e11f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/520018db-d33b-4f2c-aaa5-611de792e11f?source=api-prod","cve":"CVE-2026-3226","affectedVersions":"<=4.3.2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/5200ed9c-83dd-4f07-804c-2519932e5546/learnpress","title":"LearnPress <= 4.1.4.1 - Arbitrary Image Renaming\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"5200ed9c-83dd-4f07-804c-2519932e5546"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5200ed9c-83dd-4f07-804c-2519932e5546?source=api-prod","cve":"CVE-2022-0377","affectedVersions":"<=4.1.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/564ec4a6-20d3-4b46-8637-fc1de586e19a/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 15:21:13","sources":[{"name":"Wordfence","remoteId":"564ec4a6-20d3-4b46-8637-fc1de586e19a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/564ec4a6-20d3-4b46-8637-fc1de586e19a?source=api-prod","cve":"CVE-2026-7648","affectedVersions":"<=4.3.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/5c578284-006a-4bb5-a00b-295c67915f5f/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.10 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 12:21:00","sources":[{"name":"Wordfence","remoteId":"5c578284-006a-4bb5-a00b-295c67915f5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5c578284-006a-4bb5-a00b-295c67915f5f?source=api-prod","cve":"CVE-2026-110363","affectedVersions":"<=4.4.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d652b50-9c9c-4418-bd6b-ae862a1c8786/learnpress","title":"LearnPress <= 4.1.3.1 - Stored Cross-Site Scripting via $custom_profile\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-18 17:16:00","sources":[{"name":"Wordfence","remoteId":"5d652b50-9c9c-4418-bd6b-ae862a1c8786"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d652b50-9c9c-4418-bd6b-ae862a1c8786?source=api-prod","cve":"CVE-2021-39348","affectedVersions":"<=4.1.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/67709117-8912-4c09-afcb-0c07345d00e0/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-24 19:05:51","sources":[{"name":"Wordfence","remoteId":"67709117-8912-4c09-afcb-0c07345d00e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/67709117-8912-4c09-afcb-0c07345d00e0?source=api-prod","cve":"CVE-2024-13599","affectedVersions":"<=4.2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/68991289-acfa-4ab9-9852-755e5f1eda33/learnpress","title":"LearnPress <= 4.2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"68991289-acfa-4ab9-9852-755e5f1eda33"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68991289-acfa-4ab9-9852-755e5f1eda33?source=api-prod","cve":"CVE-2024-10010","affectedVersions":"<=4.2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/69bbe342-4969-4f82-aacb-7fd7bf65a75c/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"69bbe342-4969-4f82-aacb-7fd7bf65a75c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69bbe342-4969-4f82-aacb-7fd7bf65a75c?source=api-prod","cve":"CVE-2024-13128","affectedVersions":"<=4.2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/6a639d27-8704-4841-b2b5-6afbf342a0ff/learnpress","title":"LearnPress <= 3.2.6.8 - Authenticated Page Creation and Status Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"6a639d27-8704-4841-b2b5-6afbf342a0ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6a639d27-8704-4841-b2b5-6afbf342a0ff?source=api-prod","cve":"CVE-2020-11510","affectedVersions":"<=3.2.6.8","severity":"high"},{"advisoryId":"WPSECADV/WF/6ab578cd-3a0b-43d3-aaa7-0a01f431a4e2/learnpress","title":"LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"6ab578cd-3a0b-43d3-aaa7-0a01f431a4e2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ab578cd-3a0b-43d3-aaa7-0a01f431a4e2?source=api-prod","cve":"CVE-2023-6567","affectedVersions":"<=4.2.5.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/6b5e8cfd-989e-4a64-abb0-9daa22df46a4/learnpress","title":"LearnPress <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 16:07:05","sources":[{"name":"Wordfence","remoteId":"6b5e8cfd-989e-4a64-abb0-9daa22df46a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b5e8cfd-989e-4a64-abb0-9daa22df46a4?source=api-prod","cve":"CVE-2026-11988","affectedVersions":"<=4.3.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6d3aff16-73f0-4c1a-9838-6fd6ec69a39f/learnpress","title":"LearnPress <= 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"6d3aff16-73f0-4c1a-9838-6fd6ec69a39f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d3aff16-73f0-4c1a-9838-6fd6ec69a39f?source=api-prod","cve":"CVE-2026-86445","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6fb00ce4-aa82-4479-b7f6-79e7bde098c1/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-19 14:52:42","sources":[{"name":"Wordfence","remoteId":"6fb00ce4-aa82-4479-b7f6-79e7bde098c1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6fb00ce4-aa82-4479-b7f6-79e7bde098c1?source=api-prod","cve":"CVE-2025-14798","affectedVersions":"<=4.3.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/782e30a7-6813-47b4-b447-d5f03dcb9dc4/learnpress","title":"LearnPress <= 4.1.5 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"782e30a7-6813-47b4-b447-d5f03dcb9dc4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/782e30a7-6813-47b4-b447-d5f03dcb9dc4?source=api-prod","cve":"CVE-2022-0271","affectedVersions":"<4.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7bd43980-9193-4a63-adba-720dd1b11699/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"7bd43980-9193-4a63-adba-720dd1b11699"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7bd43980-9193-4a63-adba-720dd1b11699?source=api-prod","cve":"CVE-2024-11868","affectedVersions":"<=4.2.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/7c5248cc-6676-46cb-846b-a2c246425a54/learnpress","title":"LearnPress <= 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"7c5248cc-6676-46cb-846b-a2c246425a54"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7c5248cc-6676-46cb-846b-a2c246425a54?source=api-prod","cve":"CVE-2026-86447","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7f96a16e-0ae5-421e-b3d3-7299a5f99e1d/learnpress","title":"LearnPress <= 4.4.3 - Authenticated (Instructor+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"7f96a16e-0ae5-421e-b3d3-7299a5f99e1d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f96a16e-0ae5-421e-b3d3-7299a5f99e1d?source=api-prod","cve":"CVE-2026-12971","affectedVersions":"<=4.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/81fd3ac1-91af-4cfa-ac4e-712beb4236c0/learnpress","title":"LearnPress <= 4.2.5.3 - Reflected Cross-Site Scripting via add_internal_scripts_to_head\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"81fd3ac1-91af-4cfa-ac4e-712beb4236c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81fd3ac1-91af-4cfa-ac4e-712beb4236c0?source=api-prod","cve":"CVE-2023-5558","affectedVersions":"<4.2.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/822b5a6b-0be6-4511-bf5d-c32574f27865/learnpress","title":"LearnPress <= 3.2.6.6 - Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"822b5a6b-0be6-4511-bf5d-c32574f27865"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/822b5a6b-0be6-4511-bf5d-c32574f27865?source=api-prod","cve":"CVE-2020-7916","affectedVersions":"<=3.2.6.6","severity":"high"},{"advisoryId":"WPSECADV/WF/884c4508-1ee1-4384-9fc2-29e2c9042426/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-06 18:42:00","sources":[{"name":"Wordfence","remoteId":"884c4508-1ee1-4384-9fc2-29e2c9042426"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/884c4508-1ee1-4384-9fc2-29e2c9042426?source=api-prod","cve":"CVE-2025-14802","affectedVersions":"<=4.3.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d2a1774-1deb-42ac-bae5-7d33d39023c0/learnpress","title":"LearnPress <= 4.4.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d2a1774-1deb-42ac-bae5-7d33d39023c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d2a1774-1deb-42ac-bae5-7d33d39023c0?source=api-prod","cve":"CVE-2026-12970","affectedVersions":"<=4.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ea002da-bf37-4c6d-a46e-4f0e7f8968ad/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ea002da-bf37-4c6d-a46e-4f0e7f8968ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea002da-bf37-4c6d-a46e-4f0e7f8968ad?source=api-prod","cve":"CVE-2024-3560","affectedVersions":"<=4.2.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/91f13d74-0ad9-4790-a534-e8ff1655f06f/learnpress","title":"LearnPress <= 3.2.6.8 - Privilege Escalation via accept-to-be-teacher action parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"91f13d74-0ad9-4790-a534-e8ff1655f06f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91f13d74-0ad9-4790-a534-e8ff1655f06f?source=api-prod","cve":"CVE-2020-11511","affectedVersions":"<=3.2.6.8","severity":"high"},{"advisoryId":"WPSECADV/WF/95ae7cb4-3434-4c75-a803-81ae96ba5891/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.4 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"95ae7cb4-3434-4c75-a803-81ae96ba5891"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95ae7cb4-3434-4c75-a803-81ae96ba5891?source=api-prod","cve":"CVE-2026-12976","affectedVersions":"<4.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d453688-0bd4-4c4f-a422-8e4d67361c9a/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 09:55:00","sources":[{"name":"Wordfence","remoteId":"9d453688-0bd4-4c4f-a422-8e4d67361c9a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d453688-0bd4-4c4f-a422-8e4d67361c9a?source=api-prod","cve":"CVE-2026-104403","affectedVersions":"<=4.4.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f662888-c388-4191-bda9-b8a22d63cb3f/learnpress","title":"LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f662888-c388-4191-bda9-b8a22d63cb3f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f662888-c388-4191-bda9-b8a22d63cb3f?source=api-prod","cve":"CVE-2026-12230","affectedVersions":"<=4.3.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f8b9b63-e858-44f1-bbb6-b2011bd08691/learnpress","title":"LearnPress <= 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f8b9b63-e858-44f1-bbb6-b2011bd08691"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f8b9b63-e858-44f1-bbb6-b2011bd08691?source=api-prod","cve":"CVE-2026-86449","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f9e5212-caed-46db-bbf2-81c4df88439f/learnpress","title":"LearnPress – WordPress LMS Plugin <= 3.2.7.2 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f9e5212-caed-46db-bbf2-81c4df88439f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f9e5212-caed-46db-bbf2-81c4df88439f?source=api-prod","affectedVersions":"<=3.2.7.2","severity":"high"},{"advisoryId":"WPSECADV/WF/a1702bdd-1409-42f7-b7b8-cfd44505ecd6/learnpress","title":"LearnPress <= 4.2.7.1 - Authenticated (Subscriber+) Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1702bdd-1409-42f7-b7b8-cfd44505ecd6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1702bdd-1409-42f7-b7b8-cfd44505ecd6?source=api-prod","cve":"CVE-2025-24740","affectedVersions":"<=4.2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a32a6ea3-4473-4075-b660-9bba083ae0bf/learnpress","title":"LearnPress <= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-05 14:23:22","sources":[{"name":"Wordfence","remoteId":"a32a6ea3-4473-4075-b660-9bba083ae0bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a32a6ea3-4473-4075-b660-9bba083ae0bf?source=api-prod","cve":"CVE-2026-8502","affectedVersions":"<=4.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/a903c260-5872-4c2a-ac77-037985880c24/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.11 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 16:44:00","sources":[{"name":"Wordfence","remoteId":"a903c260-5872-4c2a-ac77-037985880c24"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a903c260-5872-4c2a-ac77-037985880c24?source=api-prod","cve":"CVE-2026-115598","affectedVersions":"<=4.4.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/abb4b617-884b-4e72-812f-5f23a0976ab6/learnpress","title":"LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"abb4b617-884b-4e72-812f-5f23a0976ab6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/abb4b617-884b-4e72-812f-5f23a0976ab6?source=api-prod","cve":"CVE-2024-1463","affectedVersions":"<=4.2.6.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae363511-8a1f-476a-9851-61f7763428c2/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-05 19:55:08","sources":[{"name":"Wordfence","remoteId":"ae363511-8a1f-476a-9851-61f7763428c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae363511-8a1f-476a-9851-61f7763428c2?source=api-prod","cve":"CVE-2025-13964","affectedVersions":"<=4.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae66f460-ca84-49fb-9ef0-46bcca77996b/learnpress","title":"LearnPress <= 4.2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae66f460-ca84-49fb-9ef0-46bcca77996b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae66f460-ca84-49fb-9ef0-46bcca77996b?source=api-prod","cve":"CVE-2024-9881","affectedVersions":"<=4.2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b011448b-0598-4b9a-b558-d7be13802ebf/learnpress","title":"LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 14:37:50","sources":[{"name":"Wordfence","remoteId":"b011448b-0598-4b9a-b558-d7be13802ebf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b011448b-0598-4b9a-b558-d7be13802ebf?source=api-prod","cve":"CVE-2026-92538","affectedVersions":"<=4.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/b1282482-3b41-423a-bff5-a82471fafc23/learnpress","title":"LearnPress 4.4.3 - 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"b1282482-3b41-423a-bff5-a82471fafc23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b1282482-3b41-423a-bff5-a82471fafc23?source=api-prod","cve":"CVE-2026-86446","affectedVersions":">=4.4.3,<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5892b38-b46b-4aab-89d4-ba70369b8526/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5892b38-b46b-4aab-89d4-ba70369b8526"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5892b38-b46b-4aab-89d4-ba70369b8526?source=api-prod","cve":"CVE-2026-82023","affectedVersions":"<=4.4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/ba16b100-6ee7-46ec-8868-4467a29048ad/learnpress","title":"LearnPress <= 3.0.12 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"ba16b100-6ee7-46ec-8868-4467a29048ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ba16b100-6ee7-46ec-8868-4467a29048ad?source=api-prod","cve":"CVE-2018-16175","affectedVersions":"<=3.0.12","severity":"high"},{"advisoryId":"WPSECADV/WF/bc91449a-7013-430d-bf7c-70175ea45114/learnpress","title":"LearnPress <= 3.2.7.2 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc91449a-7013-430d-bf7c-70175ea45114"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc91449a-7013-430d-bf7c-70175ea45114?source=api-prod","affectedVersions":"<3.2.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/c16b6063-03b0-42c3-8e45-36ad3fe2760b/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9.1 - Authenticated (Instructor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c16b6063-03b0-42c3-8e45-36ad3fe2760b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c16b6063-03b0-42c3-8e45-36ad3fe2760b?source=api-prod","cve":"CVE-2026-105397","affectedVersions":"<=4.4.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c2b2671e-0db7-4ba9-b574-a0122959e8fc/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2b2671e-0db7-4ba9-b574-a0122959e8fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2b2671e-0db7-4ba9-b574-a0122959e8fc?source=api-prod","cve":"CVE-2024-8529","affectedVersions":"<=4.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/c4b833c3-818d-4646-bd6d-8b3be13ea0f1/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-15 16:22:18","sources":[{"name":"Wordfence","remoteId":"c4b833c3-818d-4646-bd6d-8b3be13ea0f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4b833c3-818d-4646-bd6d-8b3be13ea0f1?source=api-prod","cve":"CVE-2025-13956","affectedVersions":"<=4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c9e1410f-10c9-4654-8b61-cfcdde696da7/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"c9e1410f-10c9-4654-8b61-cfcdde696da7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c9e1410f-10c9-4654-8b61-cfcdde696da7?source=api-prod","cve":"CVE-2024-4444","affectedVersions":"<=4.2.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/ca203777-84ea-47ab-bafc-f2cc8f778fcd/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.1.6.5 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"ca203777-84ea-47ab-bafc-f2cc8f778fcd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca203777-84ea-47ab-bafc-f2cc8f778fcd?source=api-prod","affectedVersions":"<=4.1.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/cccdc9ea-7511-4588-9459-61c38000724d/learnpress","title":"LearnPress <= 3.0.12 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"cccdc9ea-7511-4588-9459-61c38000724d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cccdc9ea-7511-4588-9459-61c38000724d?source=api-prod","cve":"CVE-2018-16174","affectedVersions":"<=3.0.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/d1894596-b430-41b3-9d28-12c7dea7ff9b/learnpress","title":"LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 14:31:20","sources":[{"name":"Wordfence","remoteId":"d1894596-b430-41b3-9d28-12c7dea7ff9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d1894596-b430-41b3-9d28-12c7dea7ff9b?source=api-prod","cve":"CVE-2026-107744","affectedVersions":"<=4.4.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2365e92-d70d-47fa-9abe-7cbdd6336f39/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-17 18:38:36","sources":[{"name":"Wordfence","remoteId":"d2365e92-d70d-47fa-9abe-7cbdd6336f39"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2365e92-d70d-47fa-9abe-7cbdd6336f39?source=api-prod","cve":"CVE-2025-11372","affectedVersions":"<=4.2.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/d7bee25e-7574-4d3d-ad58-9b30d99de525/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.1.6.7 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"d7bee25e-7574-4d3d-ad58-9b30d99de525"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7bee25e-7574-4d3d-ad58-9b30d99de525?source=api-prod","affectedVersions":"<=4.1.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/dfd960b6-34c9-48b0-9259-46da50754956/learnpress","title":"LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 15:51:28","sources":[{"name":"Wordfence","remoteId":"dfd960b6-34c9-48b0-9259-46da50754956"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dfd960b6-34c9-48b0-9259-46da50754956?source=api-prod","cve":"CVE-2026-77823","affectedVersions":"<=4.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/e1aff11b-0519-4712-b3ac-03e1612a69c1/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.5 - Authenticated (Instructor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1aff11b-0519-4712-b3ac-03e1612a69c1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1aff11b-0519-4712-b3ac-03e1612a69c1?source=api-prod","cve":"CVE-2026-82024","affectedVersions":"<=4.4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/e36cbd03-6e7b-4c5d-a5be-6980f312d918/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.11 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 16:43:00","sources":[{"name":"Wordfence","remoteId":"e36cbd03-6e7b-4c5d-a5be-6980f312d918"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e36cbd03-6e7b-4c5d-a5be-6980f312d918?source=api-prod","cve":"CVE-2026-115597","affectedVersions":"<=4.4.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/e495507d-7eac-4f38-ab6f-b8f0809b2be4/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"e495507d-7eac-4f38-ab6f-b8f0809b2be4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e495507d-7eac-4f38-ab6f-b8f0809b2be4?source=api-prod","cve":"CVE-2024-8522","affectedVersions":"<=4.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/e50a998e-b6f2-443a-83a9-299def2420c5/learnpress","title":"LearnPress <= 3.0.12 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e50a998e-b6f2-443a-83a9-299def2420c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e50a998e-b6f2-443a-83a9-299def2420c5?source=api-prod","cve":"CVE-2018-16173","affectedVersions":"<=3.0.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/e54e199a-410f-402d-bdd0-14685e2ca3fc/learnpress","title":"LearnPress <= 4.2.7.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"e54e199a-410f-402d-bdd0-14685e2ca3fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e54e199a-410f-402d-bdd0-14685e2ca3fc?source=api-prod","cve":"CVE-2025-22739","affectedVersions":"<=4.2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/e91e864a-20f6-48a2-ab9f-d20836207383/learnpress","title":"LearnPress <= 4.2.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"e91e864a-20f6-48a2-ab9f-d20836207383"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e91e864a-20f6-48a2-ab9f-d20836207383?source=api-prod","cve":"CVE-2023-36516","affectedVersions":"<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ea136a60-aa42-4577-88b6-a49c79098954/learnpress","title":"LearnPress <= 4.2.3 - Missing Authorization to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea136a60-aa42-4577-88b6-a49c79098954"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea136a60-aa42-4577-88b6-a49c79098954?source=api-prod","cve":"CVE-2023-36515","affectedVersions":"<=4.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/ec20d5c4-4c41-4ec9-8d0a-ec8f03634f7d/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec20d5c4-4c41-4ec9-8d0a-ec8f03634f7d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec20d5c4-4c41-4ec9-8d0a-ec8f03634f7d?source=api-prod","cve":"CVE-2024-4397","affectedVersions":"<=4.2.6.5","severity":"high"},{"advisoryId":"WPSECADV/WF/ed8408b0-b14c-4f01-abdd-e7019dd985b4/learnpress","title":"LearnPress <= 4.2.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed8408b0-b14c-4f01-abdd-e7019dd985b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed8408b0-b14c-4f01-abdd-e7019dd985b4?source=api-prod","cve":"CVE-2025-67536","affectedVersions":"<=4.2.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee3bbf20-43fd-4977-b0ba-b81e7a3810d0/learnpress","title":"LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-16 15:14:19","sources":[{"name":"Wordfence","remoteId":"ee3bbf20-43fd-4977-b0ba-b81e7a3810d0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee3bbf20-43fd-4977-b0ba-b81e7a3810d0?source=api-prod","cve":"CVE-2026-13765","affectedVersions":"<=4.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/ef089712-f717-4023-a0e4-d7924c904aa3/learnpress","title":"LearnPress <= 4.4.6 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"ef089712-f717-4023-a0e4-d7924c904aa3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ef089712-f717-4023-a0e4-d7924c904aa3?source=api-prod","cve":"CVE-2026-86444","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f29b3a37-436d-4d03-8818-d5267b23067b/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-15 02:25:53","sources":[{"name":"Wordfence","remoteId":"f29b3a37-436d-4d03-8818-d5267b23067b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f29b3a37-436d-4d03-8818-d5267b23067b?source=api-prod","cve":"CVE-2025-14387","affectedVersions":"<=4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f46c8075-3946-406c-b4c9-ae44617207f1/learnpress","title":"LearnPress <= 4.2.9.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"f46c8075-3946-406c-b4c9-ae44617207f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f46c8075-3946-406c-b4c9-ae44617207f1?source=api-prod","cve":"CVE-2025-66054","affectedVersions":"<=4.2.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fa7e74ee-fd66-41e2-babd-06bdfb32d013/learnpress","title":"LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"fa7e74ee-fd66-41e2-babd-06bdfb32d013"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fa7e74ee-fd66-41e2-babd-06bdfb32d013?source=api-prod","cve":"CVE-2022-3360","affectedVersions":"<=4.1.7.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/fc4afb78-fca6-4cc2-8e64-4785d93055e6/learnpress","title":"LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-23 09:53:24","sources":[{"name":"Wordfence","remoteId":"fc4afb78-fca6-4cc2-8e64-4785d93055e6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fc4afb78-fca6-4cc2-8e64-4785d93055e6?source=api-prod","cve":"CVE-2026-3225","affectedVersions":"<=4.3.2.8","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/021bd566-1663-46ba-a616-ab554b691cbb/learnpress","title":"LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-13 12:59:29","sources":[{"name":"Wordfence","remoteId":"021bd566-1663-46ba-a616-ab554b691cbb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/021bd566-1663-46ba-a616-ab554b691cbb?source=api-prod","cve":"CVE-2026-4365","affectedVersions":"<=4.3.2.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/043db2aa-368a-4925-81e8-0ad87a1efa16/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.10 - Authenticated (Custom+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"043db2aa-368a-4925-81e8-0ad87a1efa16"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/043db2aa-368a-4925-81e8-0ad87a1efa16?source=api-prod","cve":"CVE-2026-113353","affectedVersions":"<4.4.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/09c8db69-60fa-4087-9096-5d34ce44f616/learnpress","title":"LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 19:00:11","sources":[{"name":"Wordfence","remoteId":"09c8db69-60fa-4087-9096-5d34ce44f616"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09c8db69-60fa-4087-9096-5d34ce44f616?source=api-prod","cve":"CVE-2026-12732","affectedVersions":"<=4.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0a79f8f6-a708-4db1-806d-1f782bbcfd16/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a79f8f6-a708-4db1-806d-1f782bbcfd16"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a79f8f6-a708-4db1-806d-1f782bbcfd16?source=api-prod","cve":"CVE-2024-13127","affectedVersions":"<=4.2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/0a8453c4-effd-48fc-99c8-fc1f90cd23ea/learnpress","title":"LearnPress <= 4.3.6 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a8453c4-effd-48fc-99c8-fc1f90cd23ea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a8453c4-effd-48fc-99c8-fc1f90cd23ea?source=api-prod","cve":"CVE-2026-8383","affectedVersions":"<=4.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ba153e1-b46c-404d-81ec-21bc7dfa3d8a/learnpress","title":"LearnPress <= 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ba153e1-b46c-404d-81ec-21bc7dfa3d8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ba153e1-b46c-404d-81ec-21bc7dfa3d8a?source=api-prod","cve":"CVE-2026-86448","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c410d91-08cc-496d-9c8e-c57f107399da/learnpress","title":"LearnPress <= 4.2.6.3 - Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c410d91-08cc-496d-9c8e-c57f107399da"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c410d91-08cc-496d-9c8e-c57f107399da?source=api-prod","cve":"CVE-2024-1289","affectedVersions":"<=4.2.6.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c9856db-3779-4649-9a48-1c7b6d019816/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-20 16:53:10","sources":[{"name":"Wordfence","remoteId":"0c9856db-3779-4649-9a48-1c7b6d019816"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c9856db-3779-4649-9a48-1c7b6d019816?source=api-prod","cve":"CVE-2025-11368","affectedVersions":"<=4.2.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/10b08a05-3561-4d05-985b-6a2339a547a7/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-21 16:40:45","sources":[{"name":"Wordfence","remoteId":"10b08a05-3561-4d05-985b-6a2339a547a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10b08a05-3561-4d05-985b-6a2339a547a7?source=api-prod","cve":"CVE-2024-4971","affectedVersions":"<=4.2.6.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/122b75d2-e882-45b9-baf1-acf847f8d60a/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-04 14:20:10","sources":[{"name":"Wordfence","remoteId":"122b75d2-e882-45b9-baf1-acf847f8d60a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/122b75d2-e882-45b9-baf1-acf847f8d60a?source=api-prod","cve":"CVE-2024-5483","affectedVersions":"<=4.2.6.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/1239fa45-f914-4922-ac4e-c0753553730a/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.10 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"1239fa45-f914-4922-ac4e-c0753553730a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1239fa45-f914-4922-ac4e-c0753553730a?source=api-prod","cve":"CVE-2026-42690","affectedVersions":"<=4.4.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/15fb0a26-e415-4ccb-b83d-d8f7b36bce66/learnpress","title":"LearnPress <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'skin' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-07 15:19:06","sources":[{"name":"Wordfence","remoteId":"15fb0a26-e415-4ccb-b83d-d8f7b36bce66"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/15fb0a26-e415-4ccb-b83d-d8f7b36bce66?source=api-prod","cve":"CVE-2026-4333","affectedVersions":"<=4.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d79432d-7977-4279-ac69-8e9db682800e/learnpress","title":"LearnPress <= 3.2.6.7 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d79432d-7977-4279-ac69-8e9db682800e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d79432d-7977-4279-ac69-8e9db682800e?source=api-prod","cve":"CVE-2020-6010","affectedVersions":"<=3.2.6.7","severity":"high"},{"advisoryId":"WPSECADV/WF/1f35f646-1bd6-4785-bdc2-c815644b2b2d/learnpress","title":"LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 19:10:55","sources":[{"name":"Wordfence","remoteId":"1f35f646-1bd6-4785-bdc2-c815644b2b2d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f35f646-1bd6-4785-bdc2-c815644b2b2d?source=api-prod","cve":"CVE-2026-93882","affectedVersions":"<=4.4.8","severity":"high"},{"advisoryId":"WPSECADV/WF/21291ed7-cdc0-4698-9ec4-8417160845ed/learnpress","title":"LearnPress <= 4.2.5.7 - Command Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"21291ed7-cdc0-4698-9ec4-8417160845ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21291ed7-cdc0-4698-9ec4-8417160845ed?source=api-prod","cve":"CVE-2023-6634","affectedVersions":"<=4.2.5.7","severity":"high"},{"advisoryId":"WPSECADV/WF/2158052d-aff0-4492-94a4-a0ffe3dd013c/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 14:49:00","sources":[{"name":"Wordfence","remoteId":"2158052d-aff0-4492-94a4-a0ffe3dd013c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2158052d-aff0-4492-94a4-a0ffe3dd013c?source=api-prod","cve":"CVE-2026-39717","affectedVersions":"<=4.4.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/215d5d9e-dabb-462d-8c51-952f8c497b78/learnpress","title":"LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"215d5d9e-dabb-462d-8c51-952f8c497b78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/215d5d9e-dabb-462d-8c51-952f8c497b78?source=api-prod","cve":"CVE-2023-6223","affectedVersions":"<=4.2.5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d64e1c6-1e25-4438-974d-b7da0979cc40/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 19:40:23","sources":[{"name":"Wordfence","remoteId":"2d64e1c6-1e25-4438-974d-b7da0979cc40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d64e1c6-1e25-4438-974d-b7da0979cc40?source=api-prod","cve":"CVE-2024-4434","affectedVersions":"<=4.2.6.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/2e78bcfd-9764-49ae-9cac-cbc5419a0aa5/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.6 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2e78bcfd-9764-49ae-9cac-cbc5419a0aa5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2e78bcfd-9764-49ae-9cac-cbc5419a0aa5?source=api-prod","cve":"CVE-2026-48865","affectedVersions":"<=4.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2f8b8bfe-8d73-4289-b212-7baf7bceaaf6/learnpress","title":"LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 13:28:13","sources":[{"name":"Wordfence","remoteId":"2f8b8bfe-8d73-4289-b212-7baf7bceaaf6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f8b8bfe-8d73-4289-b212-7baf7bceaaf6?source=api-prod","cve":"CVE-2026-75982","affectedVersions":"<=4.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/342a4482-f5d3-4cc9-a998-e3abac7142cf/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"342a4482-f5d3-4cc9-a998-e3abac7142cf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/342a4482-f5d3-4cc9-a998-e3abac7142cf?source=api-prod","cve":"CVE-2024-2115","affectedVersions":"<=4.0.0","severity":"high"},{"advisoryId":"WPSECADV/WF/389277fd-e47e-42df-9305-61ceedbcfb29/learnpress","title":"LearnPress <= 4.2.3 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"389277fd-e47e-42df-9305-61ceedbcfb29"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/389277fd-e47e-42df-9305-61ceedbcfb29?source=api-prod","affectedVersions":"<4.2.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e28e008-0ec1-4262-9ac0-6170cf8b8bdf/learnpress","title":"LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 14:33:32","sources":[{"name":"Wordfence","remoteId":"3e28e008-0ec1-4262-9ac0-6170cf8b8bdf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e28e008-0ec1-4262-9ac0-6170cf8b8bdf?source=api-prod","cve":"CVE-2026-104736","affectedVersions":"<=4.4.10","severity":"critical"},{"advisoryId":"WPSECADV/WF/4122a963-b8e2-448a-b268-3192613fa3df/learnpress","title":"LearnPress <= 4.1.3 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"4122a963-b8e2-448a-b268-3192613fa3df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4122a963-b8e2-448a-b268-3192613fa3df?source=api-prod","cve":"CVE-2021-24951","affectedVersions":"<4.1.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/4489d26b-dcdc-475c-b1e1-3626cc75ae75/learnpress","title":"LearnPress <= 4.1.3 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"4489d26b-dcdc-475c-b1e1-3626cc75ae75"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4489d26b-dcdc-475c-b1e1-3626cc75ae75?source=api-prod","cve":"CVE-2021-24702","affectedVersions":"<=4.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/46217022-f16a-46c9-abca-680b7e35948c/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 10:11:40","sources":[{"name":"Wordfence","remoteId":"46217022-f16a-46c9-abca-680b7e35948c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/46217022-f16a-46c9-abca-680b7e35948c?source=api-prod","cve":"CVE-2026-104670","affectedVersions":"<=4.4.9","severity":"high"},{"advisoryId":"WPSECADV/WF/46693edf-bcc6-4af8-9f26-5ede865f4694/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 21:13:13","sources":[{"name":"Wordfence","remoteId":"46693edf-bcc6-4af8-9f26-5ede865f4694"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/46693edf-bcc6-4af8-9f26-5ede865f4694?source=api-prod","cve":"CVE-2024-4277","affectedVersions":"<=4.2.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/4ac1ddf0-9164-45a8-b1dc-e684b1b4b447/learnpress","title":"LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 14:28:58","sources":[{"name":"Wordfence","remoteId":"4ac1ddf0-9164-45a8-b1dc-e684b1b4b447"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ac1ddf0-9164-45a8-b1dc-e684b1b4b447?source=api-prod","cve":"CVE-2026-109208","affectedVersions":"<=4.4.10","severity":"high"},{"advisoryId":"WPSECADV/WF/520018db-d33b-4f2c-aaa5-611de792e11f/learnpress","title":"LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-11 13:32:56","sources":[{"name":"Wordfence","remoteId":"520018db-d33b-4f2c-aaa5-611de792e11f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/520018db-d33b-4f2c-aaa5-611de792e11f?source=api-prod","cve":"CVE-2026-3226","affectedVersions":"<=4.3.2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/5200ed9c-83dd-4f07-804c-2519932e5546/learnpress","title":"LearnPress <= 4.1.4.1 - Arbitrary Image Renaming\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-01-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"5200ed9c-83dd-4f07-804c-2519932e5546"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5200ed9c-83dd-4f07-804c-2519932e5546?source=api-prod","cve":"CVE-2022-0377","affectedVersions":"<=4.1.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/564ec4a6-20d3-4b46-8637-fc1de586e19a/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.3.5 - Authenticated (Subscriber+) Payment Bypass to Free Course Enrollment via 'quantity' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 15:21:13","sources":[{"name":"Wordfence","remoteId":"564ec4a6-20d3-4b46-8637-fc1de586e19a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/564ec4a6-20d3-4b46-8637-fc1de586e19a?source=api-prod","cve":"CVE-2026-7648","affectedVersions":"<=4.3.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/5c578284-006a-4bb5-a00b-295c67915f5f/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.10 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 12:21:00","sources":[{"name":"Wordfence","remoteId":"5c578284-006a-4bb5-a00b-295c67915f5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5c578284-006a-4bb5-a00b-295c67915f5f?source=api-prod","cve":"CVE-2026-110363","affectedVersions":"<=4.4.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d652b50-9c9c-4418-bd6b-ae862a1c8786/learnpress","title":"LearnPress <= 4.1.3.1 - Stored Cross-Site Scripting via $custom_profile\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-18 17:16:00","sources":[{"name":"Wordfence","remoteId":"5d652b50-9c9c-4418-bd6b-ae862a1c8786"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d652b50-9c9c-4418-bd6b-ae862a1c8786?source=api-prod","cve":"CVE-2021-39348","affectedVersions":"<=4.1.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/67709117-8912-4c09-afcb-0c07345d00e0/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-24 19:05:51","sources":[{"name":"Wordfence","remoteId":"67709117-8912-4c09-afcb-0c07345d00e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/67709117-8912-4c09-afcb-0c07345d00e0?source=api-prod","cve":"CVE-2024-13599","affectedVersions":"<=4.2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/68991289-acfa-4ab9-9852-755e5f1eda33/learnpress","title":"LearnPress <= 4.2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"68991289-acfa-4ab9-9852-755e5f1eda33"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68991289-acfa-4ab9-9852-755e5f1eda33?source=api-prod","cve":"CVE-2024-10010","affectedVersions":"<=4.2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/69bbe342-4969-4f82-aacb-7fd7bf65a75c/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"69bbe342-4969-4f82-aacb-7fd7bf65a75c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69bbe342-4969-4f82-aacb-7fd7bf65a75c?source=api-prod","cve":"CVE-2024-13128","affectedVersions":"<=4.2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/6a639d27-8704-4841-b2b5-6afbf342a0ff/learnpress","title":"LearnPress <= 3.2.6.8 - Authenticated Page Creation and Status Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"6a639d27-8704-4841-b2b5-6afbf342a0ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6a639d27-8704-4841-b2b5-6afbf342a0ff?source=api-prod","cve":"CVE-2020-11510","affectedVersions":"<=3.2.6.8","severity":"high"},{"advisoryId":"WPSECADV/WF/6ab578cd-3a0b-43d3-aaa7-0a01f431a4e2/learnpress","title":"LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"6ab578cd-3a0b-43d3-aaa7-0a01f431a4e2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ab578cd-3a0b-43d3-aaa7-0a01f431a4e2?source=api-prod","cve":"CVE-2023-6567","affectedVersions":"<=4.2.5.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/6b5e8cfd-989e-4a64-abb0-9daa22df46a4/learnpress","title":"LearnPress <= 4.3.9.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'userId' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 16:07:05","sources":[{"name":"Wordfence","remoteId":"6b5e8cfd-989e-4a64-abb0-9daa22df46a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b5e8cfd-989e-4a64-abb0-9daa22df46a4?source=api-prod","cve":"CVE-2026-11988","affectedVersions":"<=4.3.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6d3aff16-73f0-4c1a-9838-6fd6ec69a39f/learnpress","title":"LearnPress <= 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"6d3aff16-73f0-4c1a-9838-6fd6ec69a39f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d3aff16-73f0-4c1a-9838-6fd6ec69a39f?source=api-prod","cve":"CVE-2026-86445","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6fb00ce4-aa82-4479-b7f6-79e7bde098c1/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-19 14:52:42","sources":[{"name":"Wordfence","remoteId":"6fb00ce4-aa82-4479-b7f6-79e7bde098c1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6fb00ce4-aa82-4479-b7f6-79e7bde098c1?source=api-prod","cve":"CVE-2025-14798","affectedVersions":"<=4.3.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/782e30a7-6813-47b4-b447-d5f03dcb9dc4/learnpress","title":"LearnPress <= 4.1.5 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"782e30a7-6813-47b4-b447-d5f03dcb9dc4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/782e30a7-6813-47b4-b447-d5f03dcb9dc4?source=api-prod","cve":"CVE-2022-0271","affectedVersions":"<4.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7bd43980-9193-4a63-adba-720dd1b11699/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"7bd43980-9193-4a63-adba-720dd1b11699"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7bd43980-9193-4a63-adba-720dd1b11699?source=api-prod","cve":"CVE-2024-11868","affectedVersions":"<=4.2.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/7c5248cc-6676-46cb-846b-a2c246425a54/learnpress","title":"LearnPress <= 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"7c5248cc-6676-46cb-846b-a2c246425a54"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7c5248cc-6676-46cb-846b-a2c246425a54?source=api-prod","cve":"CVE-2026-86447","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7f96a16e-0ae5-421e-b3d3-7299a5f99e1d/learnpress","title":"LearnPress <= 4.4.3 - Authenticated (Instructor+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"7f96a16e-0ae5-421e-b3d3-7299a5f99e1d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f96a16e-0ae5-421e-b3d3-7299a5f99e1d?source=api-prod","cve":"CVE-2026-12971","affectedVersions":"<=4.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/81fd3ac1-91af-4cfa-ac4e-712beb4236c0/learnpress","title":"LearnPress <= 4.2.5.3 - Reflected Cross-Site Scripting via add_internal_scripts_to_head\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"81fd3ac1-91af-4cfa-ac4e-712beb4236c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81fd3ac1-91af-4cfa-ac4e-712beb4236c0?source=api-prod","cve":"CVE-2023-5558","affectedVersions":"<4.2.5.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/822b5a6b-0be6-4511-bf5d-c32574f27865/learnpress","title":"LearnPress <= 3.2.6.6 - Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"822b5a6b-0be6-4511-bf5d-c32574f27865"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/822b5a6b-0be6-4511-bf5d-c32574f27865?source=api-prod","cve":"CVE-2020-7916","affectedVersions":"<=3.2.6.6","severity":"high"},{"advisoryId":"WPSECADV/WF/884c4508-1ee1-4384-9fc2-29e2c9042426/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-06 18:42:00","sources":[{"name":"Wordfence","remoteId":"884c4508-1ee1-4384-9fc2-29e2c9042426"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/884c4508-1ee1-4384-9fc2-29e2c9042426?source=api-prod","cve":"CVE-2025-14802","affectedVersions":"<=4.3.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d2a1774-1deb-42ac-bae5-7d33d39023c0/learnpress","title":"LearnPress <= 4.4.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d2a1774-1deb-42ac-bae5-7d33d39023c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d2a1774-1deb-42ac-bae5-7d33d39023c0?source=api-prod","cve":"CVE-2026-12970","affectedVersions":"<=4.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ea002da-bf37-4c6d-a46e-4f0e7f8968ad/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ea002da-bf37-4c6d-a46e-4f0e7f8968ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea002da-bf37-4c6d-a46e-4f0e7f8968ad?source=api-prod","cve":"CVE-2024-3560","affectedVersions":"<=4.2.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/91f13d74-0ad9-4790-a534-e8ff1655f06f/learnpress","title":"LearnPress <= 3.2.6.8 - Privilege Escalation via accept-to-be-teacher action parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"91f13d74-0ad9-4790-a534-e8ff1655f06f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91f13d74-0ad9-4790-a534-e8ff1655f06f?source=api-prod","cve":"CVE-2020-11511","affectedVersions":"<=3.2.6.8","severity":"high"},{"advisoryId":"WPSECADV/WF/95ae7cb4-3434-4c75-a803-81ae96ba5891/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.4 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"95ae7cb4-3434-4c75-a803-81ae96ba5891"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95ae7cb4-3434-4c75-a803-81ae96ba5891?source=api-prod","cve":"CVE-2026-12976","affectedVersions":"<4.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d453688-0bd4-4c4f-a422-8e4d67361c9a/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 09:55:00","sources":[{"name":"Wordfence","remoteId":"9d453688-0bd4-4c4f-a422-8e4d67361c9a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d453688-0bd4-4c4f-a422-8e4d67361c9a?source=api-prod","cve":"CVE-2026-104403","affectedVersions":"<=4.4.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f662888-c388-4191-bda9-b8a22d63cb3f/learnpress","title":"LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f662888-c388-4191-bda9-b8a22d63cb3f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f662888-c388-4191-bda9-b8a22d63cb3f?source=api-prod","cve":"CVE-2026-12230","affectedVersions":"<=4.3.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f8b9b63-e858-44f1-bbb6-b2011bd08691/learnpress","title":"LearnPress <= 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f8b9b63-e858-44f1-bbb6-b2011bd08691"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f8b9b63-e858-44f1-bbb6-b2011bd08691?source=api-prod","cve":"CVE-2026-86449","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f9e5212-caed-46db-bbf2-81c4df88439f/learnpress","title":"LearnPress – WordPress LMS Plugin <= 3.2.7.2 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-10-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f9e5212-caed-46db-bbf2-81c4df88439f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f9e5212-caed-46db-bbf2-81c4df88439f?source=api-prod","affectedVersions":"<=3.2.7.2","severity":"high"},{"advisoryId":"WPSECADV/WF/a1702bdd-1409-42f7-b7b8-cfd44505ecd6/learnpress","title":"LearnPress <= 4.2.7.1 - Authenticated (Subscriber+) Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1702bdd-1409-42f7-b7b8-cfd44505ecd6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1702bdd-1409-42f7-b7b8-cfd44505ecd6?source=api-prod","cve":"CVE-2025-24740","affectedVersions":"<=4.2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a32a6ea3-4473-4075-b660-9bba083ae0bf/learnpress","title":"LearnPress <= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-05 14:23:22","sources":[{"name":"Wordfence","remoteId":"a32a6ea3-4473-4075-b660-9bba083ae0bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a32a6ea3-4473-4075-b660-9bba083ae0bf?source=api-prod","cve":"CVE-2026-8502","affectedVersions":"<=4.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/a903c260-5872-4c2a-ac77-037985880c24/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.11 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 16:44:00","sources":[{"name":"Wordfence","remoteId":"a903c260-5872-4c2a-ac77-037985880c24"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a903c260-5872-4c2a-ac77-037985880c24?source=api-prod","cve":"CVE-2026-115598","affectedVersions":"<=4.4.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/abb4b617-884b-4e72-812f-5f23a0976ab6/learnpress","title":"LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"abb4b617-884b-4e72-812f-5f23a0976ab6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/abb4b617-884b-4e72-812f-5f23a0976ab6?source=api-prod","cve":"CVE-2024-1463","affectedVersions":"<=4.2.6.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae363511-8a1f-476a-9851-61f7763428c2/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-05 19:55:08","sources":[{"name":"Wordfence","remoteId":"ae363511-8a1f-476a-9851-61f7763428c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae363511-8a1f-476a-9851-61f7763428c2?source=api-prod","cve":"CVE-2025-13964","affectedVersions":"<=4.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae66f460-ca84-49fb-9ef0-46bcca77996b/learnpress","title":"LearnPress <= 4.2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae66f460-ca84-49fb-9ef0-46bcca77996b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae66f460-ca84-49fb-9ef0-46bcca77996b?source=api-prod","cve":"CVE-2024-9881","affectedVersions":"<=4.2.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b011448b-0598-4b9a-b558-d7be13802ebf/learnpress","title":"LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 14:37:50","sources":[{"name":"Wordfence","remoteId":"b011448b-0598-4b9a-b558-d7be13802ebf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b011448b-0598-4b9a-b558-d7be13802ebf?source=api-prod","cve":"CVE-2026-92538","affectedVersions":"<=4.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/b1282482-3b41-423a-bff5-a82471fafc23/learnpress","title":"LearnPress 4.4.3 - 4.4.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"b1282482-3b41-423a-bff5-a82471fafc23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b1282482-3b41-423a-bff5-a82471fafc23?source=api-prod","cve":"CVE-2026-86446","affectedVersions":">=4.4.3,<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5892b38-b46b-4aab-89d4-ba70369b8526/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5892b38-b46b-4aab-89d4-ba70369b8526"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5892b38-b46b-4aab-89d4-ba70369b8526?source=api-prod","cve":"CVE-2026-82023","affectedVersions":"<=4.4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/ba16b100-6ee7-46ec-8868-4467a29048ad/learnpress","title":"LearnPress <= 3.0.12 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"ba16b100-6ee7-46ec-8868-4467a29048ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ba16b100-6ee7-46ec-8868-4467a29048ad?source=api-prod","cve":"CVE-2018-16175","affectedVersions":"<=3.0.12","severity":"high"},{"advisoryId":"WPSECADV/WF/bc91449a-7013-430d-bf7c-70175ea45114/learnpress","title":"LearnPress <= 3.2.7.2 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc91449a-7013-430d-bf7c-70175ea45114"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc91449a-7013-430d-bf7c-70175ea45114?source=api-prod","affectedVersions":"<3.2.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/c16b6063-03b0-42c3-8e45-36ad3fe2760b/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9.1 - Authenticated (Instructor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c16b6063-03b0-42c3-8e45-36ad3fe2760b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c16b6063-03b0-42c3-8e45-36ad3fe2760b?source=api-prod","cve":"CVE-2026-105397","affectedVersions":"<=4.4.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c2b2671e-0db7-4ba9-b574-a0122959e8fc/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2b2671e-0db7-4ba9-b574-a0122959e8fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2b2671e-0db7-4ba9-b574-a0122959e8fc?source=api-prod","cve":"CVE-2024-8529","affectedVersions":"<=4.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/c4b833c3-818d-4646-bd6d-8b3be13ea0f1/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-15 16:22:18","sources":[{"name":"Wordfence","remoteId":"c4b833c3-818d-4646-bd6d-8b3be13ea0f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4b833c3-818d-4646-bd6d-8b3be13ea0f1?source=api-prod","cve":"CVE-2025-13956","affectedVersions":"<=4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c9e1410f-10c9-4654-8b61-cfcdde696da7/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"c9e1410f-10c9-4654-8b61-cfcdde696da7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c9e1410f-10c9-4654-8b61-cfcdde696da7?source=api-prod","cve":"CVE-2024-4444","affectedVersions":"<=4.2.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/ca203777-84ea-47ab-bafc-f2cc8f778fcd/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.1.6.5 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"ca203777-84ea-47ab-bafc-f2cc8f778fcd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca203777-84ea-47ab-bafc-f2cc8f778fcd?source=api-prod","affectedVersions":"<=4.1.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/cccdc9ea-7511-4588-9459-61c38000724d/learnpress","title":"LearnPress <= 3.0.12 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"cccdc9ea-7511-4588-9459-61c38000724d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cccdc9ea-7511-4588-9459-61c38000724d?source=api-prod","cve":"CVE-2018-16174","affectedVersions":"<=3.0.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/d1894596-b430-41b3-9d28-12c7dea7ff9b/learnpress","title":"LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 14:31:20","sources":[{"name":"Wordfence","remoteId":"d1894596-b430-41b3-9d28-12c7dea7ff9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d1894596-b430-41b3-9d28-12c7dea7ff9b?source=api-prod","cve":"CVE-2026-107744","affectedVersions":"<=4.4.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2365e92-d70d-47fa-9abe-7cbdd6336f39/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-17 18:38:36","sources":[{"name":"Wordfence","remoteId":"d2365e92-d70d-47fa-9abe-7cbdd6336f39"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2365e92-d70d-47fa-9abe-7cbdd6336f39?source=api-prod","cve":"CVE-2025-11372","affectedVersions":"<=4.2.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/d7bee25e-7574-4d3d-ad58-9b30d99de525/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.1.6.7 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"d7bee25e-7574-4d3d-ad58-9b30d99de525"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7bee25e-7574-4d3d-ad58-9b30d99de525?source=api-prod","affectedVersions":"<=4.1.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/dfd960b6-34c9-48b0-9259-46da50754956/learnpress","title":"LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 15:51:28","sources":[{"name":"Wordfence","remoteId":"dfd960b6-34c9-48b0-9259-46da50754956"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dfd960b6-34c9-48b0-9259-46da50754956?source=api-prod","cve":"CVE-2026-77823","affectedVersions":"<=4.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/e1aff11b-0519-4712-b3ac-03e1612a69c1/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.5 - Authenticated (Instructor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1aff11b-0519-4712-b3ac-03e1612a69c1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1aff11b-0519-4712-b3ac-03e1612a69c1?source=api-prod","cve":"CVE-2026-82024","affectedVersions":"<=4.4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/e36cbd03-6e7b-4c5d-a5be-6980f312d918/learnpress","title":"LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.11 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 16:43:00","sources":[{"name":"Wordfence","remoteId":"e36cbd03-6e7b-4c5d-a5be-6980f312d918"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e36cbd03-6e7b-4c5d-a5be-6980f312d918?source=api-prod","cve":"CVE-2026-115597","affectedVersions":"<=4.4.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/e495507d-7eac-4f38-ab6f-b8f0809b2be4/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"e495507d-7eac-4f38-ab6f-b8f0809b2be4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e495507d-7eac-4f38-ab6f-b8f0809b2be4?source=api-prod","cve":"CVE-2024-8522","affectedVersions":"<=4.2.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/e50a998e-b6f2-443a-83a9-299def2420c5/learnpress","title":"LearnPress <= 3.0.12 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e50a998e-b6f2-443a-83a9-299def2420c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e50a998e-b6f2-443a-83a9-299def2420c5?source=api-prod","cve":"CVE-2018-16173","affectedVersions":"<=3.0.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/e54e199a-410f-402d-bdd0-14685e2ca3fc/learnpress","title":"LearnPress <= 4.2.7.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"e54e199a-410f-402d-bdd0-14685e2ca3fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e54e199a-410f-402d-bdd0-14685e2ca3fc?source=api-prod","cve":"CVE-2025-22739","affectedVersions":"<=4.2.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/e91e864a-20f6-48a2-ab9f-d20836207383/learnpress","title":"LearnPress <= 4.2.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"e91e864a-20f6-48a2-ab9f-d20836207383"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e91e864a-20f6-48a2-ab9f-d20836207383?source=api-prod","cve":"CVE-2023-36516","affectedVersions":"<=4.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ea136a60-aa42-4577-88b6-a49c79098954/learnpress","title":"LearnPress <= 4.2.3 - Missing Authorization to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea136a60-aa42-4577-88b6-a49c79098954"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea136a60-aa42-4577-88b6-a49c79098954?source=api-prod","cve":"CVE-2023-36515","affectedVersions":"<=4.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/ec20d5c4-4c41-4ec9-8d0a-ec8f03634f7d/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec20d5c4-4c41-4ec9-8d0a-ec8f03634f7d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec20d5c4-4c41-4ec9-8d0a-ec8f03634f7d?source=api-prod","cve":"CVE-2024-4397","affectedVersions":"<=4.2.6.5","severity":"high"},{"advisoryId":"WPSECADV/WF/ed8408b0-b14c-4f01-abdd-e7019dd985b4/learnpress","title":"LearnPress <= 4.2.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed8408b0-b14c-4f01-abdd-e7019dd985b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed8408b0-b14c-4f01-abdd-e7019dd985b4?source=api-prod","cve":"CVE-2025-67536","affectedVersions":"<=4.2.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee3bbf20-43fd-4977-b0ba-b81e7a3810d0/learnpress","title":"LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-16 15:14:19","sources":[{"name":"Wordfence","remoteId":"ee3bbf20-43fd-4977-b0ba-b81e7a3810d0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee3bbf20-43fd-4977-b0ba-b81e7a3810d0?source=api-prod","cve":"CVE-2026-13765","affectedVersions":"<=4.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/ef089712-f717-4023-a0e4-d7924c904aa3/learnpress","title":"LearnPress <= 4.4.6 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"ef089712-f717-4023-a0e4-d7924c904aa3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ef089712-f717-4023-a0e4-d7924c904aa3?source=api-prod","cve":"CVE-2026-86444","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f29b3a37-436d-4d03-8818-d5267b23067b/learnpress","title":"LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-15 02:25:53","sources":[{"name":"Wordfence","remoteId":"f29b3a37-436d-4d03-8818-d5267b23067b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f29b3a37-436d-4d03-8818-d5267b23067b?source=api-prod","cve":"CVE-2025-14387","affectedVersions":"<=4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f46c8075-3946-406c-b4c9-ae44617207f1/learnpress","title":"LearnPress <= 4.2.9.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"f46c8075-3946-406c-b4c9-ae44617207f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f46c8075-3946-406c-b4c9-ae44617207f1?source=api-prod","cve":"CVE-2025-66054","affectedVersions":"<=4.2.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fa7e74ee-fd66-41e2-babd-06bdfb32d013/learnpress","title":"LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"fa7e74ee-fd66-41e2-babd-06bdfb32d013"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fa7e74ee-fd66-41e2-babd-06bdfb32d013?source=api-prod","cve":"CVE-2022-3360","affectedVersions":"<=4.1.7.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/fc4afb78-fca6-4cc2-8e64-4785d93055e6/learnpress","title":"LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-23 09:53:24","sources":[{"name":"Wordfence","remoteId":"fc4afb78-fca6-4cc2-8e64-4785d93055e6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fc4afb78-fca6-4cc2-8e64-4785d93055e6?source=api-prod","cve":"CVE-2026-3225","affectedVersions":"<=4.3.2.8","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6c65747465727072657373811c9dc5_gen.json b/internal/data/assets/plugin_6c65747465727072657373811c9dc5_gen.json
index 5b3e81ed..252ab593 100644
--- a/internal/data/assets/plugin_6c65747465727072657373811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6c65747465727072657373811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/1ee7fe5f-0939-4604-99fb-2ddd06f30c88/letterpress","title":"LetterPress – Elevate Your WordPress Site&#039;s E-Mail Campaigns and Marketing <= 1.2.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ee7fe5f-0939-4604-99fb-2ddd06f30c88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ee7fe5f-0939-4604-99fb-2ddd06f30c88?source=api-prod","cve":"CVE-2024-3590","affectedVersions":"<=1.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3f9e624-c176-403c-a3c5-7bd11027ebe5/letterpress","title":"LetterPress <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3f9e624-c176-403c-a3c5-7bd11027ebe5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3f9e624-c176-403c-a3c5-7bd11027ebe5?source=api-prod","cve":"CVE-2023-27415","affectedVersions":"<=1.2.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/1ee7fe5f-0939-4604-99fb-2ddd06f30c88/letterpress","title":"LetterPress – Elevate Your WordPress Site&#039;s E-Mail Campaigns and Marketing < 2.4.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"1ee7fe5f-0939-4604-99fb-2ddd06f30c88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1ee7fe5f-0939-4604-99fb-2ddd06f30c88?source=api-prod","cve":"CVE-2024-3590","affectedVersions":"<2.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3f9e624-c176-403c-a3c5-7bd11027ebe5/letterpress","title":"LetterPress <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3f9e624-c176-403c-a3c5-7bd11027ebe5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3f9e624-c176-403c-a3c5-7bd11027ebe5?source=api-prod","cve":"CVE-2023-27415","affectedVersions":"<=1.2.2","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6c6962726f2d64652d7265636c616d6163696f6e65732d792d7175656a6173811c9dc5_gen.json b/internal/data/assets/plugin_6c6962726f2d64652d7265636c616d6163696f6e65732d792d7175656a6173811c9dc5_gen.json
index 52d120d5..aabaa8fe 100644
--- a/internal/data/assets/plugin_6c6962726f2d64652d7265636c616d6163696f6e65732d792d7175656a6173811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6c6962726f2d64652d7265636c616d6163696f6e65732d792d7175656a6173811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/21d8a074-f38b-4799-a7c2-92a5e7142924/libro-de-reclamaciones-y-quejas","title":"Libro de Reclamaciones y Quejas <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"21d8a074-f38b-4799-a7c2-92a5e7142924"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21d8a074-f38b-4799-a7c2-92a5e7142924?source=api-prod","cve":"CVE-2025-32113","affectedVersions":"<=0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/36742d6b-3cd5-4e12-86b5-0d3f361372ea/libro-de-reclamaciones-y-quejas","title":"Libro de Reclamaciones y Quejas <= 0.9 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"36742d6b-3cd5-4e12-86b5-0d3f361372ea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/36742d6b-3cd5-4e12-86b5-0d3f361372ea?source=api-prod","cve":"CVE-2025-30989","affectedVersions":"<=0.9","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/21d8a074-f38b-4799-a7c2-92a5e7142924/libro-de-reclamaciones-y-quejas","title":"Libro de Reclamaciones y Quejas <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"21d8a074-f38b-4799-a7c2-92a5e7142924"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21d8a074-f38b-4799-a7c2-92a5e7142924?source=api-prod","cve":"CVE-2025-32113","affectedVersions":"<=1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/36742d6b-3cd5-4e12-86b5-0d3f361372ea/libro-de-reclamaciones-y-quejas","title":"Libro de Reclamaciones y Quejas <= 0.9 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"36742d6b-3cd5-4e12-86b5-0d3f361372ea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/36742d6b-3cd5-4e12-86b5-0d3f361372ea?source=api-prod","cve":"CVE-2025-30989","affectedVersions":"<=0.9","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6c69746573706565642d6361636865811c9dc5_gen.json b/internal/data/assets/plugin_6c69746573706565642d6361636865811c9dc5_gen.json
index c884bfcd..9f547466 100644
--- a/internal/data/assets/plugin_6c69746573706565642d6361636865811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6c69746573706565642d6361636865811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/051a987a-944a-4898-872b-0456f0f59b27/litespeed-cache","title":"litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-24 20:10:10","sources":[{"name":"Wordfence","remoteId":"051a987a-944a-4898-872b-0456f0f59b27"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/051a987a-944a-4898-872b-0456f0f59b27?source=api-prod","cve":"CVE-2024-9169","affectedVersions":"<=6.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0b045f3d-8412-4e35-b369-2b485639274d/litespeed-cache","title":"LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 15:19:36","sources":[{"name":"Wordfence","remoteId":"0b045f3d-8412-4e35-b369-2b485639274d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b045f3d-8412-4e35-b369-2b485639274d?source=api-prod","cve":"CVE-2026-18978","affectedVersions":"<=7.8.1","severity":"high"},{"advisoryId":"WPSECADV/WF/0dc9adad-0bf5-4e21-8dd0-19d4d5311aa8/litespeed-cache","title":"LiteSpeed Cache <= 7.9 - Unauthenticated Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"0dc9adad-0bf5-4e21-8dd0-19d4d5311aa8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0dc9adad-0bf5-4e21-8dd0-19d4d5311aa8?source=api-prod","cve":"CVE-2026-84761","affectedVersions":"<=7.9","severity":"high"},{"advisoryId":"WPSECADV/WF/104badec-6e6e-44bb-936b-d135dd80890d/litespeed-cache","title":"LiteSpeed Cache <= 6.3.0.1 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"104badec-6e6e-44bb-936b-d135dd80890d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/104badec-6e6e-44bb-936b-d135dd80890d?source=api-prod","cve":"CVE-2024-28000","affectedVersions":"<=6.3.0.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/27026f0f-c85e-4409-9973-4b9cb8a90da5/litespeed-cache","title":"LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"27026f0f-c85e-4409-9973-4b9cb8a90da5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/27026f0f-c85e-4409-9973-4b9cb8a90da5?source=api-prod","cve":"CVE-2023-4372","affectedVersions":"<=5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2b49add4-a4ae-4527-95bd-c295200eeedd/litespeed-cache","title":"LiteSpeed Cache <= 6.4.1 - Authenticated (Author+) Path Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b49add4-a4ae-4527-95bd-c295200eeedd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b49add4-a4ae-4527-95bd-c295200eeedd?source=api-prod","cve":"CVE-2024-47637","affectedVersions":"<=6.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/31173691-28fb-46fd-a7da-28bf9c46e2bc/litespeed-cache","title":"LiteSpeed Cache <= 6.4.1 - Unauthenticated Sensitive Information Exposure via Log Files\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"31173691-28fb-46fd-a7da-28bf9c46e2bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/31173691-28fb-46fd-a7da-28bf9c46e2bc?source=api-prod","cve":"CVE-2024-44000","affectedVersions":"<=6.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/329a140f-94e0-4e2e-8030-c091ad8ac65a/litespeed-cache","title":"LiteSpeed Cache <= 6.5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"329a140f-94e0-4e2e-8030-c091ad8ac65a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/329a140f-94e0-4e2e-8030-c091ad8ac65a?source=api-prod","cve":"CVE-2024-47373","affectedVersions":"<=6.5.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d300517-8939-431d-b33b-e74806e5887c/litespeed-cache","title":"LiteSpeed Cache <= 6.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d300517-8939-431d-b33b-e74806e5887c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d300517-8939-431d-b33b-e74806e5887c?source=api-prod","cve":"CVE-2024-47374","affectedVersions":"<=6.5.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/40fa29f5-525a-4986-91f9-0210a7594e46/litespeed-cache","title":"LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"40fa29f5-525a-4986-91f9-0210a7594e46"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40fa29f5-525a-4986-91f9-0210a7594e46?source=api-prod","cve":"CVE-2026-3375","affectedVersions":"<=7.7","severity":"high"},{"advisoryId":"WPSECADV/WF/56d0658c-b6b5-4e01-9f5b-a53dd4e380d8/litespeed-cache","title":"LiteSpeed Cache <= 5.7 - Missing Authorization via update_cdn_status\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"56d0658c-b6b5-4e01-9f5b-a53dd4e380d8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/56d0658c-b6b5-4e01-9f5b-a53dd4e380d8?source=api-prod","cve":"CVE-2023-45000","affectedVersions":"<=5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/6959e7c4-2f21-4147-bee8-02719e2b3a84/litespeed-cache","title":"LiteSpeed Cache < 7.9.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"6959e7c4-2f21-4147-bee8-02719e2b3a84"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6959e7c4-2f21-4147-bee8-02719e2b3a84?source=api-prod","cve":"CVE-2026-113500","affectedVersions":"<7.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/75169963-9ed4-4b3d-8121-2f9153c6a6d9/litespeed-cache","title":"LiteSpeed Cache <= 7.9 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 07:31:04","sources":[{"name":"Wordfence","remoteId":"75169963-9ed4-4b3d-8121-2f9153c6a6d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/75169963-9ed4-4b3d-8121-2f9153c6a6d9?source=api-prod","cve":"CVE-2026-114190","affectedVersions":"<=7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/8036bd83-9af5-4b71-8974-9b0690ea6769/litespeed-cache","title":"LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"8036bd83-9af5-4b71-8974-9b0690ea6769"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8036bd83-9af5-4b71-8974-9b0690ea6769?source=api-prod","cve":"CVE-2024-3246","affectedVersions":"<=6.2.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/82b48e39-4f8f-48b8-ba46-49e06bee2cc7/litespeed-cache","title":"LiteSpeed Cache <= 4.4.3 - Reflected Cross-Site Scripting via qc_res\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"82b48e39-4f8f-48b8-ba46-49e06bee2cc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/82b48e39-4f8f-48b8-ba46-49e06bee2cc7?source=api-prod","cve":"CVE-2021-24963","affectedVersions":">=1.0.15,<=4.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/8cec5695-1fe5-4349-b78d-2e4f7d3b9908/litespeed-cache","title":"LiteSpeed Cache <= 3.6 - Authenticated Stored Cross-Site Scripting via IP setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"8cec5695-1fe5-4349-b78d-2e4f7d3b9908"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8cec5695-1fe5-4349-b78d-2e4f7d3b9908?source=api-prod","cve":"CVE-2020-29172","affectedVersions":"<=3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/91365d3b-8e93-4202-8d44-9d217aaae0a4/litespeed-cache","title":"LiteSpeed Cache <= 6.5.1 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"91365d3b-8e93-4202-8d44-9d217aaae0a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91365d3b-8e93-4202-8d44-9d217aaae0a4?source=api-prod","cve":"CVE-2024-50550","affectedVersions":"<=6.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/98f71c32-9453-4598-acb5-242818508c74/litespeed-cache","title":"LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"98f71c32-9453-4598-acb5-242818508c74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98f71c32-9453-4598-acb5-242818508c74?source=api-prod","cve":"CVE-2025-12450","affectedVersions":"<=7.5.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a82bffab-77c3-48e8-af84-39709bf0353b/litespeed-cache","title":"LiteSpeed Cache <= 4.4.3 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"a82bffab-77c3-48e8-af84-39709bf0353b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a82bffab-77c3-48e8-af84-39709bf0353b?source=api-prod","cve":"CVE-2021-24964","affectedVersions":">=1.0.15,<=4.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/affac906-cd40-45b3-a165-42d6ff70a969/litespeed-cache","title":"LiteSpeed Cache < 7.9.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"affac906-cd40-45b3-a165-42d6ff70a969"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/affac906-cd40-45b3-a165-42d6ff70a969?source=api-prod","cve":"CVE-2026-113501","affectedVersions":"<7.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b9be3401-43c9-4a7f-bcb1-fd6c184dca67/litespeed-cache","title":"LiteSpeed Cache < 7.9.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b9be3401-43c9-4a7f-bcb1-fd6c184dca67"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9be3401-43c9-4a7f-bcb1-fd6c184dca67?source=api-prod","cve":"CVE-2026-113499","affectedVersions":"<7.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/ba236f86-0434-4030-8e14-4db3919226eb/litespeed-cache","title":"LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-18 19:46:10","sources":[{"name":"Wordfence","remoteId":"ba236f86-0434-4030-8e14-4db3919226eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ba236f86-0434-4030-8e14-4db3919226eb?source=api-prod","cve":"CVE-2026-76579","affectedVersions":"<=7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/c107674d-173f-49cf-b329-e7bffaee841d/litespeed-cache","title":"LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 15:15:48","sources":[{"name":"Wordfence","remoteId":"c107674d-173f-49cf-b329-e7bffaee841d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c107674d-173f-49cf-b329-e7bffaee841d?source=api-prod","cve":"CVE-2026-3129","affectedVersions":"<=7.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c96b9599-b1a5-4aa6-85fe-7af3f12d1776/litespeed-cache","title":"LiteSpeed Cache <= 7.0.1 - Authenticated (Editor+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"c96b9599-b1a5-4aa6-85fe-7af3f12d1776"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c96b9599-b1a5-4aa6-85fe-7af3f12d1776?source=api-prod","cve":"CVE-2025-47437","affectedVersions":"<=7.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d4c27c06-214a-4c20-80d0-b6b4d18737c3/litespeed-cache","title":"LiteSpeed Cache <= 5.7 - Unauthenticated Stored Cross-Site Scripting via 'nameservers' and '_msg'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"d4c27c06-214a-4c20-80d0-b6b4d18737c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d4c27c06-214a-4c20-80d0-b6b4d18737c3?source=api-prod","cve":"CVE-2023-40000","affectedVersions":"<=5.7","severity":"high"},{"advisoryId":"WPSECADV/WF/e1900948-8813-4c88-87fe-ddf830c6ae3b/litespeed-cache","title":"LiteSpeed Cache <= 5.3 - Missing Authorization to Toggle Crawler State\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1900948-8813-4c88-87fe-ddf830c6ae3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1900948-8813-4c88-87fe-ddf830c6ae3b?source=api-prod","cve":"CVE-2022-46800","affectedVersions":"<=5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e1b02e83-142f-48f8-88dd-994862d15376/litespeed-cache","title":"LiteSpeed Cache <= 6.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1b02e83-142f-48f8-88dd-994862d15376"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1b02e83-142f-48f8-88dd-994862d15376?source=api-prod","cve":"CVE-2024-51915","affectedVersions":"<=6.5.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/051a987a-944a-4898-872b-0456f0f59b27/litespeed-cache","title":"litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-24 20:10:10","sources":[{"name":"Wordfence","remoteId":"051a987a-944a-4898-872b-0456f0f59b27"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/051a987a-944a-4898-872b-0456f0f59b27?source=api-prod","cve":"CVE-2024-9169","affectedVersions":"<=6.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0b045f3d-8412-4e35-b369-2b485639274d/litespeed-cache","title":"LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 15:19:36","sources":[{"name":"Wordfence","remoteId":"0b045f3d-8412-4e35-b369-2b485639274d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b045f3d-8412-4e35-b369-2b485639274d?source=api-prod","cve":"CVE-2026-18978","affectedVersions":"<=7.8.1","severity":"high"},{"advisoryId":"WPSECADV/WF/0dc9adad-0bf5-4e21-8dd0-19d4d5311aa8/litespeed-cache","title":"LiteSpeed Cache <= 7.9 - Unauthenticated Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"0dc9adad-0bf5-4e21-8dd0-19d4d5311aa8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0dc9adad-0bf5-4e21-8dd0-19d4d5311aa8?source=api-prod","cve":"CVE-2026-84761","affectedVersions":"<=7.9","severity":"high"},{"advisoryId":"WPSECADV/WF/104badec-6e6e-44bb-936b-d135dd80890d/litespeed-cache","title":"LiteSpeed Cache <= 6.3.0.1 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"104badec-6e6e-44bb-936b-d135dd80890d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/104badec-6e6e-44bb-936b-d135dd80890d?source=api-prod","cve":"CVE-2024-28000","affectedVersions":"<=6.3.0.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/27026f0f-c85e-4409-9973-4b9cb8a90da5/litespeed-cache","title":"LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"27026f0f-c85e-4409-9973-4b9cb8a90da5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/27026f0f-c85e-4409-9973-4b9cb8a90da5?source=api-prod","cve":"CVE-2023-4372","affectedVersions":"<=5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2b49add4-a4ae-4527-95bd-c295200eeedd/litespeed-cache","title":"LiteSpeed Cache <= 6.4.1 - Authenticated (Author+) Path Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b49add4-a4ae-4527-95bd-c295200eeedd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b49add4-a4ae-4527-95bd-c295200eeedd?source=api-prod","cve":"CVE-2024-47637","affectedVersions":"<=6.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/31173691-28fb-46fd-a7da-28bf9c46e2bc/litespeed-cache","title":"LiteSpeed Cache <= 6.4.1 - Unauthenticated Sensitive Information Exposure via Log Files\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"31173691-28fb-46fd-a7da-28bf9c46e2bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/31173691-28fb-46fd-a7da-28bf9c46e2bc?source=api-prod","cve":"CVE-2024-44000","affectedVersions":"<=6.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/329a140f-94e0-4e2e-8030-c091ad8ac65a/litespeed-cache","title":"LiteSpeed Cache <= 6.5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"329a140f-94e0-4e2e-8030-c091ad8ac65a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/329a140f-94e0-4e2e-8030-c091ad8ac65a?source=api-prod","cve":"CVE-2024-47373","affectedVersions":"<=6.5.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d300517-8939-431d-b33b-e74806e5887c/litespeed-cache","title":"LiteSpeed Cache <= 6.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d300517-8939-431d-b33b-e74806e5887c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d300517-8939-431d-b33b-e74806e5887c?source=api-prod","cve":"CVE-2024-47374","affectedVersions":"<=6.5.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/40fa29f5-525a-4986-91f9-0210a7594e46/litespeed-cache","title":"LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"40fa29f5-525a-4986-91f9-0210a7594e46"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40fa29f5-525a-4986-91f9-0210a7594e46?source=api-prod","cve":"CVE-2026-3375","affectedVersions":"<=7.7","severity":"high"},{"advisoryId":"WPSECADV/WF/56d0658c-b6b5-4e01-9f5b-a53dd4e380d8/litespeed-cache","title":"LiteSpeed Cache <= 5.7 - Missing Authorization via update_cdn_status\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"56d0658c-b6b5-4e01-9f5b-a53dd4e380d8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/56d0658c-b6b5-4e01-9f5b-a53dd4e380d8?source=api-prod","cve":"CVE-2023-45000","affectedVersions":"<=5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/6959e7c4-2f21-4147-bee8-02719e2b3a84/litespeed-cache","title":"LiteSpeed Cache < 7.9.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"6959e7c4-2f21-4147-bee8-02719e2b3a84"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6959e7c4-2f21-4147-bee8-02719e2b3a84?source=api-prod","cve":"CVE-2026-113500","affectedVersions":"<7.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/75169963-9ed4-4b3d-8121-2f9153c6a6d9/litespeed-cache","title":"LiteSpeed Cache <= 7.9 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 07:31:04","sources":[{"name":"Wordfence","remoteId":"75169963-9ed4-4b3d-8121-2f9153c6a6d9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/75169963-9ed4-4b3d-8121-2f9153c6a6d9?source=api-prod","cve":"CVE-2026-114190","affectedVersions":"<=7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/8036bd83-9af5-4b71-8974-9b0690ea6769/litespeed-cache","title":"LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"8036bd83-9af5-4b71-8974-9b0690ea6769"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8036bd83-9af5-4b71-8974-9b0690ea6769?source=api-prod","cve":"CVE-2024-3246","affectedVersions":"<=6.2.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/82b48e39-4f8f-48b8-ba46-49e06bee2cc7/litespeed-cache","title":"LiteSpeed Cache <= 4.4.3 - Reflected Cross-Site Scripting via qc_res\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"82b48e39-4f8f-48b8-ba46-49e06bee2cc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/82b48e39-4f8f-48b8-ba46-49e06bee2cc7?source=api-prod","cve":"CVE-2021-24963","affectedVersions":">=1.0.15,<=4.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/8bf9b130-bb1e-43fc-b5c9-337646b8976e/litespeed-cache","title":"LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:06:28","sources":[{"name":"Wordfence","remoteId":"8bf9b130-bb1e-43fc-b5c9-337646b8976e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8bf9b130-bb1e-43fc-b5c9-337646b8976e?source=api-prod","cve":"CVE-2026-109215","affectedVersions":"<=7.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8cec5695-1fe5-4349-b78d-2e4f7d3b9908/litespeed-cache","title":"LiteSpeed Cache <= 3.6 - Authenticated Stored Cross-Site Scripting via IP setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"8cec5695-1fe5-4349-b78d-2e4f7d3b9908"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8cec5695-1fe5-4349-b78d-2e4f7d3b9908?source=api-prod","cve":"CVE-2020-29172","affectedVersions":"<=3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/91365d3b-8e93-4202-8d44-9d217aaae0a4/litespeed-cache","title":"LiteSpeed Cache <= 6.5.1 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"91365d3b-8e93-4202-8d44-9d217aaae0a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91365d3b-8e93-4202-8d44-9d217aaae0a4?source=api-prod","cve":"CVE-2024-50550","affectedVersions":"<=6.5.1","severity":"high"},{"advisoryId":"WPSECADV/WF/98f71c32-9453-4598-acb5-242818508c74/litespeed-cache","title":"LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"98f71c32-9453-4598-acb5-242818508c74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98f71c32-9453-4598-acb5-242818508c74?source=api-prod","cve":"CVE-2025-12450","affectedVersions":"<=7.5.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/99f876e0-8f13-468b-b5fa-ca61e3cf57b4/litespeed-cache","title":"LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:04:19","sources":[{"name":"Wordfence","remoteId":"99f876e0-8f13-468b-b5fa-ca61e3cf57b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/99f876e0-8f13-468b-b5fa-ca61e3cf57b4?source=api-prod","cve":"CVE-2026-116763","affectedVersions":"<=7.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a82bffab-77c3-48e8-af84-39709bf0353b/litespeed-cache","title":"LiteSpeed Cache <= 4.4.3 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"a82bffab-77c3-48e8-af84-39709bf0353b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a82bffab-77c3-48e8-af84-39709bf0353b?source=api-prod","cve":"CVE-2021-24964","affectedVersions":">=1.0.15,<=4.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/affac906-cd40-45b3-a165-42d6ff70a969/litespeed-cache","title":"LiteSpeed Cache < 7.9.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"affac906-cd40-45b3-a165-42d6ff70a969"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/affac906-cd40-45b3-a165-42d6ff70a969?source=api-prod","cve":"CVE-2026-113501","affectedVersions":"<7.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b9be3401-43c9-4a7f-bcb1-fd6c184dca67/litespeed-cache","title":"LiteSpeed Cache < 7.9.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b9be3401-43c9-4a7f-bcb1-fd6c184dca67"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9be3401-43c9-4a7f-bcb1-fd6c184dca67?source=api-prod","cve":"CVE-2026-113499","affectedVersions":"<7.9.2","severity":"high"},{"advisoryId":"WPSECADV/WF/ba236f86-0434-4030-8e14-4db3919226eb/litespeed-cache","title":"LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-18 19:46:10","sources":[{"name":"Wordfence","remoteId":"ba236f86-0434-4030-8e14-4db3919226eb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ba236f86-0434-4030-8e14-4db3919226eb?source=api-prod","cve":"CVE-2026-76579","affectedVersions":"<=7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/c107674d-173f-49cf-b329-e7bffaee841d/litespeed-cache","title":"LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 15:15:48","sources":[{"name":"Wordfence","remoteId":"c107674d-173f-49cf-b329-e7bffaee841d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c107674d-173f-49cf-b329-e7bffaee841d?source=api-prod","cve":"CVE-2026-3129","affectedVersions":"<=7.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/c96b9599-b1a5-4aa6-85fe-7af3f12d1776/litespeed-cache","title":"LiteSpeed Cache <= 7.0.1 - Authenticated (Editor+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"c96b9599-b1a5-4aa6-85fe-7af3f12d1776"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c96b9599-b1a5-4aa6-85fe-7af3f12d1776?source=api-prod","cve":"CVE-2025-47437","affectedVersions":"<=7.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d4c27c06-214a-4c20-80d0-b6b4d18737c3/litespeed-cache","title":"LiteSpeed Cache <= 5.7 - Unauthenticated Stored Cross-Site Scripting via 'nameservers' and '_msg'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"d4c27c06-214a-4c20-80d0-b6b4d18737c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d4c27c06-214a-4c20-80d0-b6b4d18737c3?source=api-prod","cve":"CVE-2023-40000","affectedVersions":"<=5.7","severity":"high"},{"advisoryId":"WPSECADV/WF/e1900948-8813-4c88-87fe-ddf830c6ae3b/litespeed-cache","title":"LiteSpeed Cache <= 5.3 - Missing Authorization to Toggle Crawler State\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1900948-8813-4c88-87fe-ddf830c6ae3b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1900948-8813-4c88-87fe-ddf830c6ae3b?source=api-prod","cve":"CVE-2022-46800","affectedVersions":"<=5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e1b02e83-142f-48f8-88dd-994862d15376/litespeed-cache","title":"LiteSpeed Cache <= 6.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1b02e83-142f-48f8-88dd-994862d15376"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1b02e83-142f-48f8-88dd-994862d15376?source=api-prod","cve":"CVE-2024-51915","affectedVersions":"<=6.5.2","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d6167652d6576656e747072657373811c9dc5_gen.json b/internal/data/assets/plugin_6d6167652d6576656e747072657373811c9dc5_gen.json
index 18798917..b66c351e 100644
--- a/internal/data/assets/plugin_6d6167652d6576656e747072657373811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d6167652d6576656e747072657373811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/04ee71cb-500c-4685-b26d-1460dee7c759/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.6.0 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-07 13:37:00","sources":[{"name":"Wordfence","remoteId":"04ee71cb-500c-4685-b26d-1460dee7c759"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/04ee71cb-500c-4685-b26d-1460dee7c759?source=api-prod","cve":"CVE-2026-81802","affectedVersions":"<=5.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/05fe7d6d-c206-4444-aab2-e4f64b143710/mage-eventpress","title":"WpEvently <= 5.0.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"05fe7d6d-c206-4444-aab2-e4f64b143710"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05fe7d6d-c206-4444-aab2-e4f64b143710?source=api-prod","cve":"CVE-2025-66083","affectedVersions":"<=5.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/076607ec-d848-4b4e-986b-31287f8f0ae4/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-27 17:41:38","sources":[{"name":"Wordfence","remoteId":"076607ec-d848-4b4e-986b-31287f8f0ae4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/076607ec-d848-4b4e-986b-31287f8f0ae4?source=api-prod","cve":"CVE-2026-109381","affectedVersions":"<=5.7.8","severity":"high"},{"advisoryId":"WPSECADV/WF/12be30fc-2d7e-4326-b949-45138796c1a9/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.3.7 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"12be30fc-2d7e-4326-b949-45138796c1a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12be30fc-2d7e-4326-b949-45138796c1a9?source=api-prod","cve":"CVE-2026-16062","affectedVersions":"<5.3.7","severity":"high"},{"advisoryId":"WPSECADV/WF/1471bd32-4b91-4351-957f-e0a497d471ec/mage-eventpress","title":"WpEvently <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"1471bd32-4b91-4351-957f-e0a497d471ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1471bd32-4b91-4351-957f-e0a497d471ec?source=api-prod","cve":"CVE-2025-30895","affectedVersions":"<=4.2.9","severity":"high"},{"advisoryId":"WPSECADV/WF/207169b7-98ab-4c34-a4e8-ff3dfb6953ed/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.7.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 13:13:17","sources":[{"name":"Wordfence","remoteId":"207169b7-98ab-4c34-a4e8-ff3dfb6953ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/207169b7-98ab-4c34-a4e8-ff3dfb6953ed?source=api-prod","cve":"CVE-2026-114192","affectedVersions":"<=5.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/2c66905d-6e53-4062-b63f-b9a249ebd3e1/mage-eventpress","title":"WpEvently <= 4.2.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c66905d-6e53-4062-b63f-b9a249ebd3e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c66905d-6e53-4062-b63f-b9a249ebd3e1?source=api-prod","cve":"CVE-2025-30887","affectedVersions":"<=4.2.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/2dbaf8a7-e3cc-42c1-9f8b-7eb14363cf8c/mage-eventpress","title":"WpEvently <= 5.1.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"2dbaf8a7-e3cc-42c1-9f8b-7eb14363cf8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2dbaf8a7-e3cc-42c1-9f8b-7eb14363cf8c?source=api-prod","cve":"CVE-2026-23549","affectedVersions":"<=5.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/376c5091-7921-4470-acbf-44db53db38fc/mage-eventpress","title":"Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"376c5091-7921-4470-acbf-44db53db38fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/376c5091-7921-4470-acbf-44db53db38fc?source=api-prod","cve":"CVE-2024-32110","affectedVersions":"<=4.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/38db25f7-e2d4-460a-9305-cf952d4b4991/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.1.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"38db25f7-e2d4-460a-9305-cf952d4b4991"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38db25f7-e2d4-460a-9305-cf952d4b4991?source=api-prod","cve":"CVE-2026-25361","affectedVersions":"<=5.1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/47bf51eb-829d-433e-82c2-71dc09a9cb4d/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.3.7 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"47bf51eb-829d-433e-82c2-71dc09a9cb4d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/47bf51eb-829d-433e-82c2-71dc09a9cb4d?source=api-prod","cve":"CVE-2026-91008","affectedVersions":"<=5.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/49cb8324-2245-4f7d-b289-d2313af4642e/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.3.6 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"49cb8324-2245-4f7d-b289-d2313af4642e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49cb8324-2245-4f7d-b289-d2313af4642e?source=api-prod","cve":"CVE-2026-16063","affectedVersions":"<=5.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/50812a8b-7d49-41fa-ba50-47d07a4b6caa/mage-eventpress","title":"Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently <= 4.1.1 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"50812a8b-7d49-41fa-ba50-47d07a4b6caa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50812a8b-7d49-41fa-ba50-47d07a4b6caa?source=api-prod","cve":"CVE-2024-24796","affectedVersions":"<=4.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/5f43e35e-55cd-45f1-b8a5-e47398d97cc2/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-28 13:23:18","sources":[{"name":"Wordfence","remoteId":"5f43e35e-55cd-45f1-b8a5-e47398d97cc2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f43e35e-55cd-45f1-b8a5-e47398d97cc2?source=api-prod","cve":"CVE-2026-17166","affectedVersions":"<=5.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/6bd03b86-e9b7-44d5-9528-efd94f0f79f5/mage-eventpress","title":"Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bd03b86-e9b7-44d5-9528-efd94f0f79f5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bd03b86-e9b7-44d5-9528-efd94f0f79f5?source=api-prod","cve":"CVE-2024-43138","affectedVersions":"<=4.2.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/738d266b-4bd4-4c0e-aac4-ef0ffeb33c45/mage-eventpress","title":"WpEvently < 5.1.9 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"738d266b-4bd4-4c0e-aac4-ef0ffeb33c45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/738d266b-4bd4-4c0e-aac4-ef0ffeb33c45?source=api-prod","cve":"CVE-2026-32354","affectedVersions":"<5.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/77b8b8f3-5cd3-4337-8010-04c5088f5994/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.5.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"77b8b8f3-5cd3-4337-8010-04c5088f5994"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/77b8b8f3-5cd3-4337-8010-04c5088f5994?source=api-prod","cve":"CVE-2026-91019","affectedVersions":"<=5.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7d7b1748-f946-4b70-9cf5-a035de158b20/mage-eventpress","title":"Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d7b1748-f946-4b70-9cf5-a035de158b20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d7b1748-f946-4b70-9cf5-a035de158b20?source=api-prod","cve":"CVE-2026-91077","affectedVersions":">=5.3.6,<=5.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8f9cf8d3-ebc1-4d94-909e-938beb58601e/mage-eventpress","title":"WpEvently <= 4.4.8 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"8f9cf8d3-ebc1-4d94-909e-938beb58601e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f9cf8d3-ebc1-4d94-909e-938beb58601e?source=api-prod","cve":"CVE-2025-54742","affectedVersions":"<=4.4.8","severity":"high"},{"advisoryId":"WPSECADV/WF/9379e1c9-fb83-43e4-af89-898dc0c2216c/mage-eventpress","title":"Event Manager and Tickets Selling Plugin for WooCommerce <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"9379e1c9-fb83-43e4-af89-898dc0c2216c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9379e1c9-fb83-43e4-af89-898dc0c2216c?source=api-prod","cve":"CVE-2023-0144","affectedVersions":"<=3.7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9601932a-0e0d-408f-91d0-47ff4e726b23/mage-eventpress","title":"WpEvently <= 4.4.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"9601932a-0e0d-408f-91d0-47ff4e726b23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9601932a-0e0d-408f-91d0-47ff4e726b23?source=api-prod","cve":"CVE-2025-54705","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3659c4d-3a19-4f74-9f6d-26d7b24ebe56/mage-eventpress","title":"WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-06 21:50:06","sources":[{"name":"Wordfence","remoteId":"a3659c4d-3a19-4f74-9f6d-26d7b24ebe56"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3659c4d-3a19-4f74-9f6d-26d7b24ebe56?source=api-prod","cve":"CVE-2025-5568","affectedVersions":"<=4.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a7689a95-7f63-46e1-b5fd-4279be66e0f0/mage-eventpress","title":"WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"a7689a95-7f63-46e1-b5fd-4279be66e0f0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a7689a95-7f63-46e1-b5fd-4279be66e0f0?source=api-prod","cve":"CVE-2026-24954","affectedVersions":"<=5.0.8","severity":"high"},{"advisoryId":"WPSECADV/WF/af59eb6d-1ffa-4593-9bfc-f910d907f6e0/mage-eventpress","title":"Event Manager for WooCommerce <= 3.7.7 - Cross-Site Request Forgery leading to Uninstall Form Submission\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"af59eb6d-1ffa-4593-9bfc-f910d907f6e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af59eb6d-1ffa-4593-9bfc-f910d907f6e0?source=api-prod","cve":"CVE-2022-47164","affectedVersions":"<=3.7.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3a4a017-8a1d-400c-940b-f188513d23c2/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.5.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3a4a017-8a1d-400c-940b-f188513d23c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3a4a017-8a1d-400c-940b-f188513d23c2?source=api-prod","cve":"CVE-2026-81759","affectedVersions":"<=5.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b738a4fe-6724-4216-be77-ea67843f89d1/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.3.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"b738a4fe-6724-4216-be77-ea67843f89d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b738a4fe-6724-4216-be77-ea67843f89d1?source=api-prod","cve":"CVE-2026-16064","affectedVersions":"<5.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/bfc8c34c-3a1d-486e-96ca-ff50a1148813/mage-eventpress","title":"Event Manager for WooCommerce <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"bfc8c34c-3a1d-486e-96ca-ff50a1148813"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bfc8c34c-3a1d-486e-96ca-ff50a1148813?source=api-prod","cve":"CVE-2024-49703","affectedVersions":"<=4.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/c2f4c1de-7eeb-45c4-bbff-ec85f2cda5aa/mage-eventpress","title":"Event Manager for WooCommerce <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mep_get_option' function\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2f4c1de-7eeb-45c4-bbff-ec85f2cda5aa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2f4c1de-7eeb-45c4-bbff-ec85f2cda5aa?source=api-prod","cve":"CVE-2023-28422","affectedVersions":"<=3.8.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/c4cd477c-29c5-4715-bffb-55754858f9fc/mage-eventpress","title":"WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"c4cd477c-29c5-4715-bffb-55754858f9fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4cd477c-29c5-4715-bffb-55754858f9fc?source=api-prod","cve":"CVE-2025-32145","affectedVersions":"<=4.3.6","severity":"high"},{"advisoryId":"WPSECADV/WF/c63079af-6a22-4692-ab81-96e166a00c38/mage-eventpress","title":"Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Arbitrary Settings Change\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"c63079af-6a22-4692-ab81-96e166a00c38"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c63079af-6a22-4692-ab81-96e166a00c38?source=api-prod","affectedVersions":"<3.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3491f9d-78ea-4f3a-81d2-26baed6f3ab7/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.3.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3491f9d-78ea-4f3a-81d2-26baed6f3ab7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3491f9d-78ea-4f3a-81d2-26baed6f3ab7?source=api-prod","cve":"CVE-2026-45441","affectedVersions":"<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e7b719b9-7287-4d2a-b107-7c9bc18b9456/mage-eventpress","title":"WpEvently <= 5.0.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"e7b719b9-7287-4d2a-b107-7c9bc18b9456"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e7b719b9-7287-4d2a-b107-7c9bc18b9456?source=api-prod","cve":"CVE-2025-66082","affectedVersions":"<=5.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/e93ccf9d-cd8b-4399-8d2d-c844a23d66c8/mage-eventpress","title":"Event Manager and Tickets Selling for WooCommerce < 3.5.8 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"e93ccf9d-cd8b-4399-8d2d-c844a23d66c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e93ccf9d-cd8b-4399-8d2d-c844a23d66c8?source=api-prod","cve":"CVE-2022-0478","affectedVersions":"<3.5.8","severity":"high"},{"advisoryId":"WPSECADV/WF/ef7ef45a-612b-40ca-817d-05b3d29b2b05/mage-eventpress","title":"Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"ef7ef45a-612b-40ca-817d-05b3d29b2b05"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ef7ef45a-612b-40ca-817d-05b3d29b2b05?source=api-prod","affectedVersions":"<3.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f20d9160-bddf-4fdb-a5a6-cc792bb1c1ee/mage-eventpress","title":"WpEvently <= 5.1.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"f20d9160-bddf-4fdb-a5a6-cc792bb1c1ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f20d9160-bddf-4fdb-a5a6-cc792bb1c1ee?source=api-prod","cve":"CVE-2026-24942","affectedVersions":"<=5.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f6b41c7f-06e9-4cba-ae64-b4d6b0df4cc4/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.5.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"f6b41c7f-06e9-4cba-ae64-b4d6b0df4cc4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f6b41c7f-06e9-4cba-ae64-b4d6b0df4cc4?source=api-prod","cve":"CVE-2026-81761","affectedVersions":"<=5.5.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/04ee71cb-500c-4685-b26d-1460dee7c759/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.6.0 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-07 13:37:00","sources":[{"name":"Wordfence","remoteId":"04ee71cb-500c-4685-b26d-1460dee7c759"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/04ee71cb-500c-4685-b26d-1460dee7c759?source=api-prod","cve":"CVE-2026-81802","affectedVersions":"<=5.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/05fe7d6d-c206-4444-aab2-e4f64b143710/mage-eventpress","title":"WpEvently <= 5.0.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"05fe7d6d-c206-4444-aab2-e4f64b143710"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05fe7d6d-c206-4444-aab2-e4f64b143710?source=api-prod","cve":"CVE-2025-66083","affectedVersions":"<=5.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/076607ec-d848-4b4e-986b-31287f8f0ae4/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-27 17:41:38","sources":[{"name":"Wordfence","remoteId":"076607ec-d848-4b4e-986b-31287f8f0ae4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/076607ec-d848-4b4e-986b-31287f8f0ae4?source=api-prod","cve":"CVE-2026-109381","affectedVersions":"<=5.7.8","severity":"high"},{"advisoryId":"WPSECADV/WF/12be30fc-2d7e-4326-b949-45138796c1a9/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.3.7 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"12be30fc-2d7e-4326-b949-45138796c1a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12be30fc-2d7e-4326-b949-45138796c1a9?source=api-prod","cve":"CVE-2026-16062","affectedVersions":"<5.3.7","severity":"high"},{"advisoryId":"WPSECADV/WF/1471bd32-4b91-4351-957f-e0a497d471ec/mage-eventpress","title":"WpEvently <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"1471bd32-4b91-4351-957f-e0a497d471ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1471bd32-4b91-4351-957f-e0a497d471ec?source=api-prod","cve":"CVE-2025-30895","affectedVersions":"<=4.2.9","severity":"high"},{"advisoryId":"WPSECADV/WF/207169b7-98ab-4c34-a4e8-ff3dfb6953ed/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.7.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 13:13:17","sources":[{"name":"Wordfence","remoteId":"207169b7-98ab-4c34-a4e8-ff3dfb6953ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/207169b7-98ab-4c34-a4e8-ff3dfb6953ed?source=api-prod","cve":"CVE-2026-114192","affectedVersions":"<=5.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/2c66905d-6e53-4062-b63f-b9a249ebd3e1/mage-eventpress","title":"WpEvently <= 4.2.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c66905d-6e53-4062-b63f-b9a249ebd3e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c66905d-6e53-4062-b63f-b9a249ebd3e1?source=api-prod","cve":"CVE-2025-30887","affectedVersions":"<=4.2.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/2dbaf8a7-e3cc-42c1-9f8b-7eb14363cf8c/mage-eventpress","title":"WpEvently <= 5.1.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"2dbaf8a7-e3cc-42c1-9f8b-7eb14363cf8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2dbaf8a7-e3cc-42c1-9f8b-7eb14363cf8c?source=api-prod","cve":"CVE-2026-23549","affectedVersions":"<=5.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/376c5091-7921-4470-acbf-44db53db38fc/mage-eventpress","title":"Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"376c5091-7921-4470-acbf-44db53db38fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/376c5091-7921-4470-acbf-44db53db38fc?source=api-prod","cve":"CVE-2024-32110","affectedVersions":"<=4.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/38db25f7-e2d4-460a-9305-cf952d4b4991/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.1.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"38db25f7-e2d4-460a-9305-cf952d4b4991"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/38db25f7-e2d4-460a-9305-cf952d4b4991?source=api-prod","cve":"CVE-2026-25361","affectedVersions":"<=5.1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/47bf51eb-829d-433e-82c2-71dc09a9cb4d/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.3.7 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"47bf51eb-829d-433e-82c2-71dc09a9cb4d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/47bf51eb-829d-433e-82c2-71dc09a9cb4d?source=api-prod","cve":"CVE-2026-91008","affectedVersions":"<=5.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/49cb8324-2245-4f7d-b289-d2313af4642e/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.3.6 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"49cb8324-2245-4f7d-b289-d2313af4642e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49cb8324-2245-4f7d-b289-d2313af4642e?source=api-prod","cve":"CVE-2026-16063","affectedVersions":"<=5.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/50812a8b-7d49-41fa-ba50-47d07a4b6caa/mage-eventpress","title":"Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently <= 4.1.1 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"50812a8b-7d49-41fa-ba50-47d07a4b6caa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50812a8b-7d49-41fa-ba50-47d07a4b6caa?source=api-prod","cve":"CVE-2024-24796","affectedVersions":"<=4.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/5f43e35e-55cd-45f1-b8a5-e47398d97cc2/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-28 13:23:18","sources":[{"name":"Wordfence","remoteId":"5f43e35e-55cd-45f1-b8a5-e47398d97cc2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f43e35e-55cd-45f1-b8a5-e47398d97cc2?source=api-prod","cve":"CVE-2026-17166","affectedVersions":"<=5.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/6bd03b86-e9b7-44d5-9528-efd94f0f79f5/mage-eventpress","title":"Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bd03b86-e9b7-44d5-9528-efd94f0f79f5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bd03b86-e9b7-44d5-9528-efd94f0f79f5?source=api-prod","cve":"CVE-2024-43138","affectedVersions":"<=4.2.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/738d266b-4bd4-4c0e-aac4-ef0ffeb33c45/mage-eventpress","title":"WpEvently < 5.1.9 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"738d266b-4bd4-4c0e-aac4-ef0ffeb33c45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/738d266b-4bd4-4c0e-aac4-ef0ffeb33c45?source=api-prod","cve":"CVE-2026-32354","affectedVersions":"<5.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/77b8b8f3-5cd3-4337-8010-04c5088f5994/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.5.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"77b8b8f3-5cd3-4337-8010-04c5088f5994"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/77b8b8f3-5cd3-4337-8010-04c5088f5994?source=api-prod","cve":"CVE-2026-91019","affectedVersions":"<=5.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7d7b1748-f946-4b70-9cf5-a035de158b20/mage-eventpress","title":"Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d7b1748-f946-4b70-9cf5-a035de158b20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d7b1748-f946-4b70-9cf5-a035de158b20?source=api-prod","cve":"CVE-2026-91077","affectedVersions":">=5.3.6,<=5.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8f9cf8d3-ebc1-4d94-909e-938beb58601e/mage-eventpress","title":"WpEvently <= 4.4.8 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"8f9cf8d3-ebc1-4d94-909e-938beb58601e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f9cf8d3-ebc1-4d94-909e-938beb58601e?source=api-prod","cve":"CVE-2025-54742","affectedVersions":"<=4.4.8","severity":"high"},{"advisoryId":"WPSECADV/WF/9379e1c9-fb83-43e4-af89-898dc0c2216c/mage-eventpress","title":"Event Manager and Tickets Selling Plugin for WooCommerce <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"9379e1c9-fb83-43e4-af89-898dc0c2216c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9379e1c9-fb83-43e4-af89-898dc0c2216c?source=api-prod","cve":"CVE-2023-0144","affectedVersions":"<=3.7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/9601932a-0e0d-408f-91d0-47ff4e726b23/mage-eventpress","title":"WpEvently <= 4.4.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"9601932a-0e0d-408f-91d0-47ff4e726b23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9601932a-0e0d-408f-91d0-47ff4e726b23?source=api-prod","cve":"CVE-2025-54705","affectedVersions":"<=4.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3659c4d-3a19-4f74-9f6d-26d7b24ebe56/mage-eventpress","title":"WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-06 21:50:06","sources":[{"name":"Wordfence","remoteId":"a3659c4d-3a19-4f74-9f6d-26d7b24ebe56"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3659c4d-3a19-4f74-9f6d-26d7b24ebe56?source=api-prod","cve":"CVE-2025-5568","affectedVersions":"<=4.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a7689a95-7f63-46e1-b5fd-4279be66e0f0/mage-eventpress","title":"WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"a7689a95-7f63-46e1-b5fd-4279be66e0f0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a7689a95-7f63-46e1-b5fd-4279be66e0f0?source=api-prod","cve":"CVE-2026-24954","affectedVersions":"<=5.0.8","severity":"high"},{"advisoryId":"WPSECADV/WF/af59eb6d-1ffa-4593-9bfc-f910d907f6e0/mage-eventpress","title":"Event Manager for WooCommerce <= 3.7.7 - Cross-Site Request Forgery leading to Uninstall Form Submission\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"af59eb6d-1ffa-4593-9bfc-f910d907f6e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af59eb6d-1ffa-4593-9bfc-f910d907f6e0?source=api-prod","cve":"CVE-2022-47164","affectedVersions":"<=3.7.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3a4a017-8a1d-400c-940b-f188513d23c2/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.5.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3a4a017-8a1d-400c-940b-f188513d23c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3a4a017-8a1d-400c-940b-f188513d23c2?source=api-prod","cve":"CVE-2026-81759","affectedVersions":"<=5.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b738a4fe-6724-4216-be77-ea67843f89d1/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.3.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"b738a4fe-6724-4216-be77-ea67843f89d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b738a4fe-6724-4216-be77-ea67843f89d1?source=api-prod","cve":"CVE-2026-16064","affectedVersions":"<5.3.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/bfc8c34c-3a1d-486e-96ca-ff50a1148813/mage-eventpress","title":"Event Manager for WooCommerce <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"bfc8c34c-3a1d-486e-96ca-ff50a1148813"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bfc8c34c-3a1d-486e-96ca-ff50a1148813?source=api-prod","cve":"CVE-2024-49703","affectedVersions":"<=4.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/c2f4c1de-7eeb-45c4-bbff-ec85f2cda5aa/mage-eventpress","title":"Event Manager for WooCommerce <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mep_get_option' function\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"c2f4c1de-7eeb-45c4-bbff-ec85f2cda5aa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c2f4c1de-7eeb-45c4-bbff-ec85f2cda5aa?source=api-prod","cve":"CVE-2023-28422","affectedVersions":"<=3.8.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/c4cd477c-29c5-4715-bffb-55754858f9fc/mage-eventpress","title":"WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"c4cd477c-29c5-4715-bffb-55754858f9fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4cd477c-29c5-4715-bffb-55754858f9fc?source=api-prod","cve":"CVE-2025-32145","affectedVersions":"<=4.3.6","severity":"high"},{"advisoryId":"WPSECADV/WF/c63079af-6a22-4692-ab81-96e166a00c38/mage-eventpress","title":"Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Arbitrary Settings Change\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"c63079af-6a22-4692-ab81-96e166a00c38"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c63079af-6a22-4692-ab81-96e166a00c38?source=api-prod","affectedVersions":"<3.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e3491f9d-78ea-4f3a-81d2-26baed6f3ab7/mage-eventpress","title":"Event Booking Manager for WooCommerce <= 5.3.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3491f9d-78ea-4f3a-81d2-26baed6f3ab7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3491f9d-78ea-4f3a-81d2-26baed6f3ab7?source=api-prod","cve":"CVE-2026-45441","affectedVersions":"<=5.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/e7b719b9-7287-4d2a-b107-7c9bc18b9456/mage-eventpress","title":"WpEvently <= 5.0.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"e7b719b9-7287-4d2a-b107-7c9bc18b9456"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e7b719b9-7287-4d2a-b107-7c9bc18b9456?source=api-prod","cve":"CVE-2025-66082","affectedVersions":"<=5.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/e93ccf9d-cd8b-4399-8d2d-c844a23d66c8/mage-eventpress","title":"Event Manager and Tickets Selling for WooCommerce < 3.5.8 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"e93ccf9d-cd8b-4399-8d2d-c844a23d66c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e93ccf9d-cd8b-4399-8d2d-c844a23d66c8?source=api-prod","cve":"CVE-2022-0478","affectedVersions":"<3.5.8","severity":"high"},{"advisoryId":"WPSECADV/WF/ef7ef45a-612b-40ca-817d-05b3d29b2b05/mage-eventpress","title":"Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"ef7ef45a-612b-40ca-817d-05b3d29b2b05"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ef7ef45a-612b-40ca-817d-05b3d29b2b05?source=api-prod","affectedVersions":"<3.5.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f20d9160-bddf-4fdb-a5a6-cc792bb1c1ee/mage-eventpress","title":"WpEvently <= 5.1.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"f20d9160-bddf-4fdb-a5a6-cc792bb1c1ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f20d9160-bddf-4fdb-a5a6-cc792bb1c1ee?source=api-prod","cve":"CVE-2026-24942","affectedVersions":"<=5.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f6b41c7f-06e9-4cba-ae64-b4d6b0df4cc4/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.5.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"f6b41c7f-06e9-4cba-ae64-b4d6b0df4cc4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f6b41c7f-06e9-4cba-ae64-b4d6b0df4cc4?source=api-prod","cve":"CVE-2026-81761","affectedVersions":"<=5.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd5d9ebc-101a-4a7d-856c-d7140084dcf5/mage-eventpress","title":"Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.7.9 - Unauthenticated HTML Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd5d9ebc-101a-4a7d-856c-d7140084dcf5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd5d9ebc-101a-4a7d-856c-d7140084dcf5?source=api-prod","cve":"CVE-2026-116394","affectedVersions":"<=5.7.9","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d61696c706f6574811c9dc5_gen.json b/internal/data/assets/plugin_6d61696c706f6574811c9dc5_gen.json
index 530fff9f..30c00895 100644
--- a/internal/data/assets/plugin_6d61696c706f6574811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d61696c706f6574811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/075e64fb-acaf-4f0f-bbc8-db7855184970/mailpoet","title":"MailPoet – emails and newsletters in WordPress <= 3.23.1 - Reflected Cross-Site Scripting via URL parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"075e64fb-acaf-4f0f-bbc8-db7855184970"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/075e64fb-acaf-4f0f-bbc8-db7855184970?source=api-prod","cve":"CVE-2019-11843","affectedVersions":"<3.23.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e1371a5-ed2e-4a1b-901e-8aef4d0d3acf/mailpoet","title":"MailPoet – Newsletters, Email Marketing, and Automation  5.30.0-5.33.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e1371a5-ed2e-4a1b-901e-8aef4d0d3acf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e1371a5-ed2e-4a1b-901e-8aef4d0d3acf?source=api-prod","cve":"CVE-2026-57626","affectedVersions":">=5.30.0,<=5.33.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/93bda572-2acf-4a1b-93ac-72dc9537cb4d/mailpoet","title":"MailPoet <= 5.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"93bda572-2acf-4a1b-93ac-72dc9537cb4d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/93bda572-2acf-4a1b-93ac-72dc9537cb4d?source=api-prod","cve":"CVE-2024-12743","affectedVersions":"<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/e688febc-b51b-496a-9ff7-452300956838/mailpoet","title":"MailPoet <= 5.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"e688febc-b51b-496a-9ff7-452300956838"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e688febc-b51b-496a-9ff7-452300956838?source=api-prod","cve":"CVE-2024-10103","affectedVersions":"<=5.3.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/075e64fb-acaf-4f0f-bbc8-db7855184970/mailpoet","title":"MailPoet – emails and newsletters in WordPress <= 3.23.1 - Reflected Cross-Site Scripting via URL parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"075e64fb-acaf-4f0f-bbc8-db7855184970"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/075e64fb-acaf-4f0f-bbc8-db7855184970?source=api-prod","cve":"CVE-2019-11843","affectedVersions":"<3.23.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e1371a5-ed2e-4a1b-901e-8aef4d0d3acf/mailpoet","title":"MailPoet – Newsletters, Email Marketing, and Automation  5.30.0-5.33.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e1371a5-ed2e-4a1b-901e-8aef4d0d3acf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e1371a5-ed2e-4a1b-901e-8aef4d0d3acf?source=api-prod","cve":"CVE-2026-57626","affectedVersions":">=5.30.0,<=5.33.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/93bda572-2acf-4a1b-93ac-72dc9537cb4d/mailpoet","title":"MailPoet <= 5.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"93bda572-2acf-4a1b-93ac-72dc9537cb4d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/93bda572-2acf-4a1b-93ac-72dc9537cb4d?source=api-prod","cve":"CVE-2024-12743","affectedVersions":"<=5.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/af08532a-c269-4568-b673-9f66d4384e35/mailpoet","title":"MailPoet – Newsletters, Email Marketing, and Automation < 5.14.2 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"af08532a-c269-4568-b673-9f66d4384e35"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af08532a-c269-4568-b673-9f66d4384e35?source=api-prod","affectedVersions":"<5.14.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e688febc-b51b-496a-9ff7-452300956838/mailpoet","title":"MailPoet <= 5.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"e688febc-b51b-496a-9ff7-452300956838"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e688febc-b51b-496a-9ff7-452300956838?source=api-prod","cve":"CVE-2024-10103","affectedVersions":"<=5.3.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d6170737465722d77702d6d617073811c9dc5_gen.json b/internal/data/assets/plugin_6d6170737465722d77702d6d617073811c9dc5_gen.json
index 10804603..47c96a8e 100644
--- a/internal/data/assets/plugin_6d6170737465722d77702d6d617073811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d6170737465722d77702d6d617073811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/3f1c13f6-150c-4634-a4d8-176a4d7a2296/mapster-wp-maps","title":"Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-15 21:33:21","sources":[{"name":"Wordfence","remoteId":"3f1c13f6-150c-4634-a4d8-176a4d7a2296"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f1c13f6-150c-4634-a4d8-176a4d7a2296?source=api-prod","cve":"CVE-2024-10592","affectedVersions":"<=1.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a70757f7-63a0-452a-a078-0fb7f82844b6/mapster-wp-maps","title":"Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 19:14:56","sources":[{"name":"Wordfence","remoteId":"a70757f7-63a0-452a-a078-0fb7f82844b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a70757f7-63a0-452a-a078-0fb7f82844b6?source=api-prod","cve":"CVE-2026-12954","affectedVersions":"<=1.23.0","severity":"high"},{"advisoryId":"WPSECADV/WF/b0f2c7f0-ff24-4489-9fb4-8a98ac6dc09a/mapster-wp-maps","title":"Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-25 14:31:06","sources":[{"name":"Wordfence","remoteId":"b0f2c7f0-ff24-4489-9fb4-8a98ac6dc09a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0f2c7f0-ff24-4489-9fb4-8a98ac6dc09a?source=api-prod","cve":"CVE-2025-9044","affectedVersions":"<=1.20.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5ea849a-2017-4354-96e7-18fd309046f2/mapster-wp-maps","title":"Mapster WP Maps < 1.24.0 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5ea849a-2017-4354-96e7-18fd309046f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5ea849a-2017-4354-96e7-18fd309046f2?source=api-prod","cve":"CVE-2026-14839","affectedVersions":"<1.24.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b81c2990-68d1-4d45-9724-262ec017caf1/mapster-wp-maps","title":"Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"b81c2990-68d1-4d45-9724-262ec017caf1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b81c2990-68d1-4d45-9724-262ec017caf1?source=api-prod","cve":"CVE-2024-9235","affectedVersions":"<=1.5.0","severity":"high"},{"advisoryId":"WPSECADV/WF/d38ee896-8cdd-45c5-b393-bdcb7baa7bd3/mapster-wp-maps","title":"Mapster WP Maps <= 1.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"d38ee896-8cdd-45c5-b393-bdcb7baa7bd3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d38ee896-8cdd-45c5-b393-bdcb7baa7bd3?source=api-prod","cve":"CVE-2024-21744","affectedVersions":"<=1.2.38","severity":"medium"},{"advisoryId":"WPSECADV/WF/d694491c-c0f5-4418-805a-db792ea4f712/mapster-wp-maps","title":"Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-30 17:17:30","sources":[{"name":"Wordfence","remoteId":"d694491c-c0f5-4418-805a-db792ea4f712"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d694491c-c0f5-4418-805a-db792ea4f712?source=api-prod","cve":"CVE-2024-13362","affectedVersions":"<=1.9.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ed7587d3-efc0-4274-8cbd-9ce3eda76cdd/mapster-wp-maps","title":"Mapster WP Maps <= 2.0.4 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 11:27:01","sources":[{"name":"Wordfence","remoteId":"ed7587d3-efc0-4274-8cbd-9ce3eda76cdd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed7587d3-efc0-4274-8cbd-9ce3eda76cdd?source=api-prod","cve":"CVE-2026-39720","affectedVersions":"<=2.0.4","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/3f1c13f6-150c-4634-a4d8-176a4d7a2296/mapster-wp-maps","title":"Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-15 21:33:21","sources":[{"name":"Wordfence","remoteId":"3f1c13f6-150c-4634-a4d8-176a4d7a2296"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f1c13f6-150c-4634-a4d8-176a4d7a2296?source=api-prod","cve":"CVE-2024-10592","affectedVersions":"<=1.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/a70757f7-63a0-452a-a078-0fb7f82844b6/mapster-wp-maps","title":"Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 19:14:56","sources":[{"name":"Wordfence","remoteId":"a70757f7-63a0-452a-a078-0fb7f82844b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a70757f7-63a0-452a-a078-0fb7f82844b6?source=api-prod","cve":"CVE-2026-12954","affectedVersions":"<=1.23.0","severity":"high"},{"advisoryId":"WPSECADV/WF/b0f2c7f0-ff24-4489-9fb4-8a98ac6dc09a/mapster-wp-maps","title":"Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-25 14:31:06","sources":[{"name":"Wordfence","remoteId":"b0f2c7f0-ff24-4489-9fb4-8a98ac6dc09a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0f2c7f0-ff24-4489-9fb4-8a98ac6dc09a?source=api-prod","cve":"CVE-2025-9044","affectedVersions":"<=1.20.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5ea849a-2017-4354-96e7-18fd309046f2/mapster-wp-maps","title":"Mapster WP Maps < 1.24.0 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5ea849a-2017-4354-96e7-18fd309046f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5ea849a-2017-4354-96e7-18fd309046f2?source=api-prod","cve":"CVE-2026-14839","affectedVersions":"<1.24.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b81c2990-68d1-4d45-9724-262ec017caf1/mapster-wp-maps","title":"Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"b81c2990-68d1-4d45-9724-262ec017caf1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b81c2990-68d1-4d45-9724-262ec017caf1?source=api-prod","cve":"CVE-2024-9235","affectedVersions":"<=1.5.0","severity":"high"},{"advisoryId":"WPSECADV/WF/d38ee896-8cdd-45c5-b393-bdcb7baa7bd3/mapster-wp-maps","title":"Mapster WP Maps <= 1.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"d38ee896-8cdd-45c5-b393-bdcb7baa7bd3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d38ee896-8cdd-45c5-b393-bdcb7baa7bd3?source=api-prod","cve":"CVE-2024-21744","affectedVersions":"<=1.2.38","severity":"medium"},{"advisoryId":"WPSECADV/WF/d694491c-c0f5-4418-805a-db792ea4f712/mapster-wp-maps","title":"Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-30 17:17:30","sources":[{"name":"Wordfence","remoteId":"d694491c-c0f5-4418-805a-db792ea4f712"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d694491c-c0f5-4418-805a-db792ea4f712?source=api-prod","cve":"CVE-2024-13362","affectedVersions":"<=1.9.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/de1c951f-8b01-44cf-b192-412de9fae4fa/mapster-wp-maps","title":"Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:16:39","sources":[{"name":"Wordfence","remoteId":"de1c951f-8b01-44cf-b192-412de9fae4fa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/de1c951f-8b01-44cf-b192-412de9fae4fa?source=api-prod","cve":"CVE-2026-107743","affectedVersions":"<=2.0.5","severity":"high"},{"advisoryId":"WPSECADV/WF/ed7587d3-efc0-4274-8cbd-9ce3eda76cdd/mapster-wp-maps","title":"Mapster WP Maps <= 2.0.4 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 11:27:01","sources":[{"name":"Wordfence","remoteId":"ed7587d3-efc0-4274-8cbd-9ce3eda76cdd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed7587d3-efc0-4274-8cbd-9ce3eda76cdd?source=api-prod","cve":"CVE-2026-39720","affectedVersions":"<=2.0.4","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d6173766964656f73811c9dc5_gen.json b/internal/data/assets/plugin_6d6173766964656f73811c9dc5_gen.json
index 787829ff..7a252412 100644
--- a/internal/data/assets/plugin_6d6173766964656f73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d6173766964656f73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/6f1fc61a-9760-430e-a8ba-139ffef1a60d/masvideos","title":"MAS Videos <= 1.3.2 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f1fc61a-9760-430e-a8ba-139ffef1a60d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f1fc61a-9760-430e-a8ba-139ffef1a60d?source=api-prod","cve":"CVE-2025-62753","affectedVersions":"<=1.3.2","severity":"high"},{"advisoryId":"WPSECADV/WF/92acc393-b483-4a86-b393-8466867c94d3/masvideos","title":"MAS Videos <= 1.3.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"92acc393-b483-4a86-b393-8466867c94d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92acc393-b483-4a86-b393-8466867c94d3?source=api-prod","cve":"CVE-2026-107907","affectedVersions":"<=1.3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd30fea3-c326-40b7-9b09-e62d65b33926/masvideos","title":"MAS Videos <= 1.3.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd30fea3-c326-40b7-9b09-e62d65b33926"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd30fea3-c326-40b7-9b09-e62d65b33926?source=api-prod","cve":"CVE-2026-32348","affectedVersions":"<=1.3.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/6f1fc61a-9760-430e-a8ba-139ffef1a60d/masvideos","title":"MAS Videos <= 1.3.4 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f1fc61a-9760-430e-a8ba-139ffef1a60d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f1fc61a-9760-430e-a8ba-139ffef1a60d?source=api-prod","cve":"CVE-2025-62753","affectedVersions":"<=1.3.4","severity":"high"},{"advisoryId":"WPSECADV/WF/92acc393-b483-4a86-b393-8466867c94d3/masvideos","title":"MAS Videos <= 1.3.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"92acc393-b483-4a86-b393-8466867c94d3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92acc393-b483-4a86-b393-8466867c94d3?source=api-prod","cve":"CVE-2026-107907","affectedVersions":"<=1.3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd30fea3-c326-40b7-9b09-e62d65b33926/masvideos","title":"MAS Videos <= 1.3.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd30fea3-c326-40b7-9b09-e62d65b33926"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd30fea3-c326-40b7-9b09-e62d65b33926?source=api-prod","cve":"CVE-2026-32348","affectedVersions":"<=1.3.2","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d656469612d6c6962726172792d617373697374616e74811c9dc5_gen.json b/internal/data/assets/plugin_6d656469612d6c6962726172792d617373697374616e74811c9dc5_gen.json
index 10d316d3..40deb9a4 100644
--- a/internal/data/assets/plugin_6d656469612d6c6962726172792d617373697374616e74811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d656469612d6c6962726172792d617373697374616e74811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/05c68377-feb6-442d-a3a0-1fbc246c7cbf/media-library-assistant","title":"Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"05c68377-feb6-442d-a3a0-1fbc246c7cbf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3a0-1fbc246c7cbf?source=api-prod","cve":"CVE-2023-4634","affectedVersions":"<=3.09","severity":"critical"},{"advisoryId":"WPSECADV/WF/0db18319-6552-42f1-b304-aca61780c12c/media-library-assistant","title":"Media Library Assistant <= 3.39 - Authenticated (Author+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"0db18319-6552-42f1-b304-aca61780c12c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0db18319-6552-42f1-b304-aca61780c12c?source=api-prod","cve":"CVE-2026-66600","affectedVersions":"<=3.39","severity":"high"},{"advisoryId":"WPSECADV/WF/0e399651-8992-4949-b7a7-4e8ce199b47a/media-library-assistant","title":"Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-28 18:57:53","sources":[{"name":"Wordfence","remoteId":"0e399651-8992-4949-b7a7-4e8ce199b47a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0e399651-8992-4949-b7a7-4e8ce199b47a?source=api-prod","cve":"CVE-2026-6075","affectedVersions":"<=3.35","severity":"high"},{"advisoryId":"WPSECADV/WF/13602c35-a0f7-4651-af9a-0be9e581893a/media-library-assistant","title":"Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"13602c35-a0f7-4651-af9a-0be9e581893a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13602c35-a0f7-4651-af9a-0be9e581893a?source=api-prod","cve":"CVE-2026-6641","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/14a84b47-b176-475f-b983-00416b603fc4/media-library-assistant","title":"Media Library Assistant <= 3.35 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"14a84b47-b176-475f-b983-00416b603fc4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/14a84b47-b176-475f-b983-00416b603fc4?source=api-prod","cve":"CVE-2026-56012","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/21456889-058c-46a5-80c3-a0c8f90cd3bf/media-library-assistant","title":"Media Library Assistant <= 2.81 - Remote Code Execution via tax_query, meta_query, date_query Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"21456889-058c-46a5-80c3-a0c8f90cd3bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21456889-058c-46a5-80c3-a0c8f90cd3bf?source=api-prod","cve":"CVE-2020-11928","affectedVersions":"<=2.81","severity":"critical"},{"advisoryId":"WPSECADV/WF/2655f936-8177-4836-a0b0-1c637290a3bc/media-library-assistant","title":"Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-04 16:31:21","sources":[{"name":"Wordfence","remoteId":"2655f936-8177-4836-a0b0-1c637290a3bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2655f936-8177-4836-a0b0-1c637290a3bc?source=api-prod","cve":"CVE-2026-3072","affectedVersions":"<=3.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/2bb47ffd-1375-444c-8c55-05b59cb03f63/media-library-assistant","title":"Media Library Assistant <= 3.34 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"2bb47ffd-1375-444c-8c55-05b59cb03f63"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2bb47ffd-1375-444c-8c55-05b59cb03f63?source=api-prod","cve":"CVE-2026-34885","affectedVersions":"<=3.34","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ef402a9-b194-444c-9af4-5f79ab573beb/media-library-assistant","title":"Media Library Assistant <= 3.34 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ef402a9-b194-444c-9af4-5f79ab573beb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ef402a9-b194-444c-9af4-5f79ab573beb?source=api-prod","cve":"CVE-2026-34897","affectedVersions":"<=3.34","severity":"medium"},{"advisoryId":"WPSECADV/WF/3ba8a9f5-0633-4cf0-af27-5466d93e9020/media-library-assistant","title":"Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ba8a9f5-0633-4cf0-af27-5466d93e9020"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ba8a9f5-0633-4cf0-af27-5466d93e9020?source=api-prod","cve":"CVE-2024-5605","affectedVersions":"<=3.16","severity":"high"},{"advisoryId":"WPSECADV/WF/43d1264a-2265-4423-a643-7ef6436d3764/media-library-assistant","title":"Media Library Assistant <= 3.29 - Unauthenticated Limited File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-17 17:26:53","sources":[{"name":"Wordfence","remoteId":"43d1264a-2265-4423-a643-7ef6436d3764"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43d1264a-2265-4423-a643-7ef6436d3764?source=api-prod","cve":"CVE-2025-11738","affectedVersions":"<=3.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/4414cabb-765d-4ba9-be7a-acaf9ea6e45f/media-library-assistant","title":"Media Library Assistant <= 3.35 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"4414cabb-765d-4ba9-be7a-acaf9ea6e45f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4414cabb-765d-4ba9-be7a-acaf9ea6e45f?source=api-prod","cve":"CVE-2026-54198","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e907100-156d-4228-a2da-572af6d818e0/media-library-assistant","title":"Media Library Assistant <= 3.41 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 09:10:00","sources":[{"name":"Wordfence","remoteId":"4e907100-156d-4228-a2da-572af6d818e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e907100-156d-4228-a2da-572af6d818e0?source=api-prod","cve":"CVE-2026-97294","affectedVersions":"<=3.41","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b5296ad-73c9-4a21-913a-47b3dc170a47/media-library-assistant","title":"Media Library Assistant <= 3.42 - Authenticated (Author+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:08:00","sources":[{"name":"Wordfence","remoteId":"5b5296ad-73c9-4a21-913a-47b3dc170a47"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b5296ad-73c9-4a21-913a-47b3dc170a47?source=api-prod","cve":"CVE-2026-115948","affectedVersions":"<=3.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b989ad5-6c1d-4968-87e9-1af590140aa1/media-library-assistant","title":"Media Library Assistant <= 3.41 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"5b989ad5-6c1d-4968-87e9-1af590140aa1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b989ad5-6c1d-4968-87e9-1af590140aa1?source=api-prod","cve":"CVE-2026-95609","affectedVersions":"<=3.41","severity":"high"},{"advisoryId":"WPSECADV/WF/5f902f32-342e-4d5c-9c2c-4ee682248b8a/media-library-assistant","title":"Media Library Assistant <= 3.29 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f902f32-342e-4d5c-9c2c-4ee682248b8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f902f32-342e-4d5c-9c2c-4ee682248b8a?source=api-prod","cve":"CVE-2025-63065","affectedVersions":"<=3.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/639009f6-9877-45a9-b9f3-7256bc6f3360/media-library-assistant","title":"Media Library Assistant <= 3.07 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"639009f6-9877-45a9-b9f3-7256bc6f3360"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/639009f6-9877-45a9-b9f3-7256bc6f3360?source=api-prod","cve":"CVE-2023-34010","affectedVersions":"<=3.0.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/63ed73c9-2b61-4811-ba7f-1803982f17bc/media-library-assistant","title":"Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"63ed73c9-2b61-4811-ba7f-1803982f17bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63ed73c9-2b61-4811-ba7f-1803982f17bc?source=api-prod","cve":"CVE-2024-2475","affectedVersions":"<=3.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/64bf69a8-7d6f-48a8-aabb-29945353cb93/media-library-assistant","title":"Media Library Assistant <= 3.42 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:01:00","sources":[{"name":"Wordfence","remoteId":"64bf69a8-7d6f-48a8-aabb-29945353cb93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64bf69a8-7d6f-48a8-aabb-29945353cb93?source=api-prod","cve":"CVE-2026-97295","affectedVersions":"<=3.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/65f4e5e1-4c2e-4943-aa84-4caa61e14bc2/media-library-assistant","title":"Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-03 18:55:35","sources":[{"name":"Wordfence","remoteId":"65f4e5e1-4c2e-4943-aa84-4caa61e14bc2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65f4e5e1-4c2e-4943-aa84-4caa61e14bc2?source=api-prod","cve":"CVE-2024-11974","affectedVersions":"<=3.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e45dc8a-b777-4a49-b1b1-c59ffa75f5b4/media-library-assistant","title":"Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e45dc8a-b777-4a49-b1b1-c59ffa75f5b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e45dc8a-b777-4a49-b1b1-c59ffa75f5b4?source=api-prod","cve":"CVE-2026-6642","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/736e0010-f1fc-42c4-8173-b81c5c78e34e/media-library-assistant","title":"Media Library Assistant <= 3.38 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"736e0010-f1fc-42c4-8173-b81c5c78e34e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/736e0010-f1fc-42c4-8173-b81c5c78e34e?source=api-prod","cve":"CVE-2026-61963","affectedVersions":"<=3.38","severity":"high"},{"advisoryId":"WPSECADV/WF/7a1b0440-743a-4c6f-aea5-bd46037dd149/media-library-assistant","title":"Media Library Assistant <= 3.28 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"7a1b0440-743a-4c6f-aea5-bd46037dd149"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a1b0440-743a-4c6f-aea5-bd46037dd149?source=api-prod","cve":"CVE-2025-59590","affectedVersions":"<=3.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/7e1cdaf3-76fe-4b73-b30b-4554f0d34d11/media-library-assistant","title":"Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-21 11:13:42","sources":[{"name":"Wordfence","remoteId":"7e1cdaf3-76fe-4b73-b30b-4554f0d34d11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e1cdaf3-76fe-4b73-b30b-4554f0d34d11?source=api-prod","cve":"CVE-2024-3519","affectedVersions":"<=3.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/8726375f-de67-4c92-9cf8-1bfb7330f327/media-library-assistant","title":"Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-18 16:23:26","sources":[{"name":"Wordfence","remoteId":"8726375f-de67-4c92-9cf8-1bfb7330f327"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8726375f-de67-4c92-9cf8-1bfb7330f327?source=api-prod","cve":"CVE-2025-8357","affectedVersions":"<=3.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/8b1cf5dc-c823-4603-959a-5dfc21f7d338/media-library-assistant","title":"Media Library Assistant <= 3.00 - Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8b1cf5dc-c823-4603-959a-5dfc21f7d338"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8b1cf5dc-c823-4603-959a-5dfc21f7d338?source=api-prod","cve":"CVE-2022-41618","affectedVersions":"<=3.00","severity":"medium"},{"advisoryId":"WPSECADV/WF/9a446fe7-c97a-436e-b494-b924e6518297/media-library-assistant","title":"Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-12 16:35:37","sources":[{"name":"Wordfence","remoteId":"9a446fe7-c97a-436e-b494-b924e6518297"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a446fe7-c97a-436e-b494-b924e6518297?source=api-prod","cve":"CVE-2024-6823","affectedVersions":"<=3.18","severity":"high"},{"advisoryId":"WPSECADV/WF/9cfa4cb3-0f16-40be-9e78-ea378c3f535f/media-library-assistant","title":"Media Library Assistant <= 2.73 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-05-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"9cfa4cb3-0f16-40be-9e78-ea378c3f535f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9cfa4cb3-0f16-40be-9e78-ea378c3f535f?source=api-prod","cve":"CVE-2018-20982","affectedVersions":"<2.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/9e63fb84-a16b-447f-be73-e01f30881445/media-library-assistant","title":"Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"9e63fb84-a16b-447f-be73-e01f30881445"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9e63fb84-a16b-447f-be73-e01f30881445?source=api-prod","cve":"CVE-2024-2871","affectedVersions":"<=3.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/9eb1c2b3-527c-45b6-a1bd-dc9c553b8aa8/media-library-assistant","title":"Media Library Assistant <= 3.24 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"9eb1c2b3-527c-45b6-a1bd-dc9c553b8aa8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9eb1c2b3-527c-45b6-a1bd-dc9c553b8aa8?source=api-prod","cve":"CVE-2025-31627","affectedVersions":"<=3.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f70377f-5b9d-4595-b22c-88aa30900a6f/media-library-assistant","title":"Media LIbrary Assistant <= 3.32 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f70377f-5b9d-4595-b22c-88aa30900a6f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f70377f-5b9d-4595-b22c-88aa30900a6f?source=api-prod","cve":"CVE-2026-32399","affectedVersions":"<=3.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1603dc9-7f5e-47e1-8a81-27bb4df1aa4f/media-library-assistant","title":"Media Library Assistant <= 3.11 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1603dc9-7f5e-47e1-8a81-27bb4df1aa4f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1603dc9-7f5e-47e1-8a81-27bb4df1aa4f?source=api-prod","cve":"CVE-2023-24385","affectedVersions":"<=3.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/a7af1a03-8382-4593-a41f-8cdb1bb9e53b/media-library-assistant","title":"Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-21 11:12:32","sources":[{"name":"Wordfence","remoteId":"a7af1a03-8382-4593-a41f-8cdb1bb9e53b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a7af1a03-8382-4593-a41f-8cdb1bb9e53b?source=api-prod","cve":"CVE-2024-3518","affectedVersions":"<=3.15","severity":"high"},{"advisoryId":"WPSECADV/WF/ac0abf8e-6efd-4cf5-ad03-8442d892a35f/media-library-assistant","title":"Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac0abf8e-6efd-4cf5-ad03-8442d892a35f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac0abf8e-6efd-4cf5-ad03-8442d892a35f?source=api-prod","cve":"CVE-2026-6640","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/b152b6fa-66f3-4a43-9d6a-4f6c0b85acc7/media-library-assistant","title":"Media Library Assistant <= 3.41 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"b152b6fa-66f3-4a43-9d6a-4f6c0b85acc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b152b6fa-66f3-4a43-9d6a-4f6c0b85acc7?source=api-prod","cve":"CVE-2026-97293","affectedVersions":"<=3.41","severity":"medium"},{"advisoryId":"WPSECADV/WF/b6e02a2b-9033-4022-a7d7-1c81a7f02f83/media-library-assistant","title":"Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-15 20:30:10","sources":[{"name":"Wordfence","remoteId":"b6e02a2b-9033-4022-a7d7-1c81a7f02f83"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b6e02a2b-9033-4022-a7d7-1c81a7f02f83?source=api-prod","cve":"CVE-2025-7035","affectedVersions":"<=3.26","severity":"medium"},{"advisoryId":"WPSECADV/WF/bb581a8a-8e68-4f5a-8f05-d5b91b0f70d4/media-library-assistant","title":"Media Library Assistant <= 2.81 - Authenticated Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb581a8a-8e68-4f5a-8f05-d5b91b0f70d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb581a8a-8e68-4f5a-8f05-d5b91b0f70d4?source=api-prod","cve":"CVE-2020-11731","affectedVersions":"<2.82","severity":"medium"},{"advisoryId":"WPSECADV/WF/bf527307-185b-4808-a3fc-d3ecafbd34e7/media-library-assistant","title":"Media Library Assistant <= 3.19 - Authenticated (Administrator+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"bf527307-185b-4808-a3fc-d3ecafbd34e7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bf527307-185b-4808-a3fc-d3ecafbd34e7?source=api-prod","cve":"CVE-2024-51661","affectedVersions":"<=3.19","severity":"high"},{"advisoryId":"WPSECADV/WF/c49811bf-19d5-450f-9f11-a5fc9e8781c8/media-library-assistant","title":"Media Library Assistant <= 2.81 - Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c49811bf-19d5-450f-9f11-a5fc9e8781c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c49811bf-19d5-450f-9f11-a5fc9e8781c8?source=api-prod","cve":"CVE-2020-11732","affectedVersions":"<=2.81","severity":"high"},{"advisoryId":"WPSECADV/WF/c5f6ae5d-7854-44c7-9fb8-efaa6e850d59/media-library-assistant","title":"Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5f6ae5d-7854-44c7-9fb8-efaa6e850d59"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5f6ae5d-7854-44c7-9fb8-efaa6e850d59?source=api-prod","cve":"CVE-2023-4716","affectedVersions":"<=3.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/ccce77cf-e9a9-4fbc-a99d-b9732dce3e73/media-library-assistant","title":"Media Library Assistant <= 3.42 - Authenticated (Contributor+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:28:00","sources":[{"name":"Wordfence","remoteId":"ccce77cf-e9a9-4fbc-a99d-b9732dce3e73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ccce77cf-e9a9-4fbc-a99d-b9732dce3e73?source=api-prod","cve":"CVE-2026-115594","affectedVersions":"<=3.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/cf0c34d3-5c7d-43a5-9430-2ebdc155123f/media-library-assistant","title":"Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-01 19:02:32","sources":[{"name":"Wordfence","remoteId":"cf0c34d3-5c7d-43a5-9430-2ebdc155123f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cf0c34d3-5c7d-43a5-9430-2ebdc155123f?source=api-prod","cve":"CVE-2024-5544","affectedVersions":"<=3.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2885b38-9e5a-4e06-ad1d-9c3b266f78a8/media-library-assistant","title":"Media Library Assistant <= 3.39 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2885b38-9e5a-4e06-ad1d-9c3b266f78a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2885b38-9e5a-4e06-ad1d-9c3b266f78a8?source=api-prod","cve":"CVE-2026-66591","affectedVersions":"<=3.39","severity":"medium"},{"advisoryId":"WPSECADV/WF/d87133a0-d24a-4c6a-8d6b-3867a319796a/media-library-assistant","title":"Media Library Assistant <= 3.39 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d87133a0-d24a-4c6a-8d6b-3867a319796a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d87133a0-d24a-4c6a-8d6b-3867a319796a?source=api-prod","cve":"CVE-2026-66601","affectedVersions":"<=3.39","severity":"medium"},{"advisoryId":"WPSECADV/WF/e554855b-a8d2-4187-9d86-c47d648a29ec/media-library-assistant","title":"Media Library Assistant < 3.40 - Authenticated (Author+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"e554855b-a8d2-4187-9d86-c47d648a29ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e554855b-a8d2-4187-9d86-c47d648a29ec?source=api-prod","cve":"CVE-2026-16959","affectedVersions":"<3.40","severity":"medium"},{"advisoryId":"WPSECADV/WF/ecc59a6f-5e4a-44b4-932d-ed990ebb075a/media-library-assistant","title":"Media Library Assistant <= 3.05 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"ecc59a6f-5e4a-44b4-932d-ed990ebb075a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ecc59a6f-5e4a-44b4-932d-ed990ebb075a?source=api-prod","cve":"CVE-2023-0279","affectedVersions":"<=3.05","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/05c68377-feb6-442d-a3a0-1fbc246c7cbf/media-library-assistant","title":"Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"05c68377-feb6-442d-a3a0-1fbc246c7cbf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3a0-1fbc246c7cbf?source=api-prod","cve":"CVE-2023-4634","affectedVersions":"<=3.09","severity":"critical"},{"advisoryId":"WPSECADV/WF/0b93b20c-32ff-467f-82f7-31ef2bf13d8e/media-library-assistant","title":"Media Library Assistant < 3.42 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b93b20c-32ff-467f-82f7-31ef2bf13d8e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b93b20c-32ff-467f-82f7-31ef2bf13d8e?source=api-prod","cve":"CVE-2026-113485","affectedVersions":"<3.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/0db18319-6552-42f1-b304-aca61780c12c/media-library-assistant","title":"Media Library Assistant <= 3.39 - Authenticated (Author+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"0db18319-6552-42f1-b304-aca61780c12c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0db18319-6552-42f1-b304-aca61780c12c?source=api-prod","cve":"CVE-2026-66600","affectedVersions":"<=3.39","severity":"high"},{"advisoryId":"WPSECADV/WF/0e399651-8992-4949-b7a7-4e8ce199b47a/media-library-assistant","title":"Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-28 18:57:53","sources":[{"name":"Wordfence","remoteId":"0e399651-8992-4949-b7a7-4e8ce199b47a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0e399651-8992-4949-b7a7-4e8ce199b47a?source=api-prod","cve":"CVE-2026-6075","affectedVersions":"<=3.35","severity":"high"},{"advisoryId":"WPSECADV/WF/13602c35-a0f7-4651-af9a-0be9e581893a/media-library-assistant","title":"Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"13602c35-a0f7-4651-af9a-0be9e581893a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13602c35-a0f7-4651-af9a-0be9e581893a?source=api-prod","cve":"CVE-2026-6641","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/14a84b47-b176-475f-b983-00416b603fc4/media-library-assistant","title":"Media Library Assistant <= 3.35 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"14a84b47-b176-475f-b983-00416b603fc4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/14a84b47-b176-475f-b983-00416b603fc4?source=api-prod","cve":"CVE-2026-56012","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/21456889-058c-46a5-80c3-a0c8f90cd3bf/media-library-assistant","title":"Media Library Assistant <= 2.81 - Remote Code Execution via tax_query, meta_query, date_query Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"21456889-058c-46a5-80c3-a0c8f90cd3bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21456889-058c-46a5-80c3-a0c8f90cd3bf?source=api-prod","cve":"CVE-2020-11928","affectedVersions":"<=2.81","severity":"critical"},{"advisoryId":"WPSECADV/WF/2655f936-8177-4836-a0b0-1c637290a3bc/media-library-assistant","title":"Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-04 16:31:21","sources":[{"name":"Wordfence","remoteId":"2655f936-8177-4836-a0b0-1c637290a3bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2655f936-8177-4836-a0b0-1c637290a3bc?source=api-prod","cve":"CVE-2026-3072","affectedVersions":"<=3.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/2bb47ffd-1375-444c-8c55-05b59cb03f63/media-library-assistant","title":"Media Library Assistant <= 3.34 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"2bb47ffd-1375-444c-8c55-05b59cb03f63"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2bb47ffd-1375-444c-8c55-05b59cb03f63?source=api-prod","cve":"CVE-2026-34885","affectedVersions":"<=3.34","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ef402a9-b194-444c-9af4-5f79ab573beb/media-library-assistant","title":"Media Library Assistant <= 3.34 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ef402a9-b194-444c-9af4-5f79ab573beb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ef402a9-b194-444c-9af4-5f79ab573beb?source=api-prod","cve":"CVE-2026-34897","affectedVersions":"<=3.34","severity":"medium"},{"advisoryId":"WPSECADV/WF/357d9d96-afb1-4b62-90cf-8d38a4cede0e/media-library-assistant","title":"Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:17:01","sources":[{"name":"Wordfence","remoteId":"357d9d96-afb1-4b62-90cf-8d38a4cede0e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/357d9d96-afb1-4b62-90cf-8d38a4cede0e?source=api-prod","cve":"CVE-2026-103875","affectedVersions":"<=3.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/3ba8a9f5-0633-4cf0-af27-5466d93e9020/media-library-assistant","title":"Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ba8a9f5-0633-4cf0-af27-5466d93e9020"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ba8a9f5-0633-4cf0-af27-5466d93e9020?source=api-prod","cve":"CVE-2024-5605","affectedVersions":"<=3.16","severity":"high"},{"advisoryId":"WPSECADV/WF/43d1264a-2265-4423-a643-7ef6436d3764/media-library-assistant","title":"Media Library Assistant <= 3.29 - Unauthenticated Limited File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-17 17:26:53","sources":[{"name":"Wordfence","remoteId":"43d1264a-2265-4423-a643-7ef6436d3764"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43d1264a-2265-4423-a643-7ef6436d3764?source=api-prod","cve":"CVE-2025-11738","affectedVersions":"<=3.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/4414cabb-765d-4ba9-be7a-acaf9ea6e45f/media-library-assistant","title":"Media Library Assistant <= 3.35 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"4414cabb-765d-4ba9-be7a-acaf9ea6e45f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4414cabb-765d-4ba9-be7a-acaf9ea6e45f?source=api-prod","cve":"CVE-2026-54198","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e907100-156d-4228-a2da-572af6d818e0/media-library-assistant","title":"Media Library Assistant <= 3.41 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-07 09:10:00","sources":[{"name":"Wordfence","remoteId":"4e907100-156d-4228-a2da-572af6d818e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e907100-156d-4228-a2da-572af6d818e0?source=api-prod","cve":"CVE-2026-97294","affectedVersions":"<=3.41","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b5296ad-73c9-4a21-913a-47b3dc170a47/media-library-assistant","title":"Media Library Assistant <= 3.42 - Authenticated (Author+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:08:00","sources":[{"name":"Wordfence","remoteId":"5b5296ad-73c9-4a21-913a-47b3dc170a47"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b5296ad-73c9-4a21-913a-47b3dc170a47?source=api-prod","cve":"CVE-2026-115948","affectedVersions":"<=3.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/5b989ad5-6c1d-4968-87e9-1af590140aa1/media-library-assistant","title":"Media Library Assistant <= 3.41 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"5b989ad5-6c1d-4968-87e9-1af590140aa1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5b989ad5-6c1d-4968-87e9-1af590140aa1?source=api-prod","cve":"CVE-2026-95609","affectedVersions":"<=3.41","severity":"high"},{"advisoryId":"WPSECADV/WF/5f902f32-342e-4d5c-9c2c-4ee682248b8a/media-library-assistant","title":"Media Library Assistant <= 3.29 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f902f32-342e-4d5c-9c2c-4ee682248b8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f902f32-342e-4d5c-9c2c-4ee682248b8a?source=api-prod","cve":"CVE-2025-63065","affectedVersions":"<=3.29","severity":"medium"},{"advisoryId":"WPSECADV/WF/639009f6-9877-45a9-b9f3-7256bc6f3360/media-library-assistant","title":"Media Library Assistant <= 3.07 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"639009f6-9877-45a9-b9f3-7256bc6f3360"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/639009f6-9877-45a9-b9f3-7256bc6f3360?source=api-prod","cve":"CVE-2023-34010","affectedVersions":"<=3.0.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/63ed73c9-2b61-4811-ba7f-1803982f17bc/media-library-assistant","title":"Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"63ed73c9-2b61-4811-ba7f-1803982f17bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63ed73c9-2b61-4811-ba7f-1803982f17bc?source=api-prod","cve":"CVE-2024-2475","affectedVersions":"<=3.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/64bf69a8-7d6f-48a8-aabb-29945353cb93/media-library-assistant","title":"Media Library Assistant <= 3.42 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:01:00","sources":[{"name":"Wordfence","remoteId":"64bf69a8-7d6f-48a8-aabb-29945353cb93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64bf69a8-7d6f-48a8-aabb-29945353cb93?source=api-prod","cve":"CVE-2026-97295","affectedVersions":"<=3.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/65f4e5e1-4c2e-4943-aa84-4caa61e14bc2/media-library-assistant","title":"Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-03 18:55:35","sources":[{"name":"Wordfence","remoteId":"65f4e5e1-4c2e-4943-aa84-4caa61e14bc2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65f4e5e1-4c2e-4943-aa84-4caa61e14bc2?source=api-prod","cve":"CVE-2024-11974","affectedVersions":"<=3.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/6e45dc8a-b777-4a49-b1b1-c59ffa75f5b4/media-library-assistant","title":"Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e45dc8a-b777-4a49-b1b1-c59ffa75f5b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e45dc8a-b777-4a49-b1b1-c59ffa75f5b4?source=api-prod","cve":"CVE-2026-6642","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/736e0010-f1fc-42c4-8173-b81c5c78e34e/media-library-assistant","title":"Media Library Assistant <= 3.38 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"736e0010-f1fc-42c4-8173-b81c5c78e34e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/736e0010-f1fc-42c4-8173-b81c5c78e34e?source=api-prod","cve":"CVE-2026-61963","affectedVersions":"<=3.38","severity":"high"},{"advisoryId":"WPSECADV/WF/7a1b0440-743a-4c6f-aea5-bd46037dd149/media-library-assistant","title":"Media Library Assistant <= 3.28 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"7a1b0440-743a-4c6f-aea5-bd46037dd149"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a1b0440-743a-4c6f-aea5-bd46037dd149?source=api-prod","cve":"CVE-2025-59590","affectedVersions":"<=3.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/7e1cdaf3-76fe-4b73-b30b-4554f0d34d11/media-library-assistant","title":"Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-21 11:13:42","sources":[{"name":"Wordfence","remoteId":"7e1cdaf3-76fe-4b73-b30b-4554f0d34d11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e1cdaf3-76fe-4b73-b30b-4554f0d34d11?source=api-prod","cve":"CVE-2024-3519","affectedVersions":"<=3.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/8726375f-de67-4c92-9cf8-1bfb7330f327/media-library-assistant","title":"Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-18 16:23:26","sources":[{"name":"Wordfence","remoteId":"8726375f-de67-4c92-9cf8-1bfb7330f327"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8726375f-de67-4c92-9cf8-1bfb7330f327?source=api-prod","cve":"CVE-2025-8357","affectedVersions":"<=3.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/8b1cf5dc-c823-4603-959a-5dfc21f7d338/media-library-assistant","title":"Media Library Assistant <= 3.00 - Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8b1cf5dc-c823-4603-959a-5dfc21f7d338"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8b1cf5dc-c823-4603-959a-5dfc21f7d338?source=api-prod","cve":"CVE-2022-41618","affectedVersions":"<=3.00","severity":"medium"},{"advisoryId":"WPSECADV/WF/9a446fe7-c97a-436e-b494-b924e6518297/media-library-assistant","title":"Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-12 16:35:37","sources":[{"name":"Wordfence","remoteId":"9a446fe7-c97a-436e-b494-b924e6518297"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a446fe7-c97a-436e-b494-b924e6518297?source=api-prod","cve":"CVE-2024-6823","affectedVersions":"<=3.18","severity":"high"},{"advisoryId":"WPSECADV/WF/9cfa4cb3-0f16-40be-9e78-ea378c3f535f/media-library-assistant","title":"Media Library Assistant <= 2.73 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-05-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"9cfa4cb3-0f16-40be-9e78-ea378c3f535f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9cfa4cb3-0f16-40be-9e78-ea378c3f535f?source=api-prod","cve":"CVE-2018-20982","affectedVersions":"<2.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/9e63fb84-a16b-447f-be73-e01f30881445/media-library-assistant","title":"Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"9e63fb84-a16b-447f-be73-e01f30881445"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9e63fb84-a16b-447f-be73-e01f30881445?source=api-prod","cve":"CVE-2024-2871","affectedVersions":"<=3.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/9eb1c2b3-527c-45b6-a1bd-dc9c553b8aa8/media-library-assistant","title":"Media Library Assistant <= 3.24 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"9eb1c2b3-527c-45b6-a1bd-dc9c553b8aa8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9eb1c2b3-527c-45b6-a1bd-dc9c553b8aa8?source=api-prod","cve":"CVE-2025-31627","affectedVersions":"<=3.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f70377f-5b9d-4595-b22c-88aa30900a6f/media-library-assistant","title":"Media LIbrary Assistant <= 3.32 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"9f70377f-5b9d-4595-b22c-88aa30900a6f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f70377f-5b9d-4595-b22c-88aa30900a6f?source=api-prod","cve":"CVE-2026-32399","affectedVersions":"<=3.32","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1603dc9-7f5e-47e1-8a81-27bb4df1aa4f/media-library-assistant","title":"Media Library Assistant <= 3.11 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1603dc9-7f5e-47e1-8a81-27bb4df1aa4f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1603dc9-7f5e-47e1-8a81-27bb4df1aa4f?source=api-prod","cve":"CVE-2023-24385","affectedVersions":"<=3.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/a7af1a03-8382-4593-a41f-8cdb1bb9e53b/media-library-assistant","title":"Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-21 11:12:32","sources":[{"name":"Wordfence","remoteId":"a7af1a03-8382-4593-a41f-8cdb1bb9e53b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a7af1a03-8382-4593-a41f-8cdb1bb9e53b?source=api-prod","cve":"CVE-2024-3518","affectedVersions":"<=3.15","severity":"high"},{"advisoryId":"WPSECADV/WF/ac0abf8e-6efd-4cf5-ad03-8442d892a35f/media-library-assistant","title":"Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac0abf8e-6efd-4cf5-ad03-8442d892a35f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac0abf8e-6efd-4cf5-ad03-8442d892a35f?source=api-prod","cve":"CVE-2026-6640","affectedVersions":"<=3.35","severity":"medium"},{"advisoryId":"WPSECADV/WF/b152b6fa-66f3-4a43-9d6a-4f6c0b85acc7/media-library-assistant","title":"Media Library Assistant <= 3.41 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"b152b6fa-66f3-4a43-9d6a-4f6c0b85acc7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b152b6fa-66f3-4a43-9d6a-4f6c0b85acc7?source=api-prod","cve":"CVE-2026-97293","affectedVersions":"<=3.41","severity":"medium"},{"advisoryId":"WPSECADV/WF/b6e02a2b-9033-4022-a7d7-1c81a7f02f83/media-library-assistant","title":"Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-15 20:30:10","sources":[{"name":"Wordfence","remoteId":"b6e02a2b-9033-4022-a7d7-1c81a7f02f83"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b6e02a2b-9033-4022-a7d7-1c81a7f02f83?source=api-prod","cve":"CVE-2025-7035","affectedVersions":"<=3.26","severity":"medium"},{"advisoryId":"WPSECADV/WF/bb581a8a-8e68-4f5a-8f05-d5b91b0f70d4/media-library-assistant","title":"Media Library Assistant <= 2.81 - Authenticated Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb581a8a-8e68-4f5a-8f05-d5b91b0f70d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb581a8a-8e68-4f5a-8f05-d5b91b0f70d4?source=api-prod","cve":"CVE-2020-11731","affectedVersions":"<2.82","severity":"medium"},{"advisoryId":"WPSECADV/WF/bf527307-185b-4808-a3fc-d3ecafbd34e7/media-library-assistant","title":"Media Library Assistant <= 3.19 - Authenticated (Administrator+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"bf527307-185b-4808-a3fc-d3ecafbd34e7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bf527307-185b-4808-a3fc-d3ecafbd34e7?source=api-prod","cve":"CVE-2024-51661","affectedVersions":"<=3.19","severity":"high"},{"advisoryId":"WPSECADV/WF/c49811bf-19d5-450f-9f11-a5fc9e8781c8/media-library-assistant","title":"Media Library Assistant <= 2.81 - Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c49811bf-19d5-450f-9f11-a5fc9e8781c8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c49811bf-19d5-450f-9f11-a5fc9e8781c8?source=api-prod","cve":"CVE-2020-11732","affectedVersions":"<=2.81","severity":"high"},{"advisoryId":"WPSECADV/WF/c5f6ae5d-7854-44c7-9fb8-efaa6e850d59/media-library-assistant","title":"Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5f6ae5d-7854-44c7-9fb8-efaa6e850d59"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5f6ae5d-7854-44c7-9fb8-efaa6e850d59?source=api-prod","cve":"CVE-2023-4716","affectedVersions":"<=3.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/c800a65a-e545-465c-84c7-a2cd3d393477/media-library-assistant","title":"Media Library Assistant < 3.42 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"c800a65a-e545-465c-84c7-a2cd3d393477"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c800a65a-e545-465c-84c7-a2cd3d393477?source=api-prod","cve":"CVE-2026-113486","affectedVersions":"<3.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/ccce77cf-e9a9-4fbc-a99d-b9732dce3e73/media-library-assistant","title":"Media Library Assistant <= 3.42 - Authenticated (Contributor+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:28:00","sources":[{"name":"Wordfence","remoteId":"ccce77cf-e9a9-4fbc-a99d-b9732dce3e73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ccce77cf-e9a9-4fbc-a99d-b9732dce3e73?source=api-prod","cve":"CVE-2026-115594","affectedVersions":"<=3.42","severity":"medium"},{"advisoryId":"WPSECADV/WF/cf0c34d3-5c7d-43a5-9430-2ebdc155123f/media-library-assistant","title":"Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-01 19:02:32","sources":[{"name":"Wordfence","remoteId":"cf0c34d3-5c7d-43a5-9430-2ebdc155123f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cf0c34d3-5c7d-43a5-9430-2ebdc155123f?source=api-prod","cve":"CVE-2024-5544","affectedVersions":"<=3.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2885b38-9e5a-4e06-ad1d-9c3b266f78a8/media-library-assistant","title":"Media Library Assistant <= 3.39 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2885b38-9e5a-4e06-ad1d-9c3b266f78a8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2885b38-9e5a-4e06-ad1d-9c3b266f78a8?source=api-prod","cve":"CVE-2026-66591","affectedVersions":"<=3.39","severity":"medium"},{"advisoryId":"WPSECADV/WF/d87133a0-d24a-4c6a-8d6b-3867a319796a/media-library-assistant","title":"Media Library Assistant <= 3.39 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d87133a0-d24a-4c6a-8d6b-3867a319796a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d87133a0-d24a-4c6a-8d6b-3867a319796a?source=api-prod","cve":"CVE-2026-66601","affectedVersions":"<=3.39","severity":"medium"},{"advisoryId":"WPSECADV/WF/e554855b-a8d2-4187-9d86-c47d648a29ec/media-library-assistant","title":"Media Library Assistant < 3.40 - Authenticated (Author+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"e554855b-a8d2-4187-9d86-c47d648a29ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e554855b-a8d2-4187-9d86-c47d648a29ec?source=api-prod","cve":"CVE-2026-16959","affectedVersions":"<3.40","severity":"medium"},{"advisoryId":"WPSECADV/WF/ecc59a6f-5e4a-44b4-932d-ed990ebb075a/media-library-assistant","title":"Media Library Assistant <= 3.05 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"ecc59a6f-5e4a-44b4-932d-ed990ebb075a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ecc59a6f-5e4a-44b4-932d-ed990ebb075a?source=api-prod","cve":"CVE-2023-0279","affectedVersions":"<=3.05","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d6567612d6164646f6e732d666f722d76697375616c2d636f6d706f736572811c9dc5_gen.json b/internal/data/assets/plugin_6d6567612d6164646f6e732d666f722d76697375616c2d636f6d706f736572811c9dc5_gen.json
index 27caabc5..87d8381f 100644
--- a/internal/data/assets/plugin_6d6567612d6164646f6e732d666f722d76697375616c2d636f6d706f736572811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d6567612d6164646f6e732d666f722d76697375616c2d636f6d706f736572811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/33aed550-5a2d-4a0a-8199-f2dfd212be92/mega-addons-for-visual-composer","title":"Mega Addons For WPBakery Page Builder <= 4.2.7 - Cross-Site Request Forgery to Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"33aed550-5a2d-4a0a-8199-f2dfd212be92"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33aed550-5a2d-4a0a-8199-f2dfd212be92?source=api-prod","cve":"CVE-2022-36798","affectedVersions":"<=4.2.7","severity":"high"},{"advisoryId":"WPSECADV/WF/a1eda885-7e10-4294-9748-5359efd51754/mega-addons-for-visual-composer","title":"Mega Addons For WPBakery Page Builder <= 4.3.0 - Authenticated (Subscriber+) Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1eda885-7e10-4294-9748-5359efd51754"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1eda885-7e10-4294-9748-5359efd51754?source=api-prod","cve":"CVE-2022-4501","affectedVersions":"<=4.3.0","severity":"high"},{"advisoryId":"WPSECADV/WF/a443b20e-1686-4519-890d-e6f1838fb05c/mega-addons-for-visual-composer","title":"Mega Addons For WPBakery Page Builder <= 4.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"a443b20e-1686-4519-890d-e6f1838fb05c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a443b20e-1686-4519-890d-e6f1838fb05c?source=api-prod","cve":"CVE-2023-0268","affectedVersions":"<=4.2.7","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/33aed550-5a2d-4a0a-8199-f2dfd212be92/mega-addons-for-visual-composer","title":"Mega Addons For WPBakery Page Builder <= 4.3.1 - Cross-Site Request Forgery to Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"33aed550-5a2d-4a0a-8199-f2dfd212be92"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/33aed550-5a2d-4a0a-8199-f2dfd212be92?source=api-prod","cve":"CVE-2022-36798","affectedVersions":"<=4.3.1","severity":"high"},{"advisoryId":"WPSECADV/WF/a1eda885-7e10-4294-9748-5359efd51754/mega-addons-for-visual-composer","title":"Mega Addons For WPBakery Page Builder <= 4.3.0 - Authenticated (Subscriber+) Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1eda885-7e10-4294-9748-5359efd51754"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1eda885-7e10-4294-9748-5359efd51754?source=api-prod","cve":"CVE-2022-4501","affectedVersions":"<=4.3.0","severity":"high"},{"advisoryId":"WPSECADV/WF/a443b20e-1686-4519-890d-e6f1838fb05c/mega-addons-for-visual-composer","title":"Mega Addons For WPBakery Page Builder <= 4.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"a443b20e-1686-4519-890d-e6f1838fb05c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a443b20e-1686-4519-890d-e6f1838fb05c?source=api-prod","cve":"CVE-2023-0268","affectedVersions":"<=4.2.7","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d656d706869732d646f63756d656e74732d6c696272617279811c9dc5_gen.json b/internal/data/assets/plugin_6d656d706869732d646f63756d656e74732d6c696272617279811c9dc5_gen.json
index e284bc85..13429eb4 100644
--- a/internal/data/assets/plugin_6d656d706869732d646f63756d656e74732d6c696272617279811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d656d706869732d646f63756d656e74732d6c696272617279811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2eeeb4b5-972b-471b-8f0f-a198640fc894/memphis-documents-library","title":"Memphis Documents Library <= 2.6.16 - Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"2eeeb4b5-972b-471b-8f0f-a198640fc894"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2eeeb4b5-972b-471b-8f0f-a198640fc894?source=api-prod","cve":"CVE-2014-10384","affectedVersions":"<=2.6.16","severity":"critical"},{"advisoryId":"WPSECADV/WF/9b3201e0-df2a-471e-875b-4ca2c3a659f3/memphis-documents-library","title":"Memphis Documents Library <= 2.6.16 - Remote File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b3201e0-df2a-471e-875b-4ca2c3a659f3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b3201e0-df2a-471e-875b-4ca2c3a659f3?source=api-prod","cve":"CVE-2014-10383","affectedVersions":"<3.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/e8f20aae-37e2-44f6-ac2d-692a87bf5728/memphis-documents-library","title":"Memphis Documents Library <= 2.6.16 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8f20aae-37e2-44f6-ac2d-692a87bf5728"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8f20aae-37e2-44f6-ac2d-692a87bf5728?source=api-prod","cve":"CVE-2014-10385","affectedVersions":"<3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2febf69-b146-4ca5-bfa9-f5477da5cd6c/memphis-documents-library","title":"Memphis Documents Library <= 3.1.5 - Arbitrary File Download\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-03-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2febf69-b146-4ca5-bfa9-f5477da5cd6c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2febf69-b146-4ca5-bfa9-f5477da5cd6c?source=api-prod","affectedVersions":"<=3.1.5","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2eeeb4b5-972b-471b-8f0f-a198640fc894/memphis-documents-library","title":"Memphis Documents Library <= 2.6.16 - Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"2eeeb4b5-972b-471b-8f0f-a198640fc894"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2eeeb4b5-972b-471b-8f0f-a198640fc894?source=api-prod","cve":"CVE-2014-10384","affectedVersions":"<=2.6.16","severity":"critical"},{"advisoryId":"WPSECADV/WF/9b3201e0-df2a-471e-875b-4ca2c3a659f3/memphis-documents-library","title":"Memphis Documents Library <= 2.6.16 - Remote File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b3201e0-df2a-471e-875b-4ca2c3a659f3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b3201e0-df2a-471e-875b-4ca2c3a659f3?source=api-prod","cve":"CVE-2014-10383","affectedVersions":"<3.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/e8f20aae-37e2-44f6-ac2d-692a87bf5728/memphis-documents-library","title":"Memphis Documents Library <= 2.6.16 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8f20aae-37e2-44f6-ac2d-692a87bf5728"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8f20aae-37e2-44f6-ac2d-692a87bf5728?source=api-prod","cve":"CVE-2014-10385","affectedVersions":"<3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2febf69-b146-4ca5-bfa9-f5477da5cd6c/memphis-documents-library","title":"Memphis Documents Library <= 3.1.5 - Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-03-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2febf69-b146-4ca5-bfa9-f5477da5cd6c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2febf69-b146-4ca5-bfa9-f5477da5cd6c?source=api-prod","cve":"CVE-2016-20100","affectedVersions":"<=3.1.5","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d6574612d626f78811c9dc5_gen.json b/internal/data/assets/plugin_6d6574612d626f78811c9dc5_gen.json
index a1b63800..d7c5eaa8 100644
--- a/internal/data/assets/plugin_6d6574612d626f78811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d6574612d626f78811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/036467de-95bb-4bfd-9522-df8dc17f3102/meta-box","title":"Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-06 19:09:12","sources":[{"name":"Wordfence","remoteId":"036467de-95bb-4bfd-9522-df8dc17f3102"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/036467de-95bb-4bfd-9522-df8dc17f3102?source=api-prod","cve":"CVE-2025-14675","affectedVersions":"<=5.11.1","severity":"high"},{"advisoryId":"WPSECADV/WF/1b3610f3-d589-4a45-9f80-6b66205de093/meta-box","title":"Meta Box < 5.13.1 - Authenticated (Contributor+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"1b3610f3-d589-4a45-9f80-6b66205de093"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1b3610f3-d589-4a45-9f80-6b66205de093?source=api-prod","cve":"CVE-2026-15248","affectedVersions":"<5.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a6bfc87-6135-4d49-baa2-e8e6291148dc/meta-box","title":"Meta Box – WordPress Custom Fields Framework <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a6bfc87-6135-4d49-baa2-e8e6291148dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a6bfc87-6135-4d49-baa2-e8e6291148dc?source=api-prod","cve":"CVE-2023-6526","affectedVersions":"<=5.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d5219cc-f23b-42da-b430-e773148299a3/meta-box","title":"Meta Box – A Framework for Dynamic Websites <= 5.15.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 15:06:00","sources":[{"name":"Wordfence","remoteId":"5d5219cc-f23b-42da-b430-e773148299a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d5219cc-f23b-42da-b430-e773148299a3?source=api-prod","cve":"CVE-2026-109700","affectedVersions":"<=5.15.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6276a405-4879-4429-8fc1-2d567ded5112/meta-box","title":"Meta Box – WordPress Custom Fields Framework <= 5.9.3 - Authenticated (Contributor+) Information Exposure via Post Meta\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"6276a405-4879-4429-8fc1-2d567ded5112"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6276a405-4879-4429-8fc1-2d567ded5112?source=api-prod","cve":"CVE-2024-1204","affectedVersions":"<=5.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/7b5ef9de-ba5e-463e-a528-098d724b1657/meta-box","title":"Meta Box <= 4.16.1 - Mishandling of File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b5ef9de-ba5e-463e-a528-098d724b1657"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b5ef9de-ba5e-463e-a528-098d724b1657?source=api-prod","cve":"CVE-2019-14794","affectedVersions":"<=4.16.1","severity":"high"},{"advisoryId":"WPSECADV/WF/8341c7fb-6f3f-45ee-86c3-9c9d2617594a/meta-box","title":"Meta Box - WordPress Custom Fields Framework <= 4.16.2 - File Deletion via attachment_id Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"8341c7fb-6f3f-45ee-86c3-9c9d2617594a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8341c7fb-6f3f-45ee-86c3-9c9d2617594a?source=api-prod","cve":"CVE-2019-14793","affectedVersions":"<4.16.3","severity":"high"},{"advisoryId":"WPSECADV/WF/9a49b72f-9ad9-4338-aeeb-d81be58e1c15/meta-box","title":"Meta Box – WordPress Custom Fields Framework <= 5.9.10 - Missing Authorization to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"9a49b72f-9ad9-4338-aeeb-d81be58e1c15"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a49b72f-9ad9-4338-aeeb-d81be58e1c15?source=api-prod","cve":"CVE-2024-43235","affectedVersions":"<=5.9.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/c303fffe-628b-4e88-9274-7dd242f2186e/meta-box","title":"Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"c303fffe-628b-4e88-9274-7dd242f2186e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c303fffe-628b-4e88-9274-7dd242f2186e?source=api-prod","cve":"CVE-2026-39468","affectedVersions":"<=5.11.1","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/036467de-95bb-4bfd-9522-df8dc17f3102/meta-box","title":"Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-06 19:09:12","sources":[{"name":"Wordfence","remoteId":"036467de-95bb-4bfd-9522-df8dc17f3102"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/036467de-95bb-4bfd-9522-df8dc17f3102?source=api-prod","cve":"CVE-2025-14675","affectedVersions":"<=5.11.1","severity":"high"},{"advisoryId":"WPSECADV/WF/1b3610f3-d589-4a45-9f80-6b66205de093/meta-box","title":"Meta Box < 5.13.1 - Authenticated (Contributor+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"1b3610f3-d589-4a45-9f80-6b66205de093"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1b3610f3-d589-4a45-9f80-6b66205de093?source=api-prod","cve":"CVE-2026-15248","affectedVersions":"<5.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a6bfc87-6135-4d49-baa2-e8e6291148dc/meta-box","title":"Meta Box – WordPress Custom Fields Framework <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a6bfc87-6135-4d49-baa2-e8e6291148dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a6bfc87-6135-4d49-baa2-e8e6291148dc?source=api-prod","cve":"CVE-2023-6526","affectedVersions":"<=5.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d5219cc-f23b-42da-b430-e773148299a3/meta-box","title":"Meta Box – A Framework for Dynamic Websites <= 5.15.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 15:06:00","sources":[{"name":"Wordfence","remoteId":"5d5219cc-f23b-42da-b430-e773148299a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d5219cc-f23b-42da-b430-e773148299a3?source=api-prod","cve":"CVE-2026-109700","affectedVersions":"<=5.15.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6276a405-4879-4429-8fc1-2d567ded5112/meta-box","title":"Meta Box – WordPress Custom Fields Framework <= 5.9.3 - Authenticated (Contributor+) Information Exposure via Post Meta\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"6276a405-4879-4429-8fc1-2d567ded5112"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6276a405-4879-4429-8fc1-2d567ded5112?source=api-prod","cve":"CVE-2024-1204","affectedVersions":"<=5.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/7a8948f5-8bcf-48f2-b3a6-bfa24ba9bef0/meta-box","title":"Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:31:51","sources":[{"name":"Wordfence","remoteId":"7a8948f5-8bcf-48f2-b3a6-bfa24ba9bef0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a8948f5-8bcf-48f2-b3a6-bfa24ba9bef0?source=api-prod","cve":"CVE-2026-109216","affectedVersions":"<=5.15.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/7b5ef9de-ba5e-463e-a528-098d724b1657/meta-box","title":"Meta Box <= 4.16.1 - Mishandling of File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b5ef9de-ba5e-463e-a528-098d724b1657"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b5ef9de-ba5e-463e-a528-098d724b1657?source=api-prod","cve":"CVE-2019-14794","affectedVersions":"<=4.16.1","severity":"high"},{"advisoryId":"WPSECADV/WF/8341c7fb-6f3f-45ee-86c3-9c9d2617594a/meta-box","title":"Meta Box - WordPress Custom Fields Framework <= 4.16.2 - File Deletion via attachment_id Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"8341c7fb-6f3f-45ee-86c3-9c9d2617594a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8341c7fb-6f3f-45ee-86c3-9c9d2617594a?source=api-prod","cve":"CVE-2019-14793","affectedVersions":"<4.16.3","severity":"high"},{"advisoryId":"WPSECADV/WF/9a49b72f-9ad9-4338-aeeb-d81be58e1c15/meta-box","title":"Meta Box – WordPress Custom Fields Framework <= 5.9.10 - Missing Authorization to Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"9a49b72f-9ad9-4338-aeeb-d81be58e1c15"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9a49b72f-9ad9-4338-aeeb-d81be58e1c15?source=api-prod","cve":"CVE-2024-43235","affectedVersions":"<=5.9.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/c303fffe-628b-4e88-9274-7dd242f2186e/meta-box","title":"Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"c303fffe-628b-4e88-9274-7dd242f2186e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c303fffe-628b-4e88-9274-7dd242f2186e?source=api-prod","cve":"CVE-2026-39468","affectedVersions":"<=5.11.1","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d696e696f72616e67652d322d666163746f722d61757468656e7469636174696f6e811c9dc5_gen.json b/internal/data/assets/plugin_6d696e696f72616e67652d322d666163746f722d61757468656e7469636174696f6e811c9dc5_gen.json
index 649cfb82..51b4c6d5 100644
--- a/internal/data/assets/plugin_6d696e696f72616e67652d322d666163746f722d61757468656e7469636174696f6e811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d696e696f72616e67652d322d666163746f722d61757468656e7469636174696f6e811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/4e79c2a3-1b35-48cf-b19c-41f9f96cdf88/miniorange-2-factor-authentication","title":"miniOrange 2FA <= 6.2.6 - Two-Factor Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e79c2a3-1b35-48cf-b19c-41f9f96cdf88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e79c2a3-1b35-48cf-b19c-41f9f96cdf88?source=api-prod","cve":"CVE-2026-16036","affectedVersions":"<=6.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/52a03c45-1d65-43aa-b30f-13698019e05f/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator  <= 5.5.82 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"52a03c45-1d65-43aa-b30f-13698019e05f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52a03c45-1d65-43aa-b30f-13698019e05f?source=api-prod","affectedVersions":"<=5.5.82","severity":"medium"},{"advisoryId":"WPSECADV/WF/5f84f59a-6030-44e7-b51c-b51ef3631672/miniorange-2-factor-authentication","title":"miniOrange 2FA <= 6.2.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f84f59a-6030-44e7-b51c-b51ef3631672"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f84f59a-6030-44e7-b51c-b51ef3631672?source=api-prod","cve":"CVE-2026-16035","affectedVersions":"<=6.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7267ede1-7745-47cc-ac0d-4362140b4c23/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"7267ede1-7745-47cc-ac0d-4362140b4c23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7267ede1-7745-47cc-ac0d-4362140b4c23?source=api-prod","cve":"CVE-2022-4943","affectedVersions":"<=5.6.5","severity":"high"},{"advisoryId":"WPSECADV/WF/90c0eb3e-b3f1-483c-9afd-2bbc4ff0cdf3/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.5.5 - Authenticated (Admin+) Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"90c0eb3e-b3f1-483c-9afd-2bbc4ff0cdf3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/90c0eb3e-b3f1-483c-9afd-2bbc4ff0cdf3?source=api-prod","cve":"CVE-2022-1321","affectedVersions":"<=5.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/a0e54185-a917-49cd-b99d-5b773a7ed06a/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a0e54185-a917-49cd-b99d-5b773a7ed06a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a0e54185-a917-49cd-b99d-5b773a7ed06a?source=api-prod","cve":"CVE-2022-44589","affectedVersions":"<=5.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/b5d787e9-b8b7-4ac1-a278-074afabc0239/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 6.1.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5d787e9-b8b7-4ac1-a278-074afabc0239"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5d787e9-b8b7-4ac1-a278-074afabc0239?source=api-prod","cve":"CVE-2025-54745","affectedVersions":"<=6.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b9ea24b5-ef7d-4bd5-bddb-46082a4a0763/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.6.1 - Missing Authorization to Plugin Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"b9ea24b5-ef7d-4bd5-bddb-46082a4a0763"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9ea24b5-ef7d-4bd5-bddb-46082a4a0763?source=api-prod","cve":"CVE-2022-42461","affectedVersions":"<=5.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bb929679-85bb-4d5b-9a99-e6081d55019f/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb929679-85bb-4d5b-9a99-e6081d55019f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb929679-85bb-4d5b-9a99-e6081d55019f?source=api-prod","affectedVersions":"<=5.5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/d82f5ffb-3499-462b-a04e-37e33ddf05c9/miniorange-2-factor-authentication","title":"miniOrange 2FA – Two Factor Authentication for WordPress 5.3.24 - 6.3.0 - Missing Authorization to Unauthenticated Arbitrary Option Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"d82f5ffb-3499-462b-a04e-37e33ddf05c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d82f5ffb-3499-462b-a04e-37e33ddf05c9?source=api-prod","cve":"CVE-2026-77770","affectedVersions":">=18.0,<=19.2|>=5.3.24,<=6.3.0","severity":"high"},{"advisoryId":"WPSECADV/WF/d8b20316-b9f8-4e34-a23a-47e03475b19c/miniorange-2-factor-authentication","title":"miniOrange 2FA <= 6.2.7 - Two-Factor Authentication Bypass via Brute Force\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"d8b20316-b9f8-4e34-a23a-47e03475b19c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d8b20316-b9f8-4e34-a23a-47e03475b19c?source=api-prod","cve":"CVE-2026-16619","affectedVersions":"<=6.2.7","severity":"low"},{"advisoryId":"WPSECADV/WF/e3d3860f-617d-4642-9346-de68e197b202/miniorange-2-factor-authentication","title":"miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) 6.2.8 - 6.3.0 - Unauthenticated Second Factor Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3d3860f-617d-4642-9346-de68e197b202"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3d3860f-617d-4642-9346-de68e197b202?source=api-prod","cve":"CVE-2026-77771","affectedVersions":">=18.0,<=19.2|>=6.2.8,<=6.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ed117fb8-c13a-4088-aa33-8d44fc5dcf37/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.6.1 - Cross-Site Request Forgery to Malware Scan Termination\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed117fb8-c13a-4088-aa33-8d44fc5dcf37"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed117fb8-c13a-4088-aa33-8d44fc5dcf37?source=api-prod","affectedVersions":"<=5.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f09d722e-e4eb-4d0b-844f-3a687eb454bf/miniorange-2-factor-authentication","title":"miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) < 6.2.6 - Two-Factor Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"f09d722e-e4eb-4d0b-844f-3a687eb454bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f09d722e-e4eb-4d0b-844f-3a687eb454bf?source=api-prod","cve":"CVE-2026-12695","affectedVersions":"<6.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f53875aa-9347-464c-aaeb-e8248628fca2/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.4.52 - Unauthenticated Arbitrary Options Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"f53875aa-9347-464c-aaeb-e8248628fca2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f53875aa-9347-464c-aaeb-e8248628fca2?source=api-prod","cve":"CVE-2022-0229","affectedVersions":"<=5.4.52","severity":"high"},{"advisoryId":"WPSECADV/WF/f810326f-f84a-4066-aa28-5caa915ba877/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"f810326f-f84a-4066-aa28-5caa915ba877"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f810326f-f84a-4066-aa28-5caa915ba877?source=api-prod","affectedVersions":"<=5.4.39","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/037f09f2-edd8-40d7-8d1a-98d2638995c5/miniorange-2-factor-authentication","title":"miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) 6.2.9 - 6.3.0 - Two-Factor Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"037f09f2-edd8-40d7-8d1a-98d2638995c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/037f09f2-edd8-40d7-8d1a-98d2638995c5?source=api-prod","cve":"CVE-2026-111949","affectedVersions":">=6.2.9,<=6.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e79c2a3-1b35-48cf-b19c-41f9f96cdf88/miniorange-2-factor-authentication","title":"miniOrange 2FA <= 6.2.6 - Two-Factor Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"4e79c2a3-1b35-48cf-b19c-41f9f96cdf88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e79c2a3-1b35-48cf-b19c-41f9f96cdf88?source=api-prod","cve":"CVE-2026-16036","affectedVersions":"<=6.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/52a03c45-1d65-43aa-b30f-13698019e05f/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator  <= 5.5.82 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"52a03c45-1d65-43aa-b30f-13698019e05f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52a03c45-1d65-43aa-b30f-13698019e05f?source=api-prod","affectedVersions":"<=5.5.82","severity":"medium"},{"advisoryId":"WPSECADV/WF/5f84f59a-6030-44e7-b51c-b51ef3631672/miniorange-2-factor-authentication","title":"miniOrange 2FA <= 6.2.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f84f59a-6030-44e7-b51c-b51ef3631672"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f84f59a-6030-44e7-b51c-b51ef3631672?source=api-prod","cve":"CVE-2026-16035","affectedVersions":"<=6.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7267ede1-7745-47cc-ac0d-4362140b4c23/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"7267ede1-7745-47cc-ac0d-4362140b4c23"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7267ede1-7745-47cc-ac0d-4362140b4c23?source=api-prod","cve":"CVE-2022-4943","affectedVersions":"<=5.6.5","severity":"high"},{"advisoryId":"WPSECADV/WF/90c0eb3e-b3f1-483c-9afd-2bbc4ff0cdf3/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.5.5 - Authenticated (Admin+) Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"90c0eb3e-b3f1-483c-9afd-2bbc4ff0cdf3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/90c0eb3e-b3f1-483c-9afd-2bbc4ff0cdf3?source=api-prod","cve":"CVE-2022-1321","affectedVersions":"<=5.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/a0e54185-a917-49cd-b99d-5b773a7ed06a/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a0e54185-a917-49cd-b99d-5b773a7ed06a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a0e54185-a917-49cd-b99d-5b773a7ed06a?source=api-prod","cve":"CVE-2022-44589","affectedVersions":"<=5.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/b5d787e9-b8b7-4ac1-a278-074afabc0239/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 6.1.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5d787e9-b8b7-4ac1-a278-074afabc0239"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5d787e9-b8b7-4ac1-a278-074afabc0239?source=api-prod","cve":"CVE-2025-54745","affectedVersions":"<=6.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b9ea24b5-ef7d-4bd5-bddb-46082a4a0763/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.6.1 - Missing Authorization to Plugin Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-10-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"b9ea24b5-ef7d-4bd5-bddb-46082a4a0763"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9ea24b5-ef7d-4bd5-bddb-46082a4a0763?source=api-prod","cve":"CVE-2022-42461","affectedVersions":"<=5.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bb929679-85bb-4d5b-9a99-e6081d55019f/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb929679-85bb-4d5b-9a99-e6081d55019f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb929679-85bb-4d5b-9a99-e6081d55019f?source=api-prod","affectedVersions":"<=5.5.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/d82f5ffb-3499-462b-a04e-37e33ddf05c9/miniorange-2-factor-authentication","title":"miniOrange 2FA – Two Factor Authentication for WordPress 5.3.24 - 6.3.0 - Missing Authorization to Unauthenticated Arbitrary Option Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"d82f5ffb-3499-462b-a04e-37e33ddf05c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d82f5ffb-3499-462b-a04e-37e33ddf05c9?source=api-prod","cve":"CVE-2026-77770","affectedVersions":">=18.0,<=19.2|>=5.3.24,<=6.3.0","severity":"high"},{"advisoryId":"WPSECADV/WF/d8b20316-b9f8-4e34-a23a-47e03475b19c/miniorange-2-factor-authentication","title":"miniOrange 2FA <= 6.2.7 - Two-Factor Authentication Bypass via Brute Force\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"d8b20316-b9f8-4e34-a23a-47e03475b19c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d8b20316-b9f8-4e34-a23a-47e03475b19c?source=api-prod","cve":"CVE-2026-16619","affectedVersions":"<=6.2.7","severity":"low"},{"advisoryId":"WPSECADV/WF/e3d3860f-617d-4642-9346-de68e197b202/miniorange-2-factor-authentication","title":"miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) 6.2.8 - 6.3.0 - Unauthenticated Second Factor Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"e3d3860f-617d-4642-9346-de68e197b202"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3d3860f-617d-4642-9346-de68e197b202?source=api-prod","cve":"CVE-2026-77771","affectedVersions":">=18.0,<=19.2|>=6.2.8,<=6.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ed117fb8-c13a-4088-aa33-8d44fc5dcf37/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.6.1 - Cross-Site Request Forgery to Malware Scan Termination\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed117fb8-c13a-4088-aa33-8d44fc5dcf37"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed117fb8-c13a-4088-aa33-8d44fc5dcf37?source=api-prod","affectedVersions":"<=5.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f09d722e-e4eb-4d0b-844f-3a687eb454bf/miniorange-2-factor-authentication","title":"miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) < 6.2.6 - Two-Factor Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"f09d722e-e4eb-4d0b-844f-3a687eb454bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f09d722e-e4eb-4d0b-844f-3a687eb454bf?source=api-prod","cve":"CVE-2026-12695","affectedVersions":"<6.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f53875aa-9347-464c-aaeb-e8248628fca2/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.4.52 - Unauthenticated Arbitrary Options Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"f53875aa-9347-464c-aaeb-e8248628fca2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f53875aa-9347-464c-aaeb-e8248628fca2?source=api-prod","cve":"CVE-2022-0229","affectedVersions":"<=5.4.52","severity":"high"},{"advisoryId":"WPSECADV/WF/f810326f-f84a-4066-aa28-5caa915ba877/miniorange-2-factor-authentication","title":"miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"f810326f-f84a-4066-aa28-5caa915ba877"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f810326f-f84a-4066-aa28-5caa915ba877?source=api-prod","affectedVersions":"<=5.4.39","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d6f6465726e2d6576656e74732d63616c656e6461722d6c697465811c9dc5_gen.json b/internal/data/assets/plugin_6d6f6465726e2d6576656e74732d63616c656e6461722d6c697465811c9dc5_gen.json
index 2ae1ecd2..00d28371 100644
--- a/internal/data/assets/plugin_6d6f6465726e2d6576656e74732d63616c656e6461722d6c697465811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d6f6465726e2d6576656e74732d63616c656e6461722d6c697465811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/00bf8f2f-6ab4-4430-800b-5b97abe7589e/modern-events-calendar-lite","title":"Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-06 21:57:41","sources":[{"name":"Wordfence","remoteId":"00bf8f2f-6ab4-4430-800b-5b97abe7589e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/00bf8f2f-6ab4-4430-800b-5b97abe7589e?source=api-prod","cve":"CVE-2024-6522","affectedVersions":"<=7.12.1","severity":"high"},{"advisoryId":"WPSECADV/WF/06f37e3d-4c26-46fa-8928-8dd899ce3317/modern-events-calendar-lite","title":"Modern Events Calendar (Lite & Pro) <= 7.36.0 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"06f37e3d-4c26-46fa-8928-8dd899ce3317"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06f37e3d-4c26-46fa-8928-8dd899ce3317?source=api-prod","cve":"CVE-2026-96534","affectedVersions":"<=7.36.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0b498d75-509c-4533-9493-4f3eab9cbef4/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 7.36.0 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b498d75-509c-4533-9493-4f3eab9cbef4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b498d75-509c-4533-9493-4f3eab9cbef4?source=api-prod","cve":"CVE-2026-110069","affectedVersions":"<=7.36.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c007090-9d9b-4ee7-8f77-91abd4373051/modern-events-calendar-lite","title":"Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c007090-9d9b-4ee7-8f77-91abd4373051"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c007090-9d9b-4ee7-8f77-91abd4373051?source=api-prod","cve":"CVE-2024-5441","affectedVersions":"<=7.11.0","severity":"high"},{"advisoryId":"WPSECADV/WF/0e240f4b-dfdf-4954-af39-34e24a05a2ed/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.22.2 - Authenticated Stored Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0e240f4b-dfdf-4954-af39-34e24a05a2ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0e240f4b-dfdf-4954-af39-34e24a05a2ed?source=api-prod","cve":"CVE-2021-24716","affectedVersions":"<=5.22.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/32aa1fdc-2fca-4486-b704-eabe4668361e/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.1.6 - Subscriber+ Category Add Leading to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-12-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"32aa1fdc-2fca-4486-b704-eabe4668361e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/32aa1fdc-2fca-4486-b704-eabe4668361e?source=api-prod","cve":"CVE-2021-25046","affectedVersions":"<=6.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/3bfc18fa-905c-408f-bbb4-ce207c322298/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.1.4 - Unauthenticated Blind SQL Injection via time Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"3bfc18fa-905c-408f-bbb4-ce207c322298"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3bfc18fa-905c-408f-bbb4-ce207c322298?source=api-prod","cve":"CVE-2021-24946","affectedVersions":"<6.1.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/4701efb1-4208-4178-90c0-bfc006d1a72a/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.2.9 - Authenticated (Contributor+) Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"4701efb1-4208-4178-90c0-bfc006d1a72a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4701efb1-4208-4178-90c0-bfc006d1a72a?source=api-prod","cve":"CVE-2022-30533","affectedVersions":"<=6.2.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/48bf9bf4-1b8a-41cc-adc9-a618d075c7f2/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.3.0 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"48bf9bf4-1b8a-41cc-adc9-a618d075c7f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/48bf9bf4-1b8a-41cc-adc9-a618d075c7f2?source=api-prod","cve":"CVE-2022-0364","affectedVersions":"<=6.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/4eab9a5e-ca51-4952-9fd4-3d0046402e29/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.1.0 - Reflected Cross-Site Scripting via current_month_divider parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"4eab9a5e-ca51-4952-9fd4-3d0046402e29"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4eab9a5e-ca51-4952-9fd4-3d0046402e29?source=api-prod","cve":"CVE-2021-24925","affectedVersions":"<=6.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5dfcc6dc-db8a-4a03-9c1d-edf0513b43df/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 7.36.3 - Authenticated (Subscriber+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"5dfcc6dc-db8a-4a03-9c1d-edf0513b43df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5dfcc6dc-db8a-4a03-9c1d-edf0513b43df?source=api-prod","cve":"CVE-2026-110070","affectedVersions":"<=7.36.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/703ba736-5834-40f2-9cf6-a6a70a73e4d6/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"703ba736-5834-40f2-9cf6-a6a70a73e4d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/703ba736-5834-40f2-9cf6-a6a70a73e4d6?source=api-prod","cve":"CVE-2021-4458","affectedVersions":"<=6.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/86c04e9d-0bcd-4637-bd4a-aeb2e3f373ff/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.1.6 - Missing Authorization to Stored Cross-Site Scripting and Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-02-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"86c04e9d-0bcd-4637-bd4a-aeb2e3f373ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86c04e9d-0bcd-4637-bd4a-aeb2e3f373ff?source=api-prod","cve":"CVE-2020-9459","affectedVersions":"<5.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e361473-8ed6-41d0-b409-2436189c1120/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.16.4 - Unauthenticated Events Export\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e361473-8ed6-41d0-b409-2436189c1120"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e361473-8ed6-41d0-b409-2436189c1120?source=api-prod","cve":"CVE-2021-24146","affectedVersions":"<=5.16.4","severity":"high"},{"advisoryId":"WPSECADV/WF/9b9f609b-7b07-454a-b2e6-973f712b619d/modern-events-calendar-lite","title":"Modern Events Calendar Lite < 7.37.0 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b9f609b-7b07-454a-b2e6-973f712b619d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b9f609b-7b07-454a-b2e6-973f712b619d?source=api-prod","cve":"CVE-2026-105067","affectedVersions":"<7.37.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3aa7b27-a335-4f82-a50a-45becdd5ef4e/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.16.4 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3aa7b27-a335-4f82-a50a-45becdd5ef4e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3aa7b27-a335-4f82-a50a-45becdd5ef4e?source=api-prod","cve":"CVE-2021-24147","affectedVersions":"<=5.16.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4ff715e-056e-48d8-bb82-d4f89047384f/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.16.5 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4ff715e-056e-48d8-bb82-d4f89047384f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4ff715e-056e-48d8-bb82-d4f89047384f?source=api-prod","cve":"CVE-2021-24149","affectedVersions":"<=5.16.5","severity":"high"},{"advisoryId":"WPSECADV/WF/b9e67e3e-188c-4ca9-b846-d318859aeaf8/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.16.4 - Authenticated Arbitrary File Upload leading to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b9e67e3e-188c-4ca9-b846-d318859aeaf8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9e67e3e-188c-4ca9-b846-d318859aeaf8?source=api-prod","cve":"CVE-2021-24145","affectedVersions":"<=5.16.4","severity":"high"},{"advisoryId":"WPSECADV/WF/e545b53e-7054-41dc-b69b-7552ef6c3240/modern-events-calendar-lite","title":"Modern Events Calendar <= 7.21.9 - Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 15:05:14","sources":[{"name":"Wordfence","remoteId":"e545b53e-7054-41dc-b69b-7552ef6c3240"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e545b53e-7054-41dc-b69b-7552ef6c3240?source=api-prod","cve":"CVE-2025-5733","affectedVersions":"<=7.21.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/e7465ca4-21e8-4935-b294-e7378b2b01a7/modern-events-calendar-lite","title":"Modern Events Calendar lite < 6.10.5 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"e7465ca4-21e8-4935-b294-e7378b2b01a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e7465ca4-21e8-4935-b294-e7378b2b01a7?source=api-prod","cve":"CVE-2023-1400","affectedVersions":"<6.10.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/f213fb42-5bab-4017-80ea-ce6543031af2/modern-events-calendar-lite","title":"Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"f213fb42-5bab-4017-80ea-ce6543031af2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f213fb42-5bab-4017-80ea-ce6543031af2?source=api-prod","cve":"CVE-2023-4021","affectedVersions":"<7.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2329a5d-0649-498e-a18c-a17de7b30df4/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2329a5d-0649-498e-a18c-a17de7b30df4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2329a5d-0649-498e-a18c-a17de7b30df4?source=api-prod","cve":"CVE-2022-27848","affectedVersions":"<=6.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2c20cde-012c-4dca-a8ae-2229131c08e1/modern-events-calendar-lite","title":"Modern Events Calendar (Lite & Pro) <= 7.33.0 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2c20cde-012c-4dca-a8ae-2229131c08e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2c20cde-012c-4dca-a8ae-2229131c08e1?source=api-prod","cve":"CVE-2026-11349","affectedVersions":"<=7.33.0","severity":"high"},{"advisoryId":"WPSECADV/WF/f9ae88f8-88c1-4bb0-af9f-330f9760de1f/modern-events-calendar-lite","title":"Modern Events Calendar Lite < 5.22.1 - Admin+ Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9ae88f8-88c1-4bb0-af9f-330f9760de1f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9ae88f8-88c1-4bb0-af9f-330f9760de1f?source=api-prod","cve":"CVE-2021-24687","affectedVersions":"<=5.22.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/00bf8f2f-6ab4-4430-800b-5b97abe7589e/modern-events-calendar-lite","title":"Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-06 21:57:41","sources":[{"name":"Wordfence","remoteId":"00bf8f2f-6ab4-4430-800b-5b97abe7589e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/00bf8f2f-6ab4-4430-800b-5b97abe7589e?source=api-prod","cve":"CVE-2024-6522","affectedVersions":"<=7.12.1","severity":"high"},{"advisoryId":"WPSECADV/WF/06f37e3d-4c26-46fa-8928-8dd899ce3317/modern-events-calendar-lite","title":"Modern Events Calendar (Lite & Pro) <= 7.36.0 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"06f37e3d-4c26-46fa-8928-8dd899ce3317"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06f37e3d-4c26-46fa-8928-8dd899ce3317?source=api-prod","cve":"CVE-2026-96534","affectedVersions":"<=7.36.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0b498d75-509c-4533-9493-4f3eab9cbef4/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 7.36.0 - Authenticated (Subscriber+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b498d75-509c-4533-9493-4f3eab9cbef4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b498d75-509c-4533-9493-4f3eab9cbef4?source=api-prod","cve":"CVE-2026-110069","affectedVersions":"<=7.36.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c007090-9d9b-4ee7-8f77-91abd4373051/modern-events-calendar-lite","title":"Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c007090-9d9b-4ee7-8f77-91abd4373051"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c007090-9d9b-4ee7-8f77-91abd4373051?source=api-prod","cve":"CVE-2024-5441","affectedVersions":"<=7.11.0","severity":"high"},{"advisoryId":"WPSECADV/WF/0e240f4b-dfdf-4954-af39-34e24a05a2ed/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.22.2 - Authenticated Stored Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0e240f4b-dfdf-4954-af39-34e24a05a2ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0e240f4b-dfdf-4954-af39-34e24a05a2ed?source=api-prod","cve":"CVE-2021-24716","affectedVersions":"<=5.22.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/32aa1fdc-2fca-4486-b704-eabe4668361e/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.1.6 - Subscriber+ Category Add Leading to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-12-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"32aa1fdc-2fca-4486-b704-eabe4668361e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/32aa1fdc-2fca-4486-b704-eabe4668361e?source=api-prod","cve":"CVE-2021-25046","affectedVersions":"<=6.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/3bfc18fa-905c-408f-bbb4-ce207c322298/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.1.4 - Unauthenticated Blind SQL Injection via time Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"3bfc18fa-905c-408f-bbb4-ce207c322298"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3bfc18fa-905c-408f-bbb4-ce207c322298?source=api-prod","cve":"CVE-2021-24946","affectedVersions":"<6.1.5","severity":"critical"},{"advisoryId":"WPSECADV/WF/4701efb1-4208-4178-90c0-bfc006d1a72a/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.2.9 - Authenticated (Contributor+) Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"4701efb1-4208-4178-90c0-bfc006d1a72a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4701efb1-4208-4178-90c0-bfc006d1a72a?source=api-prod","cve":"CVE-2022-30533","affectedVersions":"<=6.2.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/48bf9bf4-1b8a-41cc-adc9-a618d075c7f2/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.3.0 - Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"48bf9bf4-1b8a-41cc-adc9-a618d075c7f2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/48bf9bf4-1b8a-41cc-adc9-a618d075c7f2?source=api-prod","cve":"CVE-2022-0364","affectedVersions":"<=6.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/4eab9a5e-ca51-4952-9fd4-3d0046402e29/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.1.0 - Reflected Cross-Site Scripting via current_month_divider parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"4eab9a5e-ca51-4952-9fd4-3d0046402e29"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4eab9a5e-ca51-4952-9fd4-3d0046402e29?source=api-prod","cve":"CVE-2021-24925","affectedVersions":"<=6.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5dfcc6dc-db8a-4a03-9c1d-edf0513b43df/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 7.36.3 - Authenticated (Subscriber+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"5dfcc6dc-db8a-4a03-9c1d-edf0513b43df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5dfcc6dc-db8a-4a03-9c1d-edf0513b43df?source=api-prod","cve":"CVE-2026-110070","affectedVersions":"<=7.36.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6783c8a4-01a8-45be-97c5-7c8e0c9ac58d/modern-events-calendar-lite","title":"Modern Events Calendar < 7.37.0 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"6783c8a4-01a8-45be-97c5-7c8e0c9ac58d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6783c8a4-01a8-45be-97c5-7c8e0c9ac58d?source=api-prod","cve":"CVE-2026-102499","affectedVersions":"<7.37.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/703ba736-5834-40f2-9cf6-a6a70a73e4d6/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"703ba736-5834-40f2-9cf6-a6a70a73e4d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/703ba736-5834-40f2-9cf6-a6a70a73e4d6?source=api-prod","cve":"CVE-2021-4458","affectedVersions":"<=6.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/86c04e9d-0bcd-4637-bd4a-aeb2e3f373ff/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.1.6 - Missing Authorization to Stored Cross-Site Scripting and Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-02-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"86c04e9d-0bcd-4637-bd4a-aeb2e3f373ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86c04e9d-0bcd-4637-bd4a-aeb2e3f373ff?source=api-prod","cve":"CVE-2020-9459","affectedVersions":"<5.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e361473-8ed6-41d0-b409-2436189c1120/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.16.4 - Unauthenticated Events Export\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e361473-8ed6-41d0-b409-2436189c1120"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e361473-8ed6-41d0-b409-2436189c1120?source=api-prod","cve":"CVE-2021-24146","affectedVersions":"<=5.16.4","severity":"high"},{"advisoryId":"WPSECADV/WF/9b9f609b-7b07-454a-b2e6-973f712b619d/modern-events-calendar-lite","title":"Modern Events Calendar Lite < 7.37.0 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b9f609b-7b07-454a-b2e6-973f712b619d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b9f609b-7b07-454a-b2e6-973f712b619d?source=api-prod","cve":"CVE-2026-105067","affectedVersions":"<7.37.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae42d8bf-d32e-4a95-a800-096ae7df1282/modern-events-calendar-lite","title":"Modern Events Calendar < 7.37.0 - Authenticated (Subscriber+) SQL Injection via mec_fes_csv_export\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae42d8bf-d32e-4a95-a800-096ae7df1282"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae42d8bf-d32e-4a95-a800-096ae7df1282?source=api-prod","cve":"CVE-2026-96534","affectedVersions":"<7.37.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3aa7b27-a335-4f82-a50a-45becdd5ef4e/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.16.4 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3aa7b27-a335-4f82-a50a-45becdd5ef4e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3aa7b27-a335-4f82-a50a-45becdd5ef4e?source=api-prod","cve":"CVE-2021-24147","affectedVersions":"<=5.16.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4ff715e-056e-48d8-bb82-d4f89047384f/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.16.5 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4ff715e-056e-48d8-bb82-d4f89047384f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4ff715e-056e-48d8-bb82-d4f89047384f?source=api-prod","cve":"CVE-2021-24149","affectedVersions":"<=5.16.5","severity":"high"},{"advisoryId":"WPSECADV/WF/b9e67e3e-188c-4ca9-b846-d318859aeaf8/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 5.16.4 - Authenticated Arbitrary File Upload leading to Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-01-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b9e67e3e-188c-4ca9-b846-d318859aeaf8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9e67e3e-188c-4ca9-b846-d318859aeaf8?source=api-prod","cve":"CVE-2021-24145","affectedVersions":"<=5.16.4","severity":"high"},{"advisoryId":"WPSECADV/WF/e545b53e-7054-41dc-b69b-7552ef6c3240/modern-events-calendar-lite","title":"Modern Events Calendar <= 7.21.9 - Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 15:05:14","sources":[{"name":"Wordfence","remoteId":"e545b53e-7054-41dc-b69b-7552ef6c3240"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e545b53e-7054-41dc-b69b-7552ef6c3240?source=api-prod","cve":"CVE-2025-5733","affectedVersions":"<=7.21.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/e7465ca4-21e8-4935-b294-e7378b2b01a7/modern-events-calendar-lite","title":"Modern Events Calendar lite < 6.10.5 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-03-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"e7465ca4-21e8-4935-b294-e7378b2b01a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e7465ca4-21e8-4935-b294-e7378b2b01a7?source=api-prod","cve":"CVE-2023-1400","affectedVersions":"<6.10.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/f213fb42-5bab-4017-80ea-ce6543031af2/modern-events-calendar-lite","title":"Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"f213fb42-5bab-4017-80ea-ce6543031af2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f213fb42-5bab-4017-80ea-ce6543031af2?source=api-prod","cve":"CVE-2023-4021","affectedVersions":"<7.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2329a5d-0649-498e-a18c-a17de7b30df4/modern-events-calendar-lite","title":"Modern Events Calendar Lite <= 6.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2329a5d-0649-498e-a18c-a17de7b30df4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2329a5d-0649-498e-a18c-a17de7b30df4?source=api-prod","cve":"CVE-2022-27848","affectedVersions":"<=6.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2c20cde-012c-4dca-a8ae-2229131c08e1/modern-events-calendar-lite","title":"Modern Events Calendar (Lite & Pro) <= 7.33.0 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2c20cde-012c-4dca-a8ae-2229131c08e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2c20cde-012c-4dca-a8ae-2229131c08e1?source=api-prod","cve":"CVE-2026-11349","affectedVersions":"<=7.33.0","severity":"high"},{"advisoryId":"WPSECADV/WF/f9ae88f8-88c1-4bb0-af9f-330f9760de1f/modern-events-calendar-lite","title":"Modern Events Calendar Lite < 5.22.1 - Admin+ Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9ae88f8-88c1-4bb0-af9f-330f9760de1f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9ae88f8-88c1-4bb0-af9f-330f9760de1f?source=api-prod","cve":"CVE-2021-24687","affectedVersions":"<=5.22.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d6f6465726e2d6576656e74732d63616c656e646172811c9dc5_gen.json b/internal/data/assets/plugin_6d6f6465726e2d6576656e74732d63616c656e646172811c9dc5_gen.json
index 9b58c521..7b988d54 100644
--- a/internal/data/assets/plugin_6d6f6465726e2d6576656e74732d63616c656e646172811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d6f6465726e2d6576656e74732d63616c656e646172811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/00bf8f2f-6ab4-4430-800b-5b97abe7589e/modern-events-calendar","title":"Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-06 21:57:41","sources":[{"name":"Wordfence","remoteId":"00bf8f2f-6ab4-4430-800b-5b97abe7589e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/00bf8f2f-6ab4-4430-800b-5b97abe7589e?source=api-prod","cve":"CVE-2024-6522","affectedVersions":"<=7.12.1","severity":"high"},{"advisoryId":"WPSECADV/WF/06f37e3d-4c26-46fa-8928-8dd899ce3317/modern-events-calendar","title":"Modern Events Calendar (Lite & Pro) <= 7.36.0 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"06f37e3d-4c26-46fa-8928-8dd899ce3317"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06f37e3d-4c26-46fa-8928-8dd899ce3317?source=api-prod","cve":"CVE-2026-96534","affectedVersions":"<=7.36.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c007090-9d9b-4ee7-8f77-91abd4373051/modern-events-calendar","title":"Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c007090-9d9b-4ee7-8f77-91abd4373051"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c007090-9d9b-4ee7-8f77-91abd4373051?source=api-prod","cve":"CVE-2024-5441","affectedVersions":"<=7.11.0","severity":"high"},{"advisoryId":"WPSECADV/WF/7d23e7f7-d5fa-4c40-b6ad-70e9ee147c5c/modern-events-calendar","title":"Modern Events Calendar <= 7.32.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d23e7f7-d5fa-4c40-b6ad-70e9ee147c5c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d23e7f7-d5fa-4c40-b6ad-70e9ee147c5c?source=api-prod","cve":"CVE-2026-32583","affectedVersions":"<=7.32.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/cdc215c1-4e79-4681-af85-fec47eaf3949/modern-events-calendar","title":"Modern Events Calendar < 7.35.0 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-17 12:49:46","sources":[{"name":"Wordfence","remoteId":"cdc215c1-4e79-4681-af85-fec47eaf3949"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdc215c1-4e79-4681-af85-fec47eaf3949?source=api-prod","cve":"CVE-2026-73339","affectedVersions":"<7.35.0","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/00bf8f2f-6ab4-4430-800b-5b97abe7589e/modern-events-calendar","title":"Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-06 21:57:41","sources":[{"name":"Wordfence","remoteId":"00bf8f2f-6ab4-4430-800b-5b97abe7589e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/00bf8f2f-6ab4-4430-800b-5b97abe7589e?source=api-prod","cve":"CVE-2024-6522","affectedVersions":"<=7.12.1","severity":"high"},{"advisoryId":"WPSECADV/WF/06f37e3d-4c26-46fa-8928-8dd899ce3317/modern-events-calendar","title":"Modern Events Calendar (Lite & Pro) <= 7.36.0 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"06f37e3d-4c26-46fa-8928-8dd899ce3317"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/06f37e3d-4c26-46fa-8928-8dd899ce3317?source=api-prod","cve":"CVE-2026-96534","affectedVersions":"<=7.36.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c007090-9d9b-4ee7-8f77-91abd4373051/modern-events-calendar","title":"Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c007090-9d9b-4ee7-8f77-91abd4373051"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c007090-9d9b-4ee7-8f77-91abd4373051?source=api-prod","cve":"CVE-2024-5441","affectedVersions":"<=7.11.0","severity":"high"},{"advisoryId":"WPSECADV/WF/6783c8a4-01a8-45be-97c5-7c8e0c9ac58d/modern-events-calendar","title":"Modern Events Calendar < 7.37.0 - Authenticated (Subscriber+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"6783c8a4-01a8-45be-97c5-7c8e0c9ac58d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6783c8a4-01a8-45be-97c5-7c8e0c9ac58d?source=api-prod","cve":"CVE-2026-102499","affectedVersions":"<7.37.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7d23e7f7-d5fa-4c40-b6ad-70e9ee147c5c/modern-events-calendar","title":"Modern Events Calendar <= 7.32.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d23e7f7-d5fa-4c40-b6ad-70e9ee147c5c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d23e7f7-d5fa-4c40-b6ad-70e9ee147c5c?source=api-prod","cve":"CVE-2026-32583","affectedVersions":"<=7.32.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae42d8bf-d32e-4a95-a800-096ae7df1282/modern-events-calendar","title":"Modern Events Calendar < 7.37.0 - Authenticated (Subscriber+) SQL Injection via mec_fes_csv_export\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae42d8bf-d32e-4a95-a800-096ae7df1282"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae42d8bf-d32e-4a95-a800-096ae7df1282?source=api-prod","cve":"CVE-2026-96534","affectedVersions":"<7.37.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/cdc215c1-4e79-4681-af85-fec47eaf3949/modern-events-calendar","title":"Modern Events Calendar < 7.35.0 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-17 12:49:46","sources":[{"name":"Wordfence","remoteId":"cdc215c1-4e79-4681-af85-fec47eaf3949"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdc215c1-4e79-4681-af85-fec47eaf3949?source=api-prod","cve":"CVE-2026-73339","affectedVersions":"<7.35.0","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d70332d6d757369632d706c617965722d62792d736f6e616172811c9dc5_gen.json b/internal/data/assets/plugin_6d70332d6d757369632d706c617965722d62792d736f6e616172811c9dc5_gen.json
index 960d7e3a..b63bce50 100644
--- a/internal/data/assets/plugin_6d70332d6d757369632d706c617965722d62792d736f6e616172811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d70332d6d757369632d706c617965722d62792d736f6e616172811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/082dd8b3-da2e-492c-9fc0-44a261df4ba4/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.12 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"082dd8b3-da2e-492c-9fc0-44a261df4ba4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/082dd8b3-da2e-492c-9fc0-44a261df4ba4?source=api-prod","cve":"CVE-2026-65506","affectedVersions":"<=5.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/179094a4-a243-4ce7-8a8d-aa439fe5c223/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.13.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"179094a4-a243-4ce7-8a8d-aa439fe5c223"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/179094a4-a243-4ce7-8a8d-aa439fe5c223?source=api-prod","cve":"CVE-2026-81289","affectedVersions":"<=5.13.1","severity":"high"},{"advisoryId":"WPSECADV/WF/261aad1e-43fc-4927-a97d-85a001863023/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 20:09:32","sources":[{"name":"Wordfence","remoteId":"261aad1e-43fc-4927-a97d-85a001863023"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/261aad1e-43fc-4927-a97d-85a001863023?source=api-prod","cve":"CVE-2026-1249","affectedVersions":">=5.3,<=5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/43adc9dd-1780-440f-90c2-ff05a22eb084/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"43adc9dd-1780-440f-90c2-ff05a22eb084"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43adc9dd-1780-440f-90c2-ff05a22eb084?source=api-prod","cve":"CVE-2024-7856","affectedVersions":"<=5.7.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/547325ad-0b01-42d5-b47c-362044587395/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-30 19:24:55","sources":[{"name":"Wordfence","remoteId":"547325ad-0b01-42d5-b47c-362044587395"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/547325ad-0b01-42d5-b47c-362044587395?source=api-prod","cve":"CVE-2024-13157","affectedVersions":"<=5.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e4b0fa4-51b7-4892-9087-30618900e069/mp3-music-player-by-sonaar","title":"MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 17:22:11","sources":[{"name":"Wordfence","remoteId":"5e4b0fa4-51b7-4892-9087-30618900e069"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e4b0fa4-51b7-4892-9087-30618900e069?source=api-prod","cve":"CVE-2026-16776","affectedVersions":"<=5.14.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e722b30-f136-4f57-a248-cf9cdd499552/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5e722b30-f136-4f57-a248-cf9cdd499552"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e722b30-f136-4f57-a248-cf9cdd499552?source=api-prod","cve":"CVE-2024-30487","affectedVersions":"<=5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6bcb9d95-acb4-4405-b785-1e5eace10dc9/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10 - Missing Authorization to Template Import\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bcb9d95-acb4-4405-b785-1e5eace10dc9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bcb9d95-acb4-4405-b785-1e5eace10dc9?source=api-prod","cve":"CVE-2023-47822","affectedVersions":"<=4.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ec14923-0f68-45e8-8d99-9921c5928ac4/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.9.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ec14923-0f68-45e8-8d99-9921c5928ac4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ec14923-0f68-45e8-8d99-9921c5928ac4?source=api-prod","cve":"CVE-2025-32235","affectedVersions":"<=5.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/861d0218-0f0f-4299-a0ff-854832348457/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-18 18:57:36","sources":[{"name":"Wordfence","remoteId":"861d0218-0f0f-4299-a0ff-854832348457"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/861d0218-0f0f-4299-a0ff-854832348457?source=api-prod","cve":"CVE-2024-10268","affectedVersions":"<=5.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/9576408b-d048-4e36-bc1a-c01c9f586365/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10.1 - Unauthenticated Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"9576408b-d048-4e36-bc1a-c01c9f586365"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9576408b-d048-4e36-bc1a-c01c9f586365?source=api-prod","cve":"CVE-2024-31343","affectedVersions":"<=4.10.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a54e9aa6-943d-4f76-81af-3424a23f9313/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"a54e9aa6-943d-4f76-81af-3424a23f9313"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a54e9aa6-943d-4f76-81af-3424a23f9313?source=api-prod","cve":"CVE-2024-56266","affectedVersions":"<=5.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/b9137087-f7f0-412c-a78e-e7a0aa92d45d/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 08:47:00","sources":[{"name":"Wordfence","remoteId":"b9137087-f7f0-412c-a78e-e7a0aa92d45d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9137087-f7f0-412c-a78e-e7a0aa92d45d?source=api-prod","cve":"CVE-2026-104673","affectedVersions":"<=5.14.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/bcdbd108-5e17-4e67-a2a2-0f1464c1ba6c/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"bcdbd108-5e17-4e67-a2a2-0f1464c1ba6c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bcdbd108-5e17-4e67-a2a2-0f1464c1ba6c?source=api-prod","cve":"CVE-2024-30530","affectedVersions":"<=5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c14783d3-68de-49c6-9c54-eb7fc4a7bf94/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-09 19:09:44","sources":[{"name":"Wordfence","remoteId":"c14783d3-68de-49c6-9c54-eb7fc4a7bf94"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c14783d3-68de-49c6-9c54-eb7fc4a7bf94?source=api-prod","cve":"CVE-2024-5664","affectedVersions":"<=5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb713c9c-adb4-410c-a92f-d4d5b002d626/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.11 - Unauthenticated Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb713c9c-adb4-410c-a92f-d4d5b002d626"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb713c9c-adb4-410c-a92f-d4d5b002d626?source=api-prod","cve":"CVE-2026-39647","affectedVersions":"<=5.11","severity":"high"},{"advisoryId":"WPSECADV/WF/ce8fa964-d543-4d46-a534-e403dff4f425/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ce8fa964-d543-4d46-a534-e403dff4f425"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ce8fa964-d543-4d46-a534-e403dff4f425?source=api-prod","cve":"CVE-2026-1219","affectedVersions":">=4.0,<=5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/e42841dc-157f-45eb-8959-249326d50650/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 2.4.1 - Multiple Admin+ Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"e42841dc-157f-45eb-8959-249326d50650"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e42841dc-157f-45eb-8959-249326d50650?source=api-prod","cve":"CVE-2021-24624","affectedVersions":"<=2.4.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/082dd8b3-da2e-492c-9fc0-44a261df4ba4/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.12 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"082dd8b3-da2e-492c-9fc0-44a261df4ba4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/082dd8b3-da2e-492c-9fc0-44a261df4ba4?source=api-prod","cve":"CVE-2026-65506","affectedVersions":"<=5.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/179094a4-a243-4ce7-8a8d-aa439fe5c223/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.13.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"179094a4-a243-4ce7-8a8d-aa439fe5c223"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/179094a4-a243-4ce7-8a8d-aa439fe5c223?source=api-prod","cve":"CVE-2026-81289","affectedVersions":"<=5.13.1","severity":"high"},{"advisoryId":"WPSECADV/WF/261aad1e-43fc-4927-a97d-85a001863023/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 20:09:32","sources":[{"name":"Wordfence","remoteId":"261aad1e-43fc-4927-a97d-85a001863023"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/261aad1e-43fc-4927-a97d-85a001863023?source=api-prod","cve":"CVE-2026-1249","affectedVersions":">=5.3,<=5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/43adc9dd-1780-440f-90c2-ff05a22eb084/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"43adc9dd-1780-440f-90c2-ff05a22eb084"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43adc9dd-1780-440f-90c2-ff05a22eb084?source=api-prod","cve":"CVE-2024-7856","affectedVersions":"<=5.7.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/547325ad-0b01-42d5-b47c-362044587395/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-30 19:24:55","sources":[{"name":"Wordfence","remoteId":"547325ad-0b01-42d5-b47c-362044587395"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/547325ad-0b01-42d5-b47c-362044587395?source=api-prod","cve":"CVE-2024-13157","affectedVersions":"<=5.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e4b0fa4-51b7-4892-9087-30618900e069/mp3-music-player-by-sonaar","title":"MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 17:22:11","sources":[{"name":"Wordfence","remoteId":"5e4b0fa4-51b7-4892-9087-30618900e069"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e4b0fa4-51b7-4892-9087-30618900e069?source=api-prod","cve":"CVE-2026-16776","affectedVersions":"<=5.14.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e722b30-f136-4f57-a248-cf9cdd499552/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5e722b30-f136-4f57-a248-cf9cdd499552"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e722b30-f136-4f57-a248-cf9cdd499552?source=api-prod","cve":"CVE-2024-30487","affectedVersions":"<=5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/5f52d193-ca17-41c0-8356-b1fcf0dbcf80/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.9 - 5.15 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f52d193-ca17-41c0-8356-b1fcf0dbcf80"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f52d193-ca17-41c0-8356-b1fcf0dbcf80?source=api-prod","cve":"CVE-2026-111967","affectedVersions":">=5.9,<=5.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/6bcb9d95-acb4-4405-b785-1e5eace10dc9/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10 - Missing Authorization to Template Import\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bcb9d95-acb4-4405-b785-1e5eace10dc9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bcb9d95-acb4-4405-b785-1e5eace10dc9?source=api-prod","cve":"CVE-2023-47822","affectedVersions":"<=4.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ec14923-0f68-45e8-8d99-9921c5928ac4/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.9.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ec14923-0f68-45e8-8d99-9921c5928ac4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ec14923-0f68-45e8-8d99-9921c5928ac4?source=api-prod","cve":"CVE-2025-32235","affectedVersions":"<=5.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/861d0218-0f0f-4299-a0ff-854832348457/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-18 18:57:36","sources":[{"name":"Wordfence","remoteId":"861d0218-0f0f-4299-a0ff-854832348457"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/861d0218-0f0f-4299-a0ff-854832348457?source=api-prod","cve":"CVE-2024-10268","affectedVersions":"<=5.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/9576408b-d048-4e36-bc1a-c01c9f586365/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10.1 - Unauthenticated Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"9576408b-d048-4e36-bc1a-c01c9f586365"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9576408b-d048-4e36-bc1a-c01c9f586365?source=api-prod","cve":"CVE-2024-31343","affectedVersions":"<=4.10.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a54e9aa6-943d-4f76-81af-3424a23f9313/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"a54e9aa6-943d-4f76-81af-3424a23f9313"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a54e9aa6-943d-4f76-81af-3424a23f9313?source=api-prod","cve":"CVE-2024-56266","affectedVersions":"<=5.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/b9137087-f7f0-412c-a78e-e7a0aa92d45d/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 08:47:00","sources":[{"name":"Wordfence","remoteId":"b9137087-f7f0-412c-a78e-e7a0aa92d45d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9137087-f7f0-412c-a78e-e7a0aa92d45d?source=api-prod","cve":"CVE-2026-104673","affectedVersions":"<=5.14.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/bcdbd108-5e17-4e67-a2a2-0f1464c1ba6c/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"bcdbd108-5e17-4e67-a2a2-0f1464c1ba6c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bcdbd108-5e17-4e67-a2a2-0f1464c1ba6c?source=api-prod","cve":"CVE-2024-30530","affectedVersions":"<=5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/c14783d3-68de-49c6-9c54-eb7fc4a7bf94/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-09 19:09:44","sources":[{"name":"Wordfence","remoteId":"c14783d3-68de-49c6-9c54-eb7fc4a7bf94"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c14783d3-68de-49c6-9c54-eb7fc4a7bf94?source=api-prod","cve":"CVE-2024-5664","affectedVersions":"<=5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb713c9c-adb4-410c-a92f-d4d5b002d626/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.11 - Unauthenticated Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb713c9c-adb4-410c-a92f-d4d5b002d626"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb713c9c-adb4-410c-a92f-d4d5b002d626?source=api-prod","cve":"CVE-2026-39647","affectedVersions":"<=5.11","severity":"high"},{"advisoryId":"WPSECADV/WF/ce8fa964-d543-4d46-a534-e403dff4f425/mp3-music-player-by-sonaar","title":"MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"ce8fa964-d543-4d46-a534-e403dff4f425"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ce8fa964-d543-4d46-a534-e403dff4f425?source=api-prod","cve":"CVE-2026-1219","affectedVersions":">=4.0,<=5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/e42841dc-157f-45eb-8959-249326d50650/mp3-music-player-by-sonaar","title":"MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 2.4.1 - Multiple Admin+ Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"e42841dc-157f-45eb-8959-249326d50650"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e42841dc-157f-45eb-8959-249326d50650?source=api-prod","cve":"CVE-2021-24624","affectedVersions":"<=2.4.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d772d77702d666f726d811c9dc5_gen.json b/internal/data/assets/plugin_6d772d77702d666f726d811c9dc5_gen.json
index 2605645f..9293f92e 100644
--- a/internal/data/assets/plugin_6d772d77702d666f726d811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d772d77702d666f726d811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/060ff51b-536d-4022-a68a-f77dc6c9c814/mw-wp-form","title":"MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 19:20:14","sources":[{"name":"Wordfence","remoteId":"060ff51b-536d-4022-a68a-f77dc6c9c814"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/060ff51b-536d-4022-a68a-f77dc6c9c814?source=api-prod","cve":"CVE-2026-96567","affectedVersions":"<=5.1.7","severity":"high"},{"advisoryId":"WPSECADV/WF/116e7099-2e30-4369-971c-85479709b99f/mw-wp-form","title":"MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"116e7099-2e30-4369-971c-85479709b99f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/116e7099-2e30-4369-971c-85479709b99f?source=api-prod","cve":"CVE-2026-78363","affectedVersions":"<5.1.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/194ee4a0-87c3-42e5-9676-8dd355838b78/mw-wp-form","title":"MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-01 16:50:15","sources":[{"name":"Wordfence","remoteId":"194ee4a0-87c3-42e5-9676-8dd355838b78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/194ee4a0-87c3-42e5-9676-8dd355838b78?source=api-prod","cve":"CVE-2026-4347","affectedVersions":"<=5.1.0","severity":"high"},{"advisoryId":"WPSECADV/WF/2783f62a-3b9a-45e1-8e90-121732dc17ec/mw-wp-form","title":"MW WP Form <= 5.1.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2783f62a-3b9a-45e1-8e90-121732dc17ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2783f62a-3b9a-45e1-8e90-121732dc17ec?source=api-prod","cve":"CVE-2026-48871","affectedVersions":"<=5.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/2a6dfdec-c1c6-4300-ab0a-9fd1c550d09f/mw-wp-form","title":"MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-09 18:48:34","sources":[{"name":"Wordfence","remoteId":"2a6dfdec-c1c6-4300-ab0a-9fd1c550d09f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a6dfdec-c1c6-4300-ab0a-9fd1c550d09f?source=api-prod","cve":"CVE-2026-8853","affectedVersions":"<=5.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/367ae1ab-fac7-4e17-9a00-0ea167291792/mw-wp-form","title":"MW WP Form < 5.1.6 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"367ae1ab-fac7-4e17-9a00-0ea167291792"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/367ae1ab-fac7-4e17-9a00-0ea167291792?source=api-prod","cve":"CVE-2026-78364","affectedVersions":"<5.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/412d555c-9bbd-42f5-8020-ccfc18755a79/mw-wp-form","title":"MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"412d555c-9bbd-42f5-8020-ccfc18755a79"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/412d555c-9bbd-42f5-8020-ccfc18755a79?source=api-prod","cve":"CVE-2023-6559","affectedVersions":"<=5.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/616de170-6645-4a06-a393-51bec1d8bd8c/mw-wp-form","title":"MW WP Form <= 4.4.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"616de170-6645-4a06-a393-51bec1d8bd8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/616de170-6645-4a06-a393-51bec1d8bd8c?source=api-prod","cve":"CVE-2023-46206","affectedVersions":"<=4.4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/7f2c39f6-3d37-4765-99e8-023610856b61/mw-wp-form","title":"MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 19:51:32","sources":[{"name":"Wordfence","remoteId":"7f2c39f6-3d37-4765-99e8-023610856b61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f2c39f6-3d37-4765-99e8-023610856b61?source=api-prod","cve":"CVE-2026-6206","affectedVersions":"<=5.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2c03142-be30-4173-a140-14d73a16dd2b/mw-wp-form","title":"MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"b2c03142-be30-4173-a140-14d73a16dd2b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2c03142-be30-4173-a140-14d73a16dd2b?source=api-prod","cve":"CVE-2023-6316","affectedVersions":"<=5.0.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/bc308993-7fc5-41db-a396-f05e95fe47b8/mw-wp-form","title":"MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-08 07:57:15","sources":[{"name":"Wordfence","remoteId":"bc308993-7fc5-41db-a396-f05e95fe47b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc308993-7fc5-41db-a396-f05e95fe47b8?source=api-prod","cve":"CVE-2026-5436","affectedVersions":"<=5.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f2126761-cbff-4d46-a6df-4566d15216d7/mw-wp-form","title":"MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2126761-cbff-4d46-a6df-4566d15216d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2126761-cbff-4d46-a6df-4566d15216d7?source=api-prod","cve":"CVE-2024-24804","affectedVersions":"<=5.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f7adeee0-30ff-4759-b42e-1ac2dea5a8a4/mw-wp-form","title":"MW WP Form <= 4.4.2 - Directory Traversal via _file_upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"f7adeee0-30ff-4759-b42e-1ac2dea5a8a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7adeee0-30ff-4759-b42e-1ac2dea5a8a4?source=api-prod","cve":"CVE-2023-28409","affectedVersions":"<4.4.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/060ff51b-536d-4022-a68a-f77dc6c9c814/mw-wp-form","title":"MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 19:20:14","sources":[{"name":"Wordfence","remoteId":"060ff51b-536d-4022-a68a-f77dc6c9c814"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/060ff51b-536d-4022-a68a-f77dc6c9c814?source=api-prod","cve":"CVE-2026-96567","affectedVersions":"<=5.1.7","severity":"high"},{"advisoryId":"WPSECADV/WF/116e7099-2e30-4369-971c-85479709b99f/mw-wp-form","title":"MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"116e7099-2e30-4369-971c-85479709b99f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/116e7099-2e30-4369-971c-85479709b99f?source=api-prod","cve":"CVE-2026-78363","affectedVersions":"<5.1.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/194ee4a0-87c3-42e5-9676-8dd355838b78/mw-wp-form","title":"MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-01 16:50:15","sources":[{"name":"Wordfence","remoteId":"194ee4a0-87c3-42e5-9676-8dd355838b78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/194ee4a0-87c3-42e5-9676-8dd355838b78?source=api-prod","cve":"CVE-2026-4347","affectedVersions":"<=5.1.0","severity":"high"},{"advisoryId":"WPSECADV/WF/2783f62a-3b9a-45e1-8e90-121732dc17ec/mw-wp-form","title":"MW WP Form <= 5.1.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2783f62a-3b9a-45e1-8e90-121732dc17ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2783f62a-3b9a-45e1-8e90-121732dc17ec?source=api-prod","cve":"CVE-2026-48871","affectedVersions":"<=5.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/2a6dfdec-c1c6-4300-ab0a-9fd1c550d09f/mw-wp-form","title":"MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-09 18:48:34","sources":[{"name":"Wordfence","remoteId":"2a6dfdec-c1c6-4300-ab0a-9fd1c550d09f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a6dfdec-c1c6-4300-ab0a-9fd1c550d09f?source=api-prod","cve":"CVE-2026-8853","affectedVersions":"<=5.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/367ae1ab-fac7-4e17-9a00-0ea167291792/mw-wp-form","title":"MW WP Form < 5.1.6 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"367ae1ab-fac7-4e17-9a00-0ea167291792"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/367ae1ab-fac7-4e17-9a00-0ea167291792?source=api-prod","cve":"CVE-2026-78364","affectedVersions":"<5.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/412d555c-9bbd-42f5-8020-ccfc18755a79/mw-wp-form","title":"MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"412d555c-9bbd-42f5-8020-ccfc18755a79"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/412d555c-9bbd-42f5-8020-ccfc18755a79?source=api-prod","cve":"CVE-2023-6559","affectedVersions":"<=5.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/616de170-6645-4a06-a393-51bec1d8bd8c/mw-wp-form","title":"MW WP Form <= 4.4.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"616de170-6645-4a06-a393-51bec1d8bd8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/616de170-6645-4a06-a393-51bec1d8bd8c?source=api-prod","cve":"CVE-2023-46206","affectedVersions":"<=4.4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/7e412f8a-f872-47cf-bbce-554b3559ef8a/mw-wp-form","title":"MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:32:13","sources":[{"name":"Wordfence","remoteId":"7e412f8a-f872-47cf-bbce-554b3559ef8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e412f8a-f872-47cf-bbce-554b3559ef8a?source=api-prod","cve":"CVE-2026-92086","affectedVersions":"<=5.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/7f2c39f6-3d37-4765-99e8-023610856b61/mw-wp-form","title":"MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 19:51:32","sources":[{"name":"Wordfence","remoteId":"7f2c39f6-3d37-4765-99e8-023610856b61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f2c39f6-3d37-4765-99e8-023610856b61?source=api-prod","cve":"CVE-2026-6206","affectedVersions":"<=5.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2c03142-be30-4173-a140-14d73a16dd2b/mw-wp-form","title":"MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"b2c03142-be30-4173-a140-14d73a16dd2b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2c03142-be30-4173-a140-14d73a16dd2b?source=api-prod","cve":"CVE-2023-6316","affectedVersions":"<=5.0.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/bc308993-7fc5-41db-a396-f05e95fe47b8/mw-wp-form","title":"MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-08 07:57:15","sources":[{"name":"Wordfence","remoteId":"bc308993-7fc5-41db-a396-f05e95fe47b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc308993-7fc5-41db-a396-f05e95fe47b8?source=api-prod","cve":"CVE-2026-5436","affectedVersions":"<=5.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f2126761-cbff-4d46-a6df-4566d15216d7/mw-wp-form","title":"MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2126761-cbff-4d46-a6df-4566d15216d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2126761-cbff-4d46-a6df-4566d15216d7?source=api-prod","cve":"CVE-2024-24804","affectedVersions":"<=5.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f7adeee0-30ff-4759-b42e-1ac2dea5a8a4/mw-wp-form","title":"MW WP Form <= 4.4.2 - Directory Traversal via _file_upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"f7adeee0-30ff-4759-b42e-1ac2dea5a8a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7adeee0-30ff-4759-b42e-1ac2dea5a8a4?source=api-prod","cve":"CVE-2023-28409","affectedVersions":"<4.4.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d792d61756374696f6e732d616c6c6567726f2d667265652d65646974696f6e811c9dc5_gen.json b/internal/data/assets/plugin_6d792d61756374696f6e732d616c6c6567726f2d667265652d65646974696f6e811c9dc5_gen.json
index ec063c58..3cf2dbc0 100644
--- a/internal/data/assets/plugin_6d792d61756374696f6e732d616c6c6567726f2d667265652d65646974696f6e811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d792d61756374696f6e732d616c6c6567726f2d667265652d65646974696f6e811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/11dba817-b913-42b1-baa0-ec480674f858/my-auctions-allegro-free-edition","title":"My auctions allegro <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"11dba817-b913-42b1-baa0-ec480674f858"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/11dba817-b913-42b1-baa0-ec480674f858?source=api-prod","cve":"CVE-2025-68566","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/202a8493-6df0-4a5e-b6bf-099219830e01/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-04 20:41:27","sources":[{"name":"Wordfence","remoteId":"202a8493-6df0-4a5e-b6bf-099219830e01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/202a8493-6df0-4a5e-b6bf-099219830e01?source=api-prod","cve":"CVE-2025-12851","affectedVersions":"<=3.6.32","severity":"high"},{"advisoryId":"WPSECADV/WF/28a9c2ba-7667-4601-8808-7258af69a432/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.18 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"28a9c2ba-7667-4601-8808-7258af69a432"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28a9c2ba-7667-4601-8808-7258af69a432?source=api-prod","cve":"CVE-2025-22733","affectedVersions":"<=3.6.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/5579957a-ad45-4518-ad3c-16b3841a301d/my-auctions-allegro-free-edition","title":"My auctions allegro <= 4.0.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"5579957a-ad45-4518-ad3c-16b3841a301d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5579957a-ad45-4518-ad3c-16b3841a301d?source=api-prod","cve":"CVE-2026-22491","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/57a78696-5892-4621-992f-5e4a7d8fa965/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.17 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"57a78696-5892-4621-992f-5e4a7d8fa965"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57a78696-5892-4621-992f-5e4a7d8fa965?source=api-prod","cve":"CVE-2024-11707","affectedVersions":"<=3.6.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c52c496-2f77-4faa-9a73-dafe4a66905d/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.33 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c52c496-2f77-4faa-9a73-dafe4a66905d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c52c496-2f77-4faa-9a73-dafe4a66905d?source=api-prod","cve":"CVE-2025-27009","affectedVersions":"<=3.6.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d81c8d5-3862-4401-9226-9c7380f364a7/my-auctions-allegro-free-edition","title":"My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d81c8d5-3862-4401-9226-9c7380f364a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d81c8d5-3862-4401-9226-9c7380f364a7?source=api-prod","cve":"CVE-2025-10048","affectedVersions":"<=3.6.31","severity":"medium"},{"advisoryId":"WPSECADV/WF/db3d9cd4-e7d8-4aab-bbaf-83473c70af40/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.32 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"db3d9cd4-e7d8-4aab-bbaf-83473c70af40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/db3d9cd4-e7d8-4aab-bbaf-83473c70af40?source=api-prod","cve":"CVE-2025-67943","affectedVersions":"<=3.6.32","severity":"high"},{"advisoryId":"WPSECADV/WF/dc4883b8-5783-49ff-ab3b-c568c9923227/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-04 18:36:48","sources":[{"name":"Wordfence","remoteId":"dc4883b8-5783-49ff-ab3b-c568c9923227"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc4883b8-5783-49ff-ab3b-c568c9923227?source=api-prod","cve":"CVE-2025-12850","affectedVersions":"<=3.6.32","severity":"high"},{"advisoryId":"WPSECADV/WF/e1120811-e0da-4dec-9723-0fdbd86efe67/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.33 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1120811-e0da-4dec-9723-0fdbd86efe67"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1120811-e0da-4dec-9723-0fdbd86efe67?source=api-prod","cve":"CVE-2025-68567","affectedVersions":"<=3.6.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/e99d4ec2-692a-43aa-8273-ec64d27a8baa/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.33 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"e99d4ec2-692a-43aa-8273-ec64d27a8baa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e99d4ec2-692a-43aa-8273-ec64d27a8baa?source=api-prod","cve":"CVE-2026-22464","affectedVersions":"<=3.6.33","severity":"high"},{"advisoryId":"WPSECADV/WF/f24003da-2d30-427c-b3f7-bbce4649c34d/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.20 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"f24003da-2d30-427c-b3f7-bbce4649c34d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f24003da-2d30-427c-b3f7-bbce4649c34d?source=api-prod","cve":"CVE-2025-31542","affectedVersions":"<=3.6.20","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/11dba817-b913-42b1-baa0-ec480674f858/my-auctions-allegro-free-edition","title":"My auctions allegro <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"11dba817-b913-42b1-baa0-ec480674f858"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/11dba817-b913-42b1-baa0-ec480674f858?source=api-prod","cve":"CVE-2025-68566","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/202a8493-6df0-4a5e-b6bf-099219830e01/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-04 20:41:27","sources":[{"name":"Wordfence","remoteId":"202a8493-6df0-4a5e-b6bf-099219830e01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/202a8493-6df0-4a5e-b6bf-099219830e01?source=api-prod","cve":"CVE-2025-12851","affectedVersions":"<=3.6.32","severity":"high"},{"advisoryId":"WPSECADV/WF/28a9c2ba-7667-4601-8808-7258af69a432/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.18 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"28a9c2ba-7667-4601-8808-7258af69a432"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28a9c2ba-7667-4601-8808-7258af69a432?source=api-prod","cve":"CVE-2025-22733","affectedVersions":"<=3.6.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/5579957a-ad45-4518-ad3c-16b3841a301d/my-auctions-allegro-free-edition","title":"My auctions allegro <= 4.0.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"5579957a-ad45-4518-ad3c-16b3841a301d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5579957a-ad45-4518-ad3c-16b3841a301d?source=api-prod","cve":"CVE-2026-22491","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/57a78696-5892-4621-992f-5e4a7d8fa965/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.17 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"57a78696-5892-4621-992f-5e4a7d8fa965"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57a78696-5892-4621-992f-5e4a7d8fa965?source=api-prod","cve":"CVE-2024-11707","affectedVersions":"<=3.6.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c52c496-2f77-4faa-9a73-dafe4a66905d/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.33 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c52c496-2f77-4faa-9a73-dafe4a66905d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c52c496-2f77-4faa-9a73-dafe4a66905d?source=api-prod","cve":"CVE-2025-27009","affectedVersions":"<=3.6.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/8d81c8d5-3862-4401-9226-9c7380f364a7/my-auctions-allegro-free-edition","title":"My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"8d81c8d5-3862-4401-9226-9c7380f364a7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8d81c8d5-3862-4401-9226-9c7380f364a7?source=api-prod","cve":"CVE-2025-10048","affectedVersions":"<=3.6.31","severity":"medium"},{"advisoryId":"WPSECADV/WF/b250f32b-373c-45e3-9dd9-832bb2066723/my-auctions-allegro-free-edition","title":"My auctions allegro <= 4.0.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"b250f32b-373c-45e3-9dd9-832bb2066723"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b250f32b-373c-45e3-9dd9-832bb2066723?source=api-prod","cve":"CVE-2026-116855","affectedVersions":"<=4.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/db3d9cd4-e7d8-4aab-bbaf-83473c70af40/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.32 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"db3d9cd4-e7d8-4aab-bbaf-83473c70af40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/db3d9cd4-e7d8-4aab-bbaf-83473c70af40?source=api-prod","cve":"CVE-2025-67943","affectedVersions":"<=3.6.32","severity":"high"},{"advisoryId":"WPSECADV/WF/dc4883b8-5783-49ff-ab3b-c568c9923227/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-04 18:36:48","sources":[{"name":"Wordfence","remoteId":"dc4883b8-5783-49ff-ab3b-c568c9923227"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc4883b8-5783-49ff-ab3b-c568c9923227?source=api-prod","cve":"CVE-2025-12850","affectedVersions":"<=3.6.32","severity":"high"},{"advisoryId":"WPSECADV/WF/e1120811-e0da-4dec-9723-0fdbd86efe67/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.33 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"e1120811-e0da-4dec-9723-0fdbd86efe67"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e1120811-e0da-4dec-9723-0fdbd86efe67?source=api-prod","cve":"CVE-2025-68567","affectedVersions":"<=3.6.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/e99d4ec2-692a-43aa-8273-ec64d27a8baa/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.33 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"e99d4ec2-692a-43aa-8273-ec64d27a8baa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e99d4ec2-692a-43aa-8273-ec64d27a8baa?source=api-prod","cve":"CVE-2026-22464","affectedVersions":"<=3.6.33","severity":"high"},{"advisoryId":"WPSECADV/WF/f24003da-2d30-427c-b3f7-bbce4649c34d/my-auctions-allegro-free-edition","title":"My auctions allegro <= 3.6.20 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"f24003da-2d30-427c-b3f7-bbce4649c34d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f24003da-2d30-427c-b3f7-bbce4649c34d?source=api-prod","cve":"CVE-2025-31542","affectedVersions":"<=3.6.20","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6d7963726564811c9dc5_gen.json b/internal/data/assets/plugin_6d7963726564811c9dc5_gen.json
index 2fa7fe7e..5f8cfdd1 100644
--- a/internal/data/assets/plugin_6d7963726564811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6d7963726564811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/01857d1d-4b6c-4ab0-b2ef-6a948daedbe0/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.6.1 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"01857d1d-4b6c-4ab0-b2ef-6a948daedbe0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01857d1d-4b6c-4ab0-b2ef-6a948daedbe0?source=api-prod","affectedVersions":"<=2.4.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/041a7c9a-d7dc-4742-b879-f1836f324a46/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-16 17:41:46","sources":[{"name":"Wordfence","remoteId":"041a7c9a-d7dc-4742-b879-f1836f324a46"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/041a7c9a-d7dc-4742-b879-f1836f324a46?source=api-prod","cve":"CVE-2026-8607","affectedVersions":"<=3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/11ad51d9-d0b6-4a47-875c-d7a6727f4d7c/mycred","title":"myCred <= 2.9.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"11ad51d9-d0b6-4a47-875c-d7a6727f4d7c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/11ad51d9-d0b6-4a47-875c-d7a6727f4d7c?source=api-prod","cve":"CVE-2025-54668","affectedVersions":"<=2.9.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/20be9a37-9e9f-4791-a27c-e0db007be787/mycred","title":"myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"20be9a37-9e9f-4791-a27c-e0db007be787"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20be9a37-9e9f-4791-a27c-e0db007be787?source=api-prod","cve":"CVE-2024-8658","affectedVersions":"<=2.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/23a081d4-443d-4b3b-8c89-9eb0e23c961e/mycred","title":"myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-07 21:21:56","sources":[{"name":"Wordfence","remoteId":"23a081d4-443d-4b3b-8c89-9eb0e23c961e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23a081d4-443d-4b3b-8c89-9eb0e23c961e?source=api-prod","cve":"CVE-2024-10187","affectedVersions":"<=2.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/2c994021-d429-4652-ada5-34ec0517cb19/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.2 - Subscriber+ SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c994021-d429-4652-ada5-34ec0517cb19"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c994021-d429-4652-ada5-34ec0517cb19?source=api-prod","cve":"CVE-2021-24755","affectedVersions":"<=2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/2d1d9bee-4afa-44cc-8e7a-8a73ad018c4a/mycred","title":"myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-05 17:20:59","sources":[{"name":"Wordfence","remoteId":"2d1d9bee-4afa-44cc-8e7a-8a73ad018c4a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d1d9bee-4afa-44cc-8e7a-8a73ad018c4a?source=api-prod","cve":"CVE-2024-11201","affectedVersions":"<=2.7.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/357bf5c3-6c9a-4478-b9d0-9f1beaaf5d00/mycred","title":"myCred <= 2.9.4.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"357bf5c3-6c9a-4478-b9d0-9f1beaaf5d00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/357bf5c3-6c9a-4478-b9d0-9f1beaaf5d00?source=api-prod","cve":"CVE-2025-49872","affectedVersions":"<=2.9.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/mycred","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<2.4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3b5252ed-7901-4896-a574-46652d0dfc11/mycred","title":"Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"3b5252ed-7901-4896-a574-46652d0dfc11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3b5252ed-7901-4896-a574-46652d0dfc11?source=api-prod","cve":"CVE-2026-40794","affectedVersions":"<=3.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e5800fa-e0d7-435f-98c2-6d91df26d657/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin  <= 2.4.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e5800fa-e0d7-435f-98c2-6d91df26d657"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e5800fa-e0d7-435f-98c2-6d91df26d657?source=api-prod","cve":"CVE-2022-1092","affectedVersions":"<2.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/43b05697-bc36-4f32-86b4-2feef892fe42/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-18 20:25:10","sources":[{"name":"Wordfence","remoteId":"43b05697-bc36-4f32-86b4-2feef892fe42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43b05697-bc36-4f32-86b4-2feef892fe42?source=api-prod","cve":"CVE-2025-12361","affectedVersions":"<=2.9.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/44ea3322-10f6-4f52-8fa8-8cc2632b67ce/mycred","title":"myCred <= 2.7.2 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"44ea3322-10f6-4f52-8fa8-8cc2632b67ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44ea3322-10f6-4f52-8fa8-8cc2632b67ce?source=api-prod","cve":"CVE-2024-43354","affectedVersions":"<=2.7.2","severity":"high"},{"advisoryId":"WPSECADV/WF/51118777-bdac-4a6b-a154-5a74a988a2e0/mycred","title":"myCred <= 2.9.4.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"51118777-bdac-4a6b-a154-5a74a988a2e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51118777-bdac-4a6b-a154-5a74a988a2e0?source=api-prod","cve":"CVE-2025-49857","affectedVersions":"<=2.9.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/mycred","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=2.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/55f25d72-c0aa-4dbf-bb3f-ba010f7f7e69/mycred","title":"myCred <= 2.9.7.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"55f25d72-c0aa-4dbf-bb3f-ba010f7f7e69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/55f25d72-c0aa-4dbf-bb3f-ba010f7f7e69?source=api-prod","cve":"CVE-2026-24951","affectedVersions":"<=2.9.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6753a37b-7242-4895-a439-f726ad835f61/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.3.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"6753a37b-7242-4895-a439-f726ad835f61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6753a37b-7242-4895-a439-f726ad835f61?source=api-prod","cve":"CVE-2021-25015","affectedVersions":"<=2.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/69695e2e-2086-4d50-8518-0b2f5ab9ea56/mycred","title":"myCred <= 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"69695e2e-2086-4d50-8518-0b2f5ab9ea56"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69695e2e-2086-4d50-8518-0b2f5ab9ea56?source=api-prod","cve":"CVE-2024-43353","affectedVersions":"<=2.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/74db4d3a-ee3f-460a-b880-f61a8e33ea57/mycred","title":"myCred Plugin <= 1.7.7 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"74db4d3a-ee3f-460a-b880-f61a8e33ea57"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/74db4d3a-ee3f-460a-b880-f61a8e33ea57?source=api-prod","cve":"CVE-2017-20008","affectedVersions":"<1.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/80b15512-210c-4c6b-a3ad-f5d6042091a3/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"80b15512-210c-4c6b-a3ad-f5d6042091a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/80b15512-210c-4c6b-a3ad-f5d6042091a3?source=api-prod","cve":"CVE-2022-0287","affectedVersions":"<2.4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8123fc2e-54c9-4e0d-b1c6-6f994f07e7e3/mycred","title":"Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"8123fc2e-54c9-4e0d-b1c6-6f994f07e7e3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8123fc2e-54c9-4e0d-b1c6-6f994f07e7e3?source=api-prod","cve":"CVE-2026-42676","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/84e18c54-4bc2-45c1-90fb-960a862170b6/mycred","title":"myCred <= 2.9.4.3 - Authenticated (Subscriber+) Race Condition\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"84e18c54-4bc2-45c1-90fb-960a862170b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84e18c54-4bc2-45c1-90fb-960a862170b6?source=api-prod","cve":"CVE-2025-54667","affectedVersions":"<=2.9.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/95d9995a-d99e-4136-84f9-1d3dfc4a4bf0/mycred","title":"myCred <= 3.1.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"95d9995a-d99e-4136-84f9-1d3dfc4a4bf0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95d9995a-d99e-4136-84f9-1d3dfc4a4bf0?source=api-prod","cve":"CVE-2026-61968","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/9b7a7780-0f61-4541-bcde-dbf64fd23320/mycred","title":"myCred <= 2.7.2 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b7a7780-0f61-4541-bcde-dbf64fd23320"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b7a7780-0f61-4541-bcde-dbf64fd23320?source=api-prod","cve":"CVE-2024-43214","affectedVersions":"<=2.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d8c7e79-00c4-4667-9ef6-e988901bb6a0/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 19:36:26","sources":[{"name":"Wordfence","remoteId":"9d8c7e79-00c4-4667-9ef6-e988901bb6a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d8c7e79-00c4-4667-9ef6-e988901bb6a0?source=api-prod","cve":"CVE-2026-17149","affectedVersions":"<=3.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3936c4b-2326-41dc-b7d6-a8cf43752ddb/mycred","title":"myCred <= 2.5 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3936c4b-2326-41dc-b7d6-a8cf43752ddb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3936c4b-2326-41dc-b7d6-a8cf43752ddb?source=api-prod","cve":"CVE-2023-35096","affectedVersions":"<2.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/af54654b-60af-446d-b170-ee0a1ebed22c/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-12 17:05:13","sources":[{"name":"Wordfence","remoteId":"af54654b-60af-446d-b170-ee0a1ebed22c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af54654b-60af-446d-b170-ee0a1ebed22c?source=api-prod","cve":"CVE-2025-12362","affectedVersions":"<=2.9.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5d08207-9480-42ef-b7b4-b7d01a839c85/mycred","title":"Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 3.2.5 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5d08207-9480-42ef-b7b4-b7d01a839c85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5d08207-9480-42ef-b7b4-b7d01a839c85?source=api-prod","cve":"CVE-2026-15150","affectedVersions":"<3.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/b8464cd2-eef0-419b-b368-6f86af4e8dd5/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 -  Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8464cd2-eef0-419b-b368-6f86af4e8dd5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8464cd2-eef0-419b-b368-6f86af4e8dd5?source=api-prod","cve":"CVE-2022-0363","affectedVersions":"<2.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c4067e03-427c-4b03-a250-0354572ae361/mycred","title":"myCred <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"c4067e03-427c-4b03-a250-0354572ae361"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4067e03-427c-4b03-a250-0354572ae361?source=api-prod","cve":"CVE-2023-47853","affectedVersions":"<=2.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ce5a89bc-c230-41d7-b0a7-d19d7b22ffb2/mycred","title":"myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 19:46:58","sources":[{"name":"Wordfence","remoteId":"ce5a89bc-c230-41d7-b0a7-d19d7b22ffb2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ce5a89bc-c230-41d7-b0a7-d19d7b22ffb2?source=api-prod","cve":"CVE-2026-0550","affectedVersions":"<=2.9.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/eebac297-9652-4640-935e-4984280ea5fa/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. <= 2.9.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"eebac297-9652-4640-935e-4984280ea5fa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eebac297-9652-4640-935e-4984280ea5fa?source=api-prod","cve":"CVE-2026-27440","affectedVersions":"<=2.9.7.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3d4283e-ea57-41e1-baeb-f8f70cad3020/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.6.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3d4283e-ea57-41e1-baeb-f8f70cad3020"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3d4283e-ea57-41e1-baeb-f8f70cad3020?source=api-prod","cve":"CVE-2024-32711","affectedVersions":"<=2.6.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/01857d1d-4b6c-4ab0-b2ef-6a948daedbe0/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.6.1 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"01857d1d-4b6c-4ab0-b2ef-6a948daedbe0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01857d1d-4b6c-4ab0-b2ef-6a948daedbe0?source=api-prod","affectedVersions":"<=2.4.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/041a7c9a-d7dc-4742-b879-f1836f324a46/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-16 17:41:46","sources":[{"name":"Wordfence","remoteId":"041a7c9a-d7dc-4742-b879-f1836f324a46"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/041a7c9a-d7dc-4742-b879-f1836f324a46?source=api-prod","cve":"CVE-2026-8607","affectedVersions":"<=3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/11ad51d9-d0b6-4a47-875c-d7a6727f4d7c/mycred","title":"myCred <= 2.9.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"11ad51d9-d0b6-4a47-875c-d7a6727f4d7c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/11ad51d9-d0b6-4a47-875c-d7a6727f4d7c?source=api-prod","cve":"CVE-2025-54668","affectedVersions":"<=2.9.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/20be9a37-9e9f-4791-a27c-e0db007be787/mycred","title":"myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"20be9a37-9e9f-4791-a27c-e0db007be787"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20be9a37-9e9f-4791-a27c-e0db007be787?source=api-prod","cve":"CVE-2024-8658","affectedVersions":"<=2.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/23a081d4-443d-4b3b-8c89-9eb0e23c961e/mycred","title":"myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-07 21:21:56","sources":[{"name":"Wordfence","remoteId":"23a081d4-443d-4b3b-8c89-9eb0e23c961e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23a081d4-443d-4b3b-8c89-9eb0e23c961e?source=api-prod","cve":"CVE-2024-10187","affectedVersions":"<=2.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/2c994021-d429-4652-ada5-34ec0517cb19/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.2 - Subscriber+ SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c994021-d429-4652-ada5-34ec0517cb19"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c994021-d429-4652-ada5-34ec0517cb19?source=api-prod","cve":"CVE-2021-24755","affectedVersions":"<=2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/2d1d9bee-4afa-44cc-8e7a-8a73ad018c4a/mycred","title":"myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-05 17:20:59","sources":[{"name":"Wordfence","remoteId":"2d1d9bee-4afa-44cc-8e7a-8a73ad018c4a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d1d9bee-4afa-44cc-8e7a-8a73ad018c4a?source=api-prod","cve":"CVE-2024-11201","affectedVersions":"<=2.7.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/357bf5c3-6c9a-4478-b9d0-9f1beaaf5d00/mycred","title":"myCred <= 2.9.4.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"357bf5c3-6c9a-4478-b9d0-9f1beaaf5d00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/357bf5c3-6c9a-4478-b9d0-9f1beaaf5d00?source=api-prod","cve":"CVE-2025-49872","affectedVersions":"<=2.9.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/mycred","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<2.4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/3b5252ed-7901-4896-a574-46652d0dfc11/mycred","title":"Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"3b5252ed-7901-4896-a574-46652d0dfc11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3b5252ed-7901-4896-a574-46652d0dfc11?source=api-prod","cve":"CVE-2026-40794","affectedVersions":"<=3.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/3e5800fa-e0d7-435f-98c2-6d91df26d657/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin  <= 2.4.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"3e5800fa-e0d7-435f-98c2-6d91df26d657"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e5800fa-e0d7-435f-98c2-6d91df26d657?source=api-prod","cve":"CVE-2022-1092","affectedVersions":"<2.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/43b05697-bc36-4f32-86b4-2feef892fe42/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-18 20:25:10","sources":[{"name":"Wordfence","remoteId":"43b05697-bc36-4f32-86b4-2feef892fe42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/43b05697-bc36-4f32-86b4-2feef892fe42?source=api-prod","cve":"CVE-2025-12361","affectedVersions":"<=2.9.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/44ea3322-10f6-4f52-8fa8-8cc2632b67ce/mycred","title":"myCred <= 2.7.2 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"44ea3322-10f6-4f52-8fa8-8cc2632b67ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44ea3322-10f6-4f52-8fa8-8cc2632b67ce?source=api-prod","cve":"CVE-2024-43354","affectedVersions":"<=2.7.2","severity":"high"},{"advisoryId":"WPSECADV/WF/51118777-bdac-4a6b-a154-5a74a988a2e0/mycred","title":"myCred <= 2.9.4.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"51118777-bdac-4a6b-a154-5a74a988a2e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51118777-bdac-4a6b-a154-5a74a988a2e0?source=api-prod","cve":"CVE-2025-49857","affectedVersions":"<=2.9.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/mycred","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=2.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/55f25d72-c0aa-4dbf-bb3f-ba010f7f7e69/mycred","title":"myCred <= 2.9.7.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"55f25d72-c0aa-4dbf-bb3f-ba010f7f7e69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/55f25d72-c0aa-4dbf-bb3f-ba010f7f7e69?source=api-prod","cve":"CVE-2026-24951","affectedVersions":"<=2.9.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/6753a37b-7242-4895-a439-f726ad835f61/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.3.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"6753a37b-7242-4895-a439-f726ad835f61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6753a37b-7242-4895-a439-f726ad835f61?source=api-prod","cve":"CVE-2021-25015","affectedVersions":"<=2.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/69695e2e-2086-4d50-8518-0b2f5ab9ea56/mycred","title":"myCred <= 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"69695e2e-2086-4d50-8518-0b2f5ab9ea56"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69695e2e-2086-4d50-8518-0b2f5ab9ea56?source=api-prod","cve":"CVE-2024-43353","affectedVersions":"<=2.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/74db4d3a-ee3f-460a-b880-f61a8e33ea57/mycred","title":"myCred Plugin <= 1.7.7 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-04-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"74db4d3a-ee3f-460a-b880-f61a8e33ea57"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/74db4d3a-ee3f-460a-b880-f61a8e33ea57?source=api-prod","cve":"CVE-2017-20008","affectedVersions":"<1.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/80b15512-210c-4c6b-a3ad-f5d6042091a3/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"80b15512-210c-4c6b-a3ad-f5d6042091a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/80b15512-210c-4c6b-a3ad-f5d6042091a3?source=api-prod","cve":"CVE-2022-0287","affectedVersions":"<2.4.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/8123fc2e-54c9-4e0d-b1c6-6f994f07e7e3/mycred","title":"Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"8123fc2e-54c9-4e0d-b1c6-6f994f07e7e3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8123fc2e-54c9-4e0d-b1c6-6f994f07e7e3?source=api-prod","cve":"CVE-2026-42676","affectedVersions":"<=3.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/84e18c54-4bc2-45c1-90fb-960a862170b6/mycred","title":"myCred <= 2.9.4.3 - Authenticated (Subscriber+) Race Condition\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"84e18c54-4bc2-45c1-90fb-960a862170b6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84e18c54-4bc2-45c1-90fb-960a862170b6?source=api-prod","cve":"CVE-2025-54667","affectedVersions":"<=2.9.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/95d9995a-d99e-4136-84f9-1d3dfc4a4bf0/mycred","title":"myCred <= 3.1.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"95d9995a-d99e-4136-84f9-1d3dfc4a4bf0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/95d9995a-d99e-4136-84f9-1d3dfc4a4bf0?source=api-prod","cve":"CVE-2026-61968","affectedVersions":"<=3.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/9b7a7780-0f61-4541-bcde-dbf64fd23320/mycred","title":"myCred <= 2.7.2 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b7a7780-0f61-4541-bcde-dbf64fd23320"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b7a7780-0f61-4541-bcde-dbf64fd23320?source=api-prod","cve":"CVE-2024-43214","affectedVersions":"<=2.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d8c7e79-00c4-4667-9ef6-e988901bb6a0/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 19:36:26","sources":[{"name":"Wordfence","remoteId":"9d8c7e79-00c4-4667-9ef6-e988901bb6a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d8c7e79-00c4-4667-9ef6-e988901bb6a0?source=api-prod","cve":"CVE-2026-17149","affectedVersions":"<=3.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3936c4b-2326-41dc-b7d6-a8cf43752ddb/mycred","title":"myCred <= 2.5 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3936c4b-2326-41dc-b7d6-a8cf43752ddb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3936c4b-2326-41dc-b7d6-a8cf43752ddb?source=api-prod","cve":"CVE-2023-35096","affectedVersions":"<2.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/af54654b-60af-446d-b170-ee0a1ebed22c/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-12 17:05:13","sources":[{"name":"Wordfence","remoteId":"af54654b-60af-446d-b170-ee0a1ebed22c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af54654b-60af-446d-b170-ee0a1ebed22c?source=api-prod","cve":"CVE-2025-12362","affectedVersions":"<=2.9.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/b5d08207-9480-42ef-b7b4-b7d01a839c85/mycred","title":"Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 3.2.5 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"b5d08207-9480-42ef-b7b4-b7d01a839c85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5d08207-9480-42ef-b7b4-b7d01a839c85?source=api-prod","cve":"CVE-2026-15150","affectedVersions":"<3.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/b8464cd2-eef0-419b-b368-6f86af4e8dd5/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 -  Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8464cd2-eef0-419b-b368-6f86af4e8dd5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8464cd2-eef0-419b-b368-6f86af4e8dd5?source=api-prod","cve":"CVE-2022-0363","affectedVersions":"<2.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c4067e03-427c-4b03-a250-0354572ae361/mycred","title":"myCred <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"c4067e03-427c-4b03-a250-0354572ae361"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4067e03-427c-4b03-a250-0354572ae361?source=api-prod","cve":"CVE-2023-47853","affectedVersions":"<=2.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ce5a89bc-c230-41d7-b0a7-d19d7b22ffb2/mycred","title":"myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 19:46:58","sources":[{"name":"Wordfence","remoteId":"ce5a89bc-c230-41d7-b0a7-d19d7b22ffb2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ce5a89bc-c230-41d7-b0a7-d19d7b22ffb2?source=api-prod","cve":"CVE-2026-0550","affectedVersions":"<=2.9.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/eebac297-9652-4640-935e-4984280ea5fa/mycred","title":"myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. <= 2.9.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"eebac297-9652-4640-935e-4984280ea5fa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eebac297-9652-4640-935e-4984280ea5fa?source=api-prod","cve":"CVE-2026-27440","affectedVersions":"<=2.9.7.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f35eee8f-3527-40f1-9ac1-2f8316b3574b/mycred","title":"Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 4.0.0-beta.1 - Authenticated (Subscriber+) Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"f35eee8f-3527-40f1-9ac1-2f8316b3574b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f35eee8f-3527-40f1-9ac1-2f8316b3574b?source=api-prod","cve":"CVE-2026-114698","affectedVersions":"<4.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3d4283e-ea57-41e1-baeb-f8f70cad3020/mycred","title":"myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.6.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3d4283e-ea57-41e1-baeb-f8f70cad3020"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3d4283e-ea57-41e1-baeb-f8f70cad3020?source=api-prod","cve":"CVE-2024-32711","affectedVersions":"<=2.6.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6e6577736d616e617070811c9dc5_gen.json b/internal/data/assets/plugin_6e6577736d616e617070811c9dc5_gen.json
index 0ab49cee..0ac0474c 100644
--- a/internal/data/assets/plugin_6e6577736d616e617070811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6e6577736d616e617070811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/22a02e75-4ab1-48fb-b618-b1dff2fcd97f/newsmanapp","title":"NewsmanApp <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-12 16:04:29","sources":[{"name":"Wordfence","remoteId":"22a02e75-4ab1-48fb-b618-b1dff2fcd97f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22a02e75-4ab1-48fb-b618-b1dff2fcd97f?source=api-prod","cve":"CVE-2024-11767","affectedVersions":"<=2.7.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fbad834-7e28-4e32-bd88-7751ec2d630b/newsmanapp","title":"NewsmanApp <= 2.7.7 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fbad834-7e28-4e32-bd88-7751ec2d630b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fbad834-7e28-4e32-bd88-7751ec2d630b?source=api-prod","cve":"CVE-2025-60164","affectedVersions":"<=2.7.7","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/22a02e75-4ab1-48fb-b618-b1dff2fcd97f/newsmanapp","title":"NewsmanApp <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-12 16:04:29","sources":[{"name":"Wordfence","remoteId":"22a02e75-4ab1-48fb-b618-b1dff2fcd97f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/22a02e75-4ab1-48fb-b618-b1dff2fcd97f?source=api-prod","cve":"CVE-2024-11767","affectedVersions":"<=2.7.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fbad834-7e28-4e32-bd88-7751ec2d630b/newsmanapp","title":"NewsmanApp <= 2.7.7 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fbad834-7e28-4e32-bd88-7751ec2d630b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fbad834-7e28-4e32-bd88-7751ec2d630b?source=api-prod","cve":"CVE-2025-60164","affectedVersions":"<=2.7.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/ba6e0223-66d4-4fe7-8c15-6b37990a2f8a/newsmanapp","title":"NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Site Scripting via 'billing_first_name' and 'billing_last_name' Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:32:54","sources":[{"name":"Wordfence","remoteId":"ba6e0223-66d4-4fe7-8c15-6b37990a2f8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ba6e0223-66d4-4fe7-8c15-6b37990a2f8a?source=api-prod","cve":"CVE-2026-115821","affectedVersions":"<=3.7.29","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6e65782d666f726d732d657870726573732d77702d666f726d2d6275696c646572811c9dc5_gen.json b/internal/data/assets/plugin_6e65782d666f726d732d657870726573732d77702d666f726d2d6275696c646572811c9dc5_gen.json
index b16fc1be..3693866d 100644
--- a/internal/data/assets/plugin_6e65782d666f726d732d657870726573732d77702d666f726d2d6275696c646572811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6e65782d666f726d732d657870726573732d77702d666f726d2d6275696c646572811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/01940eeb-b4a6-450d-b646-84f415ca92c9/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-11-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"01940eeb-b4a6-450d-b646-84f415ca92c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01940eeb-b4a6-450d-b646-84f415ca92c9?source=api-prod","cve":"CVE-2020-36670","affectedVersions":"<=7.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/097c3257-6479-4169-ac17-cb1629aef7a1/nex-forms-express-wp-form-builder","title":"Nex-Forms Express WP Form Builder <= 9.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"097c3257-6479-4169-ac17-cb1629aef7a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/097c3257-6479-4169-ac17-cb1629aef7a1?source=api-prod","cve":"CVE-2025-14803","affectedVersions":"<=9.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/0af9df66-8d82-4ae8-85a1-656d8ea40a7a/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_send_nf_email AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 17:40:45","sources":[{"name":"Wordfence","remoteId":"0af9df66-8d82-4ae8-85a1-656d8ea40a7a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0af9df66-8d82-4ae8-85a1-656d8ea40a7a?source=api-prod","cve":"CVE-2026-9017","affectedVersions":"<=9.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0cf60aad-1c74-4da2-b62a-42582a74e0e9/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"0cf60aad-1c74-4da2-b62a-42582a74e0e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0cf60aad-1c74-4da2-b62a-42582a74e0e9?source=api-prod","cve":"CVE-2026-10525","affectedVersions":"<=9.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/13c2b6d2-29d6-4193-80f6-87be0d64968f/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress 9.2.1 - 9.3.0 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"13c2b6d2-29d6-4193-80f6-87be0d64968f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13c2b6d2-29d6-4193-80f6-87be0d64968f?source=api-prod","cve":"CVE-2026-106166","affectedVersions":">=9.2.1,<=9.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/19cc7f5b-545a-4f68-bc37-269cc84364ad/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.1.7 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"19cc7f5b-545a-4f68-bc37-269cc84364ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/19cc7f5b-545a-4f68-bc37-269cc84364ad?source=api-prod","cve":"CVE-2025-69326","affectedVersions":"<=9.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d2b7215-d3a7-4e5a-ae9b-65fecc26dceb/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-07 21:30:44","sources":[{"name":"Wordfence","remoteId":"1d2b7215-d3a7-4e5a-ae9b-65fecc26dceb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d2b7215-d3a7-4e5a-ae9b-65fecc26dceb?source=api-prod","cve":"CVE-2025-4208","affectedVersions":"<=8.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/1dd094b8-440a-47ae-8edc-c23f1909d607/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.4 - Authenticated (Admin+) SQL Injection via 'additional_params' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-15 15:35:26","sources":[{"name":"Wordfence","remoteId":"1dd094b8-440a-47ae-8edc-c23f1909d607"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1dd094b8-440a-47ae-8edc-c23f1909d607?source=api-prod","cve":"CVE-2026-15602","affectedVersions":"<=9.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/23b21dbd-caf7-49fc-bed4-4017151ee4ad/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Authenticated (Subscriber+) License Deactivation via deactivate_license\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-13 15:17:36","sources":[{"name":"Wordfence","remoteId":"23b21dbd-caf7-49fc-bed4-4017151ee4ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23b21dbd-caf7-49fc-bed4-4017151ee4ad?source=api-prod","cve":"CVE-2026-1948","affectedVersions":"<=9.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/26bd4058-ef00-48c8-8ab5-01535f0238a4/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"26bd4058-ef00-48c8-8ab5-01535f0238a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26bd4058-ef00-48c8-8ab5-01535f0238a4?source=api-prod","cve":"CVE-2024-0907","affectedVersions":"<=8.5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2e88aa9e-6d1d-44ba-8d63-2f4d4161bc9e/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more < 3.4 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"2e88aa9e-6d1d-44ba-8d63-2f4d4161bc9e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2e88aa9e-6d1d-44ba-8d63-2f4d4161bc9e?source=api-prod","affectedVersions":"<3.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/2f2d8b21-1c25-4cfc-bf62-2e71d6a90d91/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.12 - Authenticated (Administrator+) SQL Injection via 'table' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-14 18:51:33","sources":[{"name":"Wordfence","remoteId":"2f2d8b21-1c25-4cfc-bf62-2e71d6a90d91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f2d8b21-1c25-4cfc-bf62-2e71d6a90d91?source=api-prod","cve":"CVE-2026-7046","affectedVersions":"<=9.1.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/49dc267a-48cf-487f-bedc-fd892666e9a0/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via 'real_val__' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-02 15:30:17","sources":[{"name":"Wordfence","remoteId":"49dc267a-48cf-487f-bedc-fd892666e9a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49dc267a-48cf-487f-bedc-fd892666e9a0?source=api-prod","cve":"CVE-2026-13040","affectedVersions":"<=9.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/53db0f72-3353-42bb-ad75-4c5aa32d7939/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"53db0f72-3353-42bb-ad75-4c5aa32d7939"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53db0f72-3353-42bb-ad75-4c5aa32d7939?source=api-prod","cve":"CVE-2024-1129","affectedVersions":"<=8.5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/54897968-55fe-4542-bac8-190b29f68b0d/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.1.7 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"54897968-55fe-4542-bac8-190b29f68b0d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54897968-55fe-4542-bac8-190b29f68b0d?source=api-prod","cve":"CVE-2025-69324","affectedVersions":"<=9.1.7","severity":"high"},{"advisoryId":"WPSECADV/WF/5d132ef1-a538-4be6-9031-2271d421f5bd/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.3.0 - Authenticated (Administrator+) SQL Injection via 'operator' Key of the 'additional_params' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 19:04:27","sources":[{"name":"Wordfence","remoteId":"5d132ef1-a538-4be6-9031-2271d421f5bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d132ef1-a538-4be6-9031-2271d421f5bd?source=api-prod","cve":"CVE-2026-75961","affectedVersions":"<=9.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5f0406ad-8f4e-49a2-87dd-a6e319904652/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.7.8 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f0406ad-8f4e-49a2-87dd-a6e319904652"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f0406ad-8f4e-49a2-87dd-a6e319904652?source=api-prod","cve":"CVE-2024-53808","affectedVersions":"<=8.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/6989e54b-ce5e-4c79-bd0d-0f7978a4bd44/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder < 4.6.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"6989e54b-ce5e-4c79-bd0d-0f7978a4bd44"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6989e54b-ce5e-4c79-bd0d-0f7978a4bd44?source=api-prod","cve":"CVE-2015-9452","affectedVersions":"<4.6.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/6a587455-fd93-4f28-902a-4d84d1253e64/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"6a587455-fd93-4f28-902a-4d84d1253e64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6a587455-fd93-4f28-902a-4d84d1253e64?source=api-prod","cve":"CVE-2026-57668","affectedVersions":"<=9.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/6b5964a7-410b-4fea-9de2-22ffda80c8e8/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.5 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b5964a7-410b-4fea-9de2-22ffda80c8e8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b5964a7-410b-4fea-9de2-22ffda80c8e8?source=api-prod","cve":"CVE-2023-50838","affectedVersions":"<=8.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/6b8f081a-30c1-4e18-a873-e5cc3f7cf0c5/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b8f081a-30c1-4e18-a873-e5cc3f7cf0c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b8f081a-30c1-4e18-a873-e5cc3f7cf0c5?source=api-prod","cve":"CVE-2026-96607","affectedVersions":"<=9.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/70587bb9-6f76-4073-b5db-06ffda0194e9/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 7.8.7 Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"70587bb9-6f76-4073-b5db-06ffda0194e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70587bb9-6f76-4073-b5db-06ffda0194e9?source=api-prod","cve":"CVE-2021-34676","affectedVersions":"<=7.8.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/75f98731-f5a1-46aa-bf00-3b119a3b917e/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.7.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"75f98731-f5a1-46aa-bf00-3b119a3b917e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/75f98731-f5a1-46aa-bf00-3b119a3b917e?source=api-prod","cve":"CVE-2024-47389","affectedVersions":"<=8.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/89655e84-acb5-40f2-a22f-a483a1bb29df/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 7.9.6 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"89655e84-acb5-40f2-a22f-a483a1bb29df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/89655e84-acb5-40f2-a22f-a483a1bb29df?source=api-prod","cve":"CVE-2022-3142","affectedVersions":"<=7.9.6","severity":"high"},{"advisoryId":"WPSECADV/WF/8a7b4d0b-9845-4d0b-b255-a311076f5ca7/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.4.2 - Cross-Site Request Forgery to Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a7b4d0b-9845-4d0b-b255-a311076f5ca7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a7b4d0b-9845-4d0b-b255-a311076f5ca7?source=api-prod","cve":"CVE-2021-24705","affectedVersions":"<=8.4.2","severity":"high"},{"advisoryId":"WPSECADV/WF/9bac82ee-55bf-4381-b441-115a675e4834/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.1.11 - Unauthenticated Stored Cross-Site Scripting via POST Parameter Key Names\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-02 15:41:51","sources":[{"name":"Wordfence","remoteId":"9bac82ee-55bf-4381-b441-115a675e4834"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9bac82ee-55bf-4381-b441-115a675e4834?source=api-prod","cve":"CVE-2026-5063","affectedVersions":"<=9.1.11","severity":"high"},{"advisoryId":"WPSECADV/WF/9d19be8b-3e0b-4d74-97e0-f17132d2d34c/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 8.3.3 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"9d19be8b-3e0b-4d74-97e0-f17132d2d34c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d19be8b-3e0b-4d74-97e0-f17132d2d34c?source=api-prod","cve":"CVE-2023-2114","affectedVersions":"<=8.3.3","severity":"high"},{"advisoryId":"WPSECADV/WF/a333d5b4-cedf-40ac-8da9-f4965d2a397a/nex-forms-express-wp-form-builder","title":"NEX-Forms - Ultimate Form Builder <= 8.4.3 - Authenticated Stored Cross-Site Scripting via Form Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"a333d5b4-cedf-40ac-8da9-f4965d2a397a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a333d5b4-cedf-40ac-8da9-f4965d2a397a?source=api-prod","cve":"CVE-2023-0439","affectedVersions":"<=8.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a33a7ba5-c6f8-4cf4-8011-8312e9c5da8f/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-07 21:30:27","sources":[{"name":"Wordfence","remoteId":"a33a7ba5-c6f8-4cf4-8011-8312e9c5da8f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a33a7ba5-c6f8-4cf4-8011-8312e9c5da8f?source=api-prod","cve":"CVE-2025-3468","affectedVersions":"<=8.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9b45e9b-57a6-4bfd-b9e4-d07780370f02/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.5.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9b45e9b-57a6-4bfd-b9e4-d07780370f02"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9b45e9b-57a6-4bfd-b9e4-d07780370f02?source=api-prod","cve":"CVE-2023-52120","affectedVersions":"<=8.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ab807beb-0e20-47e4-be3e-9e8f50b84c7b/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ab807beb-0e20-47e4-be3e-9e8f50b84c7b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ab807beb-0e20-47e4-be3e-9e8f50b84c7b?source=api-prod","cve":"CVE-2024-10862","affectedVersions":"<=8.7.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2a8c307-2430-4ea9-afe0-e5e758eabdd1/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_set_entry_update_id\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-14 13:14:22","sources":[{"name":"Wordfence","remoteId":"b2a8c307-2430-4ea9-afe0-e5e758eabdd1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2a8c307-2430-4ea9-afe0-e5e758eabdd1?source=api-prod","cve":"CVE-2026-1947","affectedVersions":"<=9.1.9","severity":"high"},{"advisoryId":"WPSECADV/WF/bb5c8cb3-df67-4f2c-869a-48e34f5619ff/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.3 -  Authenticated (Admin+) Arbitrary File Deletion via Path Traversal via 'location' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 19:42:18","sources":[{"name":"Wordfence","remoteId":"bb5c8cb3-df67-4f2c-869a-48e34f5619ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb5c8cb3-df67-4f2c-869a-48e34f5619ff?source=api-prod","cve":"CVE-2026-15450","affectedVersions":"<=9.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/cdd7b2ec-5470-492d-a8ea-ae69b45572ce/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdd7b2ec-5470-492d-a8ea-ae69b45572ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdd7b2ec-5470-492d-a8ea-ae69b45572ce?source=api-prod","cve":"CVE-2024-37512","affectedVersions":"<=8.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6934c0e-7526-4de7-9478-3c953b3dc64f/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6934c0e-7526-4de7-9478-3c953b3dc64f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6934c0e-7526-4de7-9478-3c953b3dc64f?source=api-prod","cve":"CVE-2024-25593","affectedVersions":"<=8.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/da235dea-4884-4e6a-a8b8-65d34f050684/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via '_name[]' Array Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 21:14:53","sources":[{"name":"Wordfence","remoteId":"da235dea-4884-4e6a-a8b8-65d34f050684"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da235dea-4884-4e6a-a8b8-65d34f050684?source=api-prod","cve":"CVE-2026-12142","affectedVersions":"<=9.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/ddfa5a3d-fef2-4049-915c-51c3e28153bf/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.8 - Missing Authorization to Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-30 12:12:07","sources":[{"name":"Wordfence","remoteId":"ddfa5a3d-fef2-4049-915c-51c3e28153bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ddfa5a3d-fef2-4049-915c-51c3e28153bf?source=api-prod","cve":"CVE-2025-15510","affectedVersions":"<=9.1.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/e68d47e7-9a42-4a77-aefa-fe130500cbd3/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.6 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-10 19:07:08","sources":[{"name":"Wordfence","remoteId":"e68d47e7-9a42-4a77-aefa-fe130500cbd3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e68d47e7-9a42-4a77-aefa-fe130500cbd3?source=api-prod","cve":"CVE-2025-10185","affectedVersions":"<=9.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/ecf39f38-a476-47a8-a632-986b851895a6/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via CSVExport Class\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 17:24:08","sources":[{"name":"Wordfence","remoteId":"ecf39f38-a476-47a8-a632-986b851895a6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ecf39f38-a476-47a8-a632-986b851895a6?source=api-prod","cve":"CVE-2026-12404","affectedVersions":"<=9.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f188a5e6-699e-4e1a-b4e4-7fb4056b0bee/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.8.1 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"f188a5e6-699e-4e1a-b4e4-7fb4056b0bee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f188a5e6-699e-4e1a-b4e4-7fb4056b0bee?source=api-prod","cve":"CVE-2024-13498","affectedVersions":"<=8.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2c3b646-d865-4425-bc8f-00b3555a3d74/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2c3b646-d865-4425-bc8f-00b3555a3d74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2c3b646-d865-4425-bc8f-00b3555a3d74?source=api-prod","cve":"CVE-2024-1130","affectedVersions":"<=8.5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f6bdd745-066d-4b8e-a66c-6d3fb9a9ef12/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.1.3 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"f6bdd745-066d-4b8e-a66c-6d3fb9a9ef12"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f6bdd745-066d-4b8e-a66c-6d3fb9a9ef12?source=api-prod","cve":"CVE-2025-49399","affectedVersions":"<=9.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd817fe9-b7be-4252-877a-e9843d62a0a9/nex-forms-express-wp-form-builder","title":"NEX-Forms - Ultimate Form Builder <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd817fe9-b7be-4252-877a-e9843d62a0a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd817fe9-b7be-4252-877a-e9843d62a0a9?source=api-prod","cve":"CVE-2023-0272","affectedVersions":"<=8.3.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/01940eeb-b4a6-450d-b646-84f415ca92c9/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-11-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"01940eeb-b4a6-450d-b646-84f415ca92c9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01940eeb-b4a6-450d-b646-84f415ca92c9?source=api-prod","cve":"CVE-2020-36670","affectedVersions":"<=7.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/097c3257-6479-4169-ac17-cb1629aef7a1/nex-forms-express-wp-form-builder","title":"Nex-Forms Express WP Form Builder <= 9.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"097c3257-6479-4169-ac17-cb1629aef7a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/097c3257-6479-4169-ac17-cb1629aef7a1?source=api-prod","cve":"CVE-2025-14803","affectedVersions":"<=9.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/0af9df66-8d82-4ae8-85a1-656d8ea40a7a/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_send_nf_email AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 17:40:45","sources":[{"name":"Wordfence","remoteId":"0af9df66-8d82-4ae8-85a1-656d8ea40a7a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0af9df66-8d82-4ae8-85a1-656d8ea40a7a?source=api-prod","cve":"CVE-2026-9017","affectedVersions":"<=9.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0cf60aad-1c74-4da2-b62a-42582a74e0e9/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"0cf60aad-1c74-4da2-b62a-42582a74e0e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0cf60aad-1c74-4da2-b62a-42582a74e0e9?source=api-prod","cve":"CVE-2026-10525","affectedVersions":"<=9.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/13c2b6d2-29d6-4193-80f6-87be0d64968f/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress 9.2.1 - 9.3.0 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"13c2b6d2-29d6-4193-80f6-87be0d64968f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/13c2b6d2-29d6-4193-80f6-87be0d64968f?source=api-prod","cve":"CVE-2026-106166","affectedVersions":">=9.2.1,<=9.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/19cc7f5b-545a-4f68-bc37-269cc84364ad/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.1.7 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"19cc7f5b-545a-4f68-bc37-269cc84364ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/19cc7f5b-545a-4f68-bc37-269cc84364ad?source=api-prod","cve":"CVE-2025-69326","affectedVersions":"<=9.1.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d2b7215-d3a7-4e5a-ae9b-65fecc26dceb/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-07 21:30:44","sources":[{"name":"Wordfence","remoteId":"1d2b7215-d3a7-4e5a-ae9b-65fecc26dceb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d2b7215-d3a7-4e5a-ae9b-65fecc26dceb?source=api-prod","cve":"CVE-2025-4208","affectedVersions":"<=8.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/1dd094b8-440a-47ae-8edc-c23f1909d607/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.4 - Authenticated (Admin+) SQL Injection via 'additional_params' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-15 15:35:26","sources":[{"name":"Wordfence","remoteId":"1dd094b8-440a-47ae-8edc-c23f1909d607"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1dd094b8-440a-47ae-8edc-c23f1909d607?source=api-prod","cve":"CVE-2026-15602","affectedVersions":"<=9.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/1f80dc1b-2622-4cf5-9975-3609bfa21333/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Header\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:29:29","sources":[{"name":"Wordfence","remoteId":"1f80dc1b-2622-4cf5-9975-3609bfa21333"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f80dc1b-2622-4cf5-9975-3609bfa21333?source=api-prod","cve":"CVE-2026-96767","affectedVersions":"<=9.3.2","severity":"high"},{"advisoryId":"WPSECADV/WF/23b21dbd-caf7-49fc-bed4-4017151ee4ad/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Authenticated (Subscriber+) License Deactivation via deactivate_license\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-13 15:17:36","sources":[{"name":"Wordfence","remoteId":"23b21dbd-caf7-49fc-bed4-4017151ee4ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23b21dbd-caf7-49fc-bed4-4017151ee4ad?source=api-prod","cve":"CVE-2026-1948","affectedVersions":"<=9.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/26bd4058-ef00-48c8-8ab5-01535f0238a4/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"26bd4058-ef00-48c8-8ab5-01535f0238a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26bd4058-ef00-48c8-8ab5-01535f0238a4?source=api-prod","cve":"CVE-2024-0907","affectedVersions":"<=8.5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2e88aa9e-6d1d-44ba-8d63-2f4d4161bc9e/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more < 3.4 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"2e88aa9e-6d1d-44ba-8d63-2f4d4161bc9e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2e88aa9e-6d1d-44ba-8d63-2f4d4161bc9e?source=api-prod","affectedVersions":"<3.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/2f2d8b21-1c25-4cfc-bf62-2e71d6a90d91/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.12 - Authenticated (Administrator+) SQL Injection via 'table' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-14 18:51:33","sources":[{"name":"Wordfence","remoteId":"2f2d8b21-1c25-4cfc-bf62-2e71d6a90d91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f2d8b21-1c25-4cfc-bf62-2e71d6a90d91?source=api-prod","cve":"CVE-2026-7046","affectedVersions":"<=9.1.12","severity":"medium"},{"advisoryId":"WPSECADV/WF/49dc267a-48cf-487f-bedc-fd892666e9a0/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via 'real_val__' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-02 15:30:17","sources":[{"name":"Wordfence","remoteId":"49dc267a-48cf-487f-bedc-fd892666e9a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49dc267a-48cf-487f-bedc-fd892666e9a0?source=api-prod","cve":"CVE-2026-13040","affectedVersions":"<=9.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/53db0f72-3353-42bb-ad75-4c5aa32d7939/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"53db0f72-3353-42bb-ad75-4c5aa32d7939"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53db0f72-3353-42bb-ad75-4c5aa32d7939?source=api-prod","cve":"CVE-2024-1129","affectedVersions":"<=8.5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/54897968-55fe-4542-bac8-190b29f68b0d/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.1.7 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"54897968-55fe-4542-bac8-190b29f68b0d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54897968-55fe-4542-bac8-190b29f68b0d?source=api-prod","cve":"CVE-2025-69324","affectedVersions":"<=9.1.7","severity":"high"},{"advisoryId":"WPSECADV/WF/5d132ef1-a538-4be6-9031-2271d421f5bd/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.3.0 - Authenticated (Administrator+) SQL Injection via 'operator' Key of the 'additional_params' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 19:04:27","sources":[{"name":"Wordfence","remoteId":"5d132ef1-a538-4be6-9031-2271d421f5bd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d132ef1-a538-4be6-9031-2271d421f5bd?source=api-prod","cve":"CVE-2026-75961","affectedVersions":"<=9.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5f0406ad-8f4e-49a2-87dd-a6e319904652/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.7.8 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f0406ad-8f4e-49a2-87dd-a6e319904652"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f0406ad-8f4e-49a2-87dd-a6e319904652?source=api-prod","cve":"CVE-2024-53808","affectedVersions":"<=8.7.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/6989e54b-ce5e-4c79-bd0d-0f7978a4bd44/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder < 4.6.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"6989e54b-ce5e-4c79-bd0d-0f7978a4bd44"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6989e54b-ce5e-4c79-bd0d-0f7978a4bd44?source=api-prod","cve":"CVE-2015-9452","affectedVersions":"<4.6.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/6a587455-fd93-4f28-902a-4d84d1253e64/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"6a587455-fd93-4f28-902a-4d84d1253e64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6a587455-fd93-4f28-902a-4d84d1253e64?source=api-prod","cve":"CVE-2026-57668","affectedVersions":"<=9.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/6b5964a7-410b-4fea-9de2-22ffda80c8e8/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.5 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b5964a7-410b-4fea-9de2-22ffda80c8e8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b5964a7-410b-4fea-9de2-22ffda80c8e8?source=api-prod","cve":"CVE-2023-50838","affectedVersions":"<=8.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/6b8f081a-30c1-4e18-a873-e5cc3f7cf0c5/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b8f081a-30c1-4e18-a873-e5cc3f7cf0c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b8f081a-30c1-4e18-a873-e5cc3f7cf0c5?source=api-prod","cve":"CVE-2026-96607","affectedVersions":"<=9.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/70587bb9-6f76-4073-b5db-06ffda0194e9/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 7.8.7 Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"70587bb9-6f76-4073-b5db-06ffda0194e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70587bb9-6f76-4073-b5db-06ffda0194e9?source=api-prod","cve":"CVE-2021-34676","affectedVersions":"<=7.8.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/75f98731-f5a1-46aa-bf00-3b119a3b917e/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.7.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"75f98731-f5a1-46aa-bf00-3b119a3b917e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/75f98731-f5a1-46aa-bf00-3b119a3b917e?source=api-prod","cve":"CVE-2024-47389","affectedVersions":"<=8.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/89655e84-acb5-40f2-a22f-a483a1bb29df/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 7.9.6 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"89655e84-acb5-40f2-a22f-a483a1bb29df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/89655e84-acb5-40f2-a22f-a483a1bb29df?source=api-prod","cve":"CVE-2022-3142","affectedVersions":"<=7.9.6","severity":"high"},{"advisoryId":"WPSECADV/WF/8a7b4d0b-9845-4d0b-b255-a311076f5ca7/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.4.2 - Cross-Site Request Forgery to Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"8a7b4d0b-9845-4d0b-b255-a311076f5ca7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8a7b4d0b-9845-4d0b-b255-a311076f5ca7?source=api-prod","cve":"CVE-2021-24705","affectedVersions":"<=8.4.2","severity":"high"},{"advisoryId":"WPSECADV/WF/9bac82ee-55bf-4381-b441-115a675e4834/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.1.11 - Unauthenticated Stored Cross-Site Scripting via POST Parameter Key Names\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-02 15:41:51","sources":[{"name":"Wordfence","remoteId":"9bac82ee-55bf-4381-b441-115a675e4834"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9bac82ee-55bf-4381-b441-115a675e4834?source=api-prod","cve":"CVE-2026-5063","affectedVersions":"<=9.1.11","severity":"high"},{"advisoryId":"WPSECADV/WF/9d19be8b-3e0b-4d74-97e0-f17132d2d34c/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 8.3.3 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"9d19be8b-3e0b-4d74-97e0-f17132d2d34c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d19be8b-3e0b-4d74-97e0-f17132d2d34c?source=api-prod","cve":"CVE-2023-2114","affectedVersions":"<=8.3.3","severity":"high"},{"advisoryId":"WPSECADV/WF/a333d5b4-cedf-40ac-8da9-f4965d2a397a/nex-forms-express-wp-form-builder","title":"NEX-Forms - Ultimate Form Builder <= 8.4.3 - Authenticated Stored Cross-Site Scripting via Form Name\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"a333d5b4-cedf-40ac-8da9-f4965d2a397a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a333d5b4-cedf-40ac-8da9-f4965d2a397a?source=api-prod","cve":"CVE-2023-0439","affectedVersions":"<=8.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a33a7ba5-c6f8-4cf4-8011-8312e9c5da8f/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-07 21:30:27","sources":[{"name":"Wordfence","remoteId":"a33a7ba5-c6f8-4cf4-8011-8312e9c5da8f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a33a7ba5-c6f8-4cf4-8011-8312e9c5da8f?source=api-prod","cve":"CVE-2025-3468","affectedVersions":"<=8.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9b45e9b-57a6-4bfd-b9e4-d07780370f02/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.5.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9b45e9b-57a6-4bfd-b9e4-d07780370f02"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9b45e9b-57a6-4bfd-b9e4-d07780370f02?source=api-prod","cve":"CVE-2023-52120","affectedVersions":"<=8.5.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ab807beb-0e20-47e4-be3e-9e8f50b84c7b/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ab807beb-0e20-47e4-be3e-9e8f50b84c7b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ab807beb-0e20-47e4-be3e-9e8f50b84c7b?source=api-prod","cve":"CVE-2024-10862","affectedVersions":"<=8.7.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2a8c307-2430-4ea9-afe0-e5e758eabdd1/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_set_entry_update_id\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-14 13:14:22","sources":[{"name":"Wordfence","remoteId":"b2a8c307-2430-4ea9-afe0-e5e758eabdd1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2a8c307-2430-4ea9-afe0-e5e758eabdd1?source=api-prod","cve":"CVE-2026-1947","affectedVersions":"<=9.1.9","severity":"high"},{"advisoryId":"WPSECADV/WF/bb5c8cb3-df67-4f2c-869a-48e34f5619ff/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.3 -  Authenticated (Admin+) Arbitrary File Deletion via Path Traversal via 'location' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 19:42:18","sources":[{"name":"Wordfence","remoteId":"bb5c8cb3-df67-4f2c-869a-48e34f5619ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb5c8cb3-df67-4f2c-869a-48e34f5619ff?source=api-prod","cve":"CVE-2026-15450","affectedVersions":"<=9.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/cdd7b2ec-5470-492d-a8ea-ae69b45572ce/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdd7b2ec-5470-492d-a8ea-ae69b45572ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdd7b2ec-5470-492d-a8ea-ae69b45572ce?source=api-prod","cve":"CVE-2024-37512","affectedVersions":"<=8.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/d6934c0e-7526-4de7-9478-3c953b3dc64f/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder <= 8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6934c0e-7526-4de7-9478-3c953b3dc64f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6934c0e-7526-4de7-9478-3c953b3dc64f?source=api-prod","cve":"CVE-2024-25593","affectedVersions":"<=8.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/da235dea-4884-4e6a-a8b8-65d34f050684/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via '_name[]' Array Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 21:14:53","sources":[{"name":"Wordfence","remoteId":"da235dea-4884-4e6a-a8b8-65d34f050684"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da235dea-4884-4e6a-a8b8-65d34f050684?source=api-prod","cve":"CVE-2026-12142","affectedVersions":"<=9.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/ddfa5a3d-fef2-4049-915c-51c3e28153bf/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.8 - Missing Authorization to Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-30 12:12:07","sources":[{"name":"Wordfence","remoteId":"ddfa5a3d-fef2-4049-915c-51c3e28153bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ddfa5a3d-fef2-4049-915c-51c3e28153bf?source=api-prod","cve":"CVE-2025-15510","affectedVersions":"<=9.1.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/e68d47e7-9a42-4a77-aefa-fe130500cbd3/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.6 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-10 19:07:08","sources":[{"name":"Wordfence","remoteId":"e68d47e7-9a42-4a77-aefa-fe130500cbd3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e68d47e7-9a42-4a77-aefa-fe130500cbd3?source=api-prod","cve":"CVE-2025-10185","affectedVersions":"<=9.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/ecf39f38-a476-47a8-a632-986b851895a6/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via CSVExport Class\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 17:24:08","sources":[{"name":"Wordfence","remoteId":"ecf39f38-a476-47a8-a632-986b851895a6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ecf39f38-a476-47a8-a632-986b851895a6?source=api-prod","cve":"CVE-2026-12404","affectedVersions":"<=9.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/f188a5e6-699e-4e1a-b4e4-7fb4056b0bee/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.8.1 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"f188a5e6-699e-4e1a-b4e4-7fb4056b0bee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f188a5e6-699e-4e1a-b4e4-7fb4056b0bee?source=api-prod","cve":"CVE-2024-13498","affectedVersions":"<=8.8.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2c3b646-d865-4425-bc8f-00b3555a3d74/nex-forms-express-wp-form-builder","title":"NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2c3b646-d865-4425-bc8f-00b3555a3d74"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2c3b646-d865-4425-bc8f-00b3555a3d74?source=api-prod","cve":"CVE-2024-1130","affectedVersions":"<=8.5.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f6bdd745-066d-4b8e-a66c-6d3fb9a9ef12/nex-forms-express-wp-form-builder","title":"NEX-Forms <= 9.1.3 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"f6bdd745-066d-4b8e-a66c-6d3fb9a9ef12"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f6bdd745-066d-4b8e-a66c-6d3fb9a9ef12?source=api-prod","cve":"CVE-2025-49399","affectedVersions":"<=9.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/fd817fe9-b7be-4252-877a-e9843d62a0a9/nex-forms-express-wp-form-builder","title":"NEX-Forms - Ultimate Form Builder <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"fd817fe9-b7be-4252-877a-e9843d62a0a9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fd817fe9-b7be-4252-877a-e9843d62a0a9?source=api-prod","cve":"CVE-2023-0272","affectedVersions":"<=8.3.2","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_6e6f74696669636174696f6e78811c9dc5_gen.json b/internal/data/assets/plugin_6e6f74696669636174696f6e78811c9dc5_gen.json
index c0d9deef..980d81c5 100644
--- a/internal/data/assets/plugin_6e6f74696669636174696f6e78811c9dc5_gen.json
+++ b/internal/data/assets/plugin_6e6f74696669636174696f6e78811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/338edb1d-101a-4b6e-ac25-b59bd3e17f8b/notificationx","title":"NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"338edb1d-101a-4b6e-ac25-b59bd3e17f8b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/338edb1d-101a-4b6e-ac25-b59bd3e17f8b?source=api-prod","cve":"CVE-2024-11727","affectedVersions":"<=2.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/36dec90a-fead-48f5-a88b-dfbc6d8bffb4/notificationx","title":"NotificationX <= 2.3.11 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"36dec90a-fead-48f5-a88b-dfbc6d8bffb4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/36dec90a-fead-48f5-a88b-dfbc6d8bffb4?source=api-prod","affectedVersions":"<=2.3.11","severity":"high"},{"advisoryId":"WPSECADV/WF/3ebe7680-a76d-4178-a729-f0d79d861912/notificationx","title":"NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-09-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ebe7680-a76d-4178-a729-f0d79d861912"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ebe7680-a76d-4178-a729-f0d79d861912?source=api-prod","cve":"CVE-2020-36744","affectedVersions":"<1.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/589f5456-1d72-4eac-bd9b-2bedf4109daa/notificationx","title":"NotificationX <= 2.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"589f5456-1d72-4eac-bd9b-2bedf4109daa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/589f5456-1d72-4eac-bd9b-2bedf4109daa?source=api-prod","cve":"CVE-2025-22683","affectedVersions":"<=2.9.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/84b5e044-4522-480a-ad14-8886ed691a86/notificationx","title":"NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:22:58","sources":[{"name":"Wordfence","remoteId":"84b5e044-4522-480a-ad14-8886ed691a86"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84b5e044-4522-480a-ad14-8886ed691a86?source=api-prod","cve":"CVE-2026-110721","affectedVersions":"<=3.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/9ca12315-380b-4251-b637-4e9d29df35e0/notificationx","title":"NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-20 01:49:23","sources":[{"name":"Wordfence","remoteId":"9ca12315-380b-4251-b637-4e9d29df35e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ca12315-380b-4251-b637-4e9d29df35e0?source=api-prod","cve":"CVE-2025-15380","affectedVersions":"<=3.2.0","severity":"high"},{"advisoryId":"WPSECADV/WF/c09318f1-04b2-44e5-a184-c07942ae5778/notificationx","title":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar <= 3.2.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c09318f1-04b2-44e5-a184-c07942ae5778"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c09318f1-04b2-44e5-a184-c07942ae5778?source=api-prod","cve":"CVE-2026-27042","affectedVersions":"<=3.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cac6c4f3-ac60-45d6-a5ba-6708fc1491a4/notificationx","title":"NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:29:54","sources":[{"name":"Wordfence","remoteId":"cac6c4f3-ac60-45d6-a5ba-6708fc1491a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cac6c4f3-ac60-45d6-a5ba-6708fc1491a4?source=api-prod","cve":"CVE-2026-109513","affectedVersions":"<=3.3.3","severity":"high"},{"advisoryId":"WPSECADV/WF/e110ea99-e2fa-4558-bcf3-942a35af0b91/notificationx","title":"NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"e110ea99-e2fa-4558-bcf3-942a35af0b91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e110ea99-e2fa-4558-bcf3-942a35af0b91?source=api-prod","cve":"CVE-2024-1698","affectedVersions":"<=2.8.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/e3cd843b-ab38-45c4-a661-78d4e6db5201/notificationx","title":"NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-20 01:50:24","sources":[{"name":"Wordfence","remoteId":"e3cd843b-ab38-45c4-a661-78d4e6db5201"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3cd843b-ab38-45c4-a661-78d4e6db5201?source=api-prod","cve":"CVE-2026-0554","affectedVersions":"<=3.1.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/ec2eec5a-7767-4215-b77d-5cfd2d148f73/notificationx","title":"NotificationX <= 2.3.8 - Blind SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec2eec5a-7767-4215-b77d-5cfd2d148f73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec2eec5a-7767-4215-b77d-5cfd2d148f73?source=api-prod","cve":"CVE-2022-0349","affectedVersions":"<=2.3.8","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/338edb1d-101a-4b6e-ac25-b59bd3e17f8b/notificationx","title":"NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"338edb1d-101a-4b6e-ac25-b59bd3e17f8b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/338edb1d-101a-4b6e-ac25-b59bd3e17f8b?source=api-prod","cve":"CVE-2024-11727","affectedVersions":"<=2.9.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/36dec90a-fead-48f5-a88b-dfbc6d8bffb4/notificationx","title":"NotificationX <= 2.3.11 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"36dec90a-fead-48f5-a88b-dfbc6d8bffb4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/36dec90a-fead-48f5-a88b-dfbc6d8bffb4?source=api-prod","cve":"CVE-2022-51021","affectedVersions":"<=2.3.11","severity":"high"},{"advisoryId":"WPSECADV/WF/3ebe7680-a76d-4178-a729-f0d79d861912/notificationx","title":"NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-09-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ebe7680-a76d-4178-a729-f0d79d861912"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ebe7680-a76d-4178-a729-f0d79d861912?source=api-prod","cve":"CVE-2020-36744","affectedVersions":"<1.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/589f5456-1d72-4eac-bd9b-2bedf4109daa/notificationx","title":"NotificationX <= 2.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"589f5456-1d72-4eac-bd9b-2bedf4109daa"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/589f5456-1d72-4eac-bd9b-2bedf4109daa?source=api-prod","cve":"CVE-2025-22683","affectedVersions":"<=2.9.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/84b5e044-4522-480a-ad14-8886ed691a86/notificationx","title":"NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:22:58","sources":[{"name":"Wordfence","remoteId":"84b5e044-4522-480a-ad14-8886ed691a86"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84b5e044-4522-480a-ad14-8886ed691a86?source=api-prod","cve":"CVE-2026-110721","affectedVersions":"<=3.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/9ca12315-380b-4251-b637-4e9d29df35e0/notificationx","title":"NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-20 01:49:23","sources":[{"name":"Wordfence","remoteId":"9ca12315-380b-4251-b637-4e9d29df35e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ca12315-380b-4251-b637-4e9d29df35e0?source=api-prod","cve":"CVE-2025-15380","affectedVersions":"<=3.2.0","severity":"high"},{"advisoryId":"WPSECADV/WF/c09318f1-04b2-44e5-a184-c07942ae5778/notificationx","title":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar <= 3.2.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"c09318f1-04b2-44e5-a184-c07942ae5778"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c09318f1-04b2-44e5-a184-c07942ae5778?source=api-prod","cve":"CVE-2026-27042","affectedVersions":"<=3.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cac6c4f3-ac60-45d6-a5ba-6708fc1491a4/notificationx","title":"NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:29:54","sources":[{"name":"Wordfence","remoteId":"cac6c4f3-ac60-45d6-a5ba-6708fc1491a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cac6c4f3-ac60-45d6-a5ba-6708fc1491a4?source=api-prod","cve":"CVE-2026-109513","affectedVersions":"<=3.3.3","severity":"high"},{"advisoryId":"WPSECADV/WF/e110ea99-e2fa-4558-bcf3-942a35af0b91/notificationx","title":"NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"e110ea99-e2fa-4558-bcf3-942a35af0b91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e110ea99-e2fa-4558-bcf3-942a35af0b91?source=api-prod","cve":"CVE-2024-1698","affectedVersions":"<=2.8.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/e3cd843b-ab38-45c4-a661-78d4e6db5201/notificationx","title":"NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-20 01:50:24","sources":[{"name":"Wordfence","remoteId":"e3cd843b-ab38-45c4-a661-78d4e6db5201"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e3cd843b-ab38-45c4-a661-78d4e6db5201?source=api-prod","cve":"CVE-2026-0554","affectedVersions":"<=3.1.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/ec2eec5a-7767-4215-b77d-5cfd2d148f73/notificationx","title":"NotificationX <= 2.3.8 - Blind SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec2eec5a-7767-4215-b77d-5cfd2d148f73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec2eec5a-7767-4215-b77d-5cfd2d148f73?source=api-prod","cve":"CVE-2022-0349","affectedVersions":"<=2.3.8","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_70617373776f72642d70726f746563746564811c9dc5_gen.json b/internal/data/assets/plugin_70617373776f72642d70726f746563746564811c9dc5_gen.json
index 30ee43c0..fd787302 100644
--- a/internal/data/assets/plugin_70617373776f72642d70726f746563746564811c9dc5_gen.json
+++ b/internal/data/assets/plugin_70617373776f72642d70726f746563746564811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/241d75ca-55e3-461a-9844-52e69904da1b/password-protected","title":"Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"241d75ca-55e3-461a-9844-52e69904da1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/241d75ca-55e3-461a-9844-52e69904da1b?source=api-prod","cve":"CVE-2025-3453","affectedVersions":"<=2.7.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/30b4371d-54a2-4111-ad2c-b38b6b31884d/password-protected","title":"Password Protected <= 2.7.11 - Unauthenticated Authorization Bypass via IP Address Spoofing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-24 16:54:49","sources":[{"name":"Wordfence","remoteId":"30b4371d-54a2-4111-ad2c-b38b6b31884d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/30b4371d-54a2-4111-ad2c-b38b6b31884d?source=api-prod","cve":"CVE-2025-11244","affectedVersions":"<=2.7.11","severity":"low"},{"advisoryId":"WPSECADV/WF/79c296b1-e385-404d-96c0-a98f10b89f08/password-protected","title":"Password Protected <= 2.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"79c296b1-e385-404d-96c0-a98f10b89f08"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/79c296b1-e385-404d-96c0-a98f10b89f08?source=api-prod","cve":"CVE-2023-32580","affectedVersions":"<=2.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/aba36c3b-beae-4c47-8aa8-5012a7a838ce/password-protected","title":"Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"aba36c3b-beae-4c47-8aa8-5012a7a838ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aba36c3b-beae-4c47-8aa8-5012a7a838ce?source=api-prod","cve":"CVE-2024-0656","affectedVersions":"<=2.6.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/b424f25d-66c7-4c1b-9712-7b857806f7e4/password-protected","title":"Password Protected <= 2.8.3 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"b424f25d-66c7-4c1b-9712-7b857806f7e4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b424f25d-66c7-4c1b-9712-7b857806f7e4?source=api-prod","cve":"CVE-2026-14943","affectedVersions":"<=2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3045ebf-70af-4124-9116-42c07f64a3bf/password-protected","title":"Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3045ebf-70af-4124-9116-42c07f64a3bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3045ebf-70af-4124-9116-42c07f64a3bf?source=api-prod","cve":"CVE-2024-0437","affectedVersions":"<=2.6.6","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0c0fe97a-a9e4-46e0-bb53-135c2d9a69a4/password-protected","title":"Password Protected <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase_completed Handler\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 17:00:16","sources":[{"name":"Wordfence","remoteId":"0c0fe97a-a9e4-46e0-bb53-135c2d9a69a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c0fe97a-a9e4-46e0-bb53-135c2d9a69a4?source=api-prod","cve":"CVE-2026-93293","affectedVersions":"<=2.8.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/241d75ca-55e3-461a-9844-52e69904da1b/password-protected","title":"Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"241d75ca-55e3-461a-9844-52e69904da1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/241d75ca-55e3-461a-9844-52e69904da1b?source=api-prod","cve":"CVE-2025-3453","affectedVersions":"<=2.7.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/30b4371d-54a2-4111-ad2c-b38b6b31884d/password-protected","title":"Password Protected <= 2.7.11 - Unauthenticated Authorization Bypass via IP Address Spoofing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-24 16:54:49","sources":[{"name":"Wordfence","remoteId":"30b4371d-54a2-4111-ad2c-b38b6b31884d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/30b4371d-54a2-4111-ad2c-b38b6b31884d?source=api-prod","cve":"CVE-2025-11244","affectedVersions":"<=2.7.11","severity":"low"},{"advisoryId":"WPSECADV/WF/79c296b1-e385-404d-96c0-a98f10b89f08/password-protected","title":"Password Protected <= 2.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"79c296b1-e385-404d-96c0-a98f10b89f08"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/79c296b1-e385-404d-96c0-a98f10b89f08?source=api-prod","cve":"CVE-2023-32580","affectedVersions":"<=2.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/aba36c3b-beae-4c47-8aa8-5012a7a838ce/password-protected","title":"Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"aba36c3b-beae-4c47-8aa8-5012a7a838ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/aba36c3b-beae-4c47-8aa8-5012a7a838ce?source=api-prod","cve":"CVE-2024-0656","affectedVersions":"<=2.6.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/b424f25d-66c7-4c1b-9712-7b857806f7e4/password-protected","title":"Password Protected <= 2.8.3 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"b424f25d-66c7-4c1b-9712-7b857806f7e4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b424f25d-66c7-4c1b-9712-7b857806f7e4?source=api-prod","cve":"CVE-2026-14943","affectedVersions":"<=2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3045ebf-70af-4124-9116-42c07f64a3bf/password-protected","title":"Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3045ebf-70af-4124-9116-42c07f64a3bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3045ebf-70af-4124-9116-42c07f64a3bf?source=api-prod","cve":"CVE-2024-0437","affectedVersions":"<=2.6.6","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7061796d656e742d676174657761792d666f722d74656c63656c6c811c9dc5_gen.json b/internal/data/assets/plugin_7061796d656e742d676174657761792d666f722d74656c63656c6c811c9dc5_gen.json
index ff52dbf8..59697488 100644
--- a/internal/data/assets/plugin_7061796d656e742d676174657761792d666f722d74656c63656c6c811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7061796d656e742d676174657761792d666f722d74656c63656c6c811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/c95e5e27-58e5-42ea-841a-f49fdedc3796/payment-gateway-for-telcell","title":"Payment Gateway for Telcell <= 2.0.3 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"c95e5e27-58e5-42ea-841a-f49fdedc3796"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c95e5e27-58e5-42ea-841a-f49fdedc3796?source=api-prod","cve":"CVE-2023-6786","affectedVersions":"<=2.0.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/1197e7ce-3ed4-4ed0-be41-54bce0a8c679/payment-gateway-for-telcell","title":"Payment Gateway for Telcell < 2.0.5 - Unauthenticated Payment Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"1197e7ce-3ed4-4ed0-be41-54bce0a8c679"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1197e7ce-3ed4-4ed0-be41-54bce0a8c679?source=api-prod","cve":"CVE-2026-103301","affectedVersions":"<2.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/c95e5e27-58e5-42ea-841a-f49fdedc3796/payment-gateway-for-telcell","title":"Payment Gateway for Telcell <= 2.0.3 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"c95e5e27-58e5-42ea-841a-f49fdedc3796"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c95e5e27-58e5-42ea-841a-f49fdedc3796?source=api-prod","cve":"CVE-2023-6786","affectedVersions":"<=2.0.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7061796f73811c9dc5_gen.json b/internal/data/assets/plugin_7061796f73811c9dc5_gen.json
index 8531a18e..a293d11a 100644
--- a/internal/data/assets/plugin_7061796f73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7061796f73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/7ba3b72b-67a6-4f7c-adcd-6ce39663cda5/payos","title":"payOS <= 1.0.61 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ba3b72b-67a6-4f7c-adcd-6ce39663cda5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ba3b72b-67a6-4f7c-adcd-6ce39663cda5?source=api-prod","cve":"CVE-2025-57946","affectedVersions":"<=1.0.61","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/7ba3b72b-67a6-4f7c-adcd-6ce39663cda5/payos","title":"payOS <= 1.0.75 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ba3b72b-67a6-4f7c-adcd-6ce39663cda5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ba3b72b-67a6-4f7c-adcd-6ce39663cda5?source=api-prod","cve":"CVE-2025-57946","affectedVersions":"<=1.0.75","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_706179706c7567811c9dc5_gen.json b/internal/data/assets/plugin_706179706c7567811c9dc5_gen.json
index f397faae..d2b77bd7 100644
--- a/internal/data/assets/plugin_706179706c7567811c9dc5_gen.json
+++ b/internal/data/assets/plugin_706179706c7567811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/c25bf8a2-cf09-4c44-9624-087b7e5d7a78/payplug","title":"PayPlug for WooCommerce (Official) <= 3.1.0 - Missing Authorization to Unauthenticated Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c25bf8a2-cf09-4c44-9624-087b7e5d7a78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c25bf8a2-cf09-4c44-9624-087b7e5d7a78?source=api-prod","cve":"CVE-2026-42637","affectedVersions":"<=3.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d0d1c29b-85f2-47dd-8f5b-aa0f5d3a4251/payplug","title":"PayPlug for WooCommerce (Official) <= 3.1.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 12:00:57","sources":[{"name":"Wordfence","remoteId":"d0d1c29b-85f2-47dd-8f5b-aa0f5d3a4251"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d0d1c29b-85f2-47dd-8f5b-aa0f5d3a4251?source=api-prod","cve":"CVE-2026-39751","affectedVersions":"<=3.1.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/69fe5af3-9ea1-4571-8013-cabe1498e004/payplug","title":"PayPlug for WooCommerce (Official) 2.8.0 - 3.1.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"69fe5af3-9ea1-4571-8013-cabe1498e004"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69fe5af3-9ea1-4571-8013-cabe1498e004?source=api-prod","cve":"CVE-2026-113813","affectedVersions":">=2.8.0,<=3.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/86fd7044-7ffb-41a8-bba4-f7dd01710689/payplug","title":"PayPlug for WooCommerce (Official) 2.9.0 - 3.1.0 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"86fd7044-7ffb-41a8-bba4-f7dd01710689"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86fd7044-7ffb-41a8-bba4-f7dd01710689?source=api-prod","cve":"CVE-2026-110292","affectedVersions":">=2.9.0,<=3.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/c25bf8a2-cf09-4c44-9624-087b7e5d7a78/payplug","title":"PayPlug for WooCommerce (Official) <= 3.1.0 - Missing Authorization to Unauthenticated Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c25bf8a2-cf09-4c44-9624-087b7e5d7a78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c25bf8a2-cf09-4c44-9624-087b7e5d7a78?source=api-prod","cve":"CVE-2026-42637","affectedVersions":"<=3.1.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d0d1c29b-85f2-47dd-8f5b-aa0f5d3a4251/payplug","title":"PayPlug for WooCommerce (Official) <= 3.1.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 12:00:57","sources":[{"name":"Wordfence","remoteId":"d0d1c29b-85f2-47dd-8f5b-aa0f5d3a4251"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d0d1c29b-85f2-47dd-8f5b-aa0f5d3a4251?source=api-prod","cve":"CVE-2026-39751","affectedVersions":"<=3.1.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7065727369616e2d776f6f636f6d6d657263652d736d73811c9dc5_gen.json b/internal/data/assets/plugin_7065727369616e2d776f6f636f6d6d657263652d736d73811c9dc5_gen.json
index c035b06a..26f5cee1 100644
--- a/internal/data/assets/plugin_7065727369616e2d776f6f636f6d6d657263652d736d73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7065727369616e2d776f6f636f6d6d657263652d736d73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/175a69da-c47a-40f3-98c7-7cfcdf98f9f6/persian-woocommerce-sms","title":"افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-06 12:22:34","sources":[{"name":"Wordfence","remoteId":"175a69da-c47a-40f3-98c7-7cfcdf98f9f6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/175a69da-c47a-40f3-98c7-7cfcdf98f9f6?source=api-prod","cve":"CVE-2024-10046","affectedVersions":"<=7.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/340980de-d746-4191-9e7b-24630975c535/persian-woocommerce-sms","title":"Persian Woocommerce SMS <= 7.0.10 - Authenticated (Shop manager+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"340980de-d746-4191-9e7b-24630975c535"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/340980de-d746-4191-9e7b-24630975c535?source=api-prod","cve":"CVE-2025-49315","affectedVersions":"<=7.0.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/44f7c455-7d1f-44c0-b2dc-828b1b740a46/persian-woocommerce-sms","title":"افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.2.2 - Authenticated (Shop manager+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"44f7c455-7d1f-44c0-b2dc-828b1b740a46"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44f7c455-7d1f-44c0-b2dc-828b1b740a46?source=api-prod","cve":"CVE-2026-65532","affectedVersions":"<=7.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/65f4de84-1472-489b-9247-0ceb53369d2b/persian-woocommerce-sms","title":"Persian Woocommerce SMS <= 7.2.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"65f4de84-1472-489b-9247-0ceb53369d2b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65f4de84-1472-489b-9247-0ceb53369d2b?source=api-prod","cve":"CVE-2026-22352","affectedVersions":"<=7.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/76e185c3-d62b-42f7-a943-0498da2d76ce/persian-woocommerce-sms","title":"افزونه پیامک ووکامرس Persian WooCommerce SMS < 3.3.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"76e185c3-d62b-42f7-a943-0498da2d76ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76e185c3-d62b-42f7-a943-0498da2d76ce?source=api-prod","cve":"CVE-2016-10987","affectedVersions":"<=3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8306090a-cb23-4cff-b859-07b0a0bf9186/persian-woocommerce-sms","title":"Persian Woocommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"8306090a-cb23-4cff-b859-07b0a0bf9186"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8306090a-cb23-4cff-b859-07b0a0bf9186?source=api-prod","cve":"CVE-2024-54312","affectedVersions":"<=7.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/9c7edcbd-83b8-405b-892a-c404947990b3/persian-woocommerce-sms","title":"افزونه پیامک ووکامرس Persian WooCommerce SMS <= 4.4.0 - Cross-Site Scripting and SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"9c7edcbd-83b8-405b-892a-c404947990b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9c7edcbd-83b8-405b-892a-c404947990b3?source=api-prod","affectedVersions":"<=4.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8845d56-2e8a-472a-bc32-e26b388ce58d/persian-woocommerce-sms","title":"Persian WooCommerce SMS <= 7.0.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8845d56-2e8a-472a-bc32-e26b388ce58d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8845d56-2e8a-472a-bc32-e26b388ce58d?source=api-prod","cve":"CVE-2024-9213","affectedVersions":"<=7.0.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/175a69da-c47a-40f3-98c7-7cfcdf98f9f6/persian-woocommerce-sms","title":"افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-06 12:22:34","sources":[{"name":"Wordfence","remoteId":"175a69da-c47a-40f3-98c7-7cfcdf98f9f6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/175a69da-c47a-40f3-98c7-7cfcdf98f9f6?source=api-prod","cve":"CVE-2024-10046","affectedVersions":"<=7.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/24d777c8-e863-492f-8e1d-2c319d9ccf16/persian-woocommerce-sms","title":"افزونه پیامک ووکامرس | Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"24d777c8-e863-492f-8e1d-2c319d9ccf16"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/24d777c8-e863-492f-8e1d-2c319d9ccf16?source=api-prod","cve":"CVE-2026-111021","affectedVersions":">=7.2.0,<=7.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/340980de-d746-4191-9e7b-24630975c535/persian-woocommerce-sms","title":"Persian Woocommerce SMS <= 7.0.10 - Authenticated (Shop manager+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"340980de-d746-4191-9e7b-24630975c535"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/340980de-d746-4191-9e7b-24630975c535?source=api-prod","cve":"CVE-2025-49315","affectedVersions":"<=7.0.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/44f7c455-7d1f-44c0-b2dc-828b1b740a46/persian-woocommerce-sms","title":"افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.2.2 - Authenticated (Shop manager+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"44f7c455-7d1f-44c0-b2dc-828b1b740a46"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44f7c455-7d1f-44c0-b2dc-828b1b740a46?source=api-prod","cve":"CVE-2026-65532","affectedVersions":"<=7.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/65f4de84-1472-489b-9247-0ceb53369d2b/persian-woocommerce-sms","title":"Persian Woocommerce SMS <= 7.2.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"65f4de84-1472-489b-9247-0ceb53369d2b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65f4de84-1472-489b-9247-0ceb53369d2b?source=api-prod","cve":"CVE-2026-22352","affectedVersions":"<=7.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/76e185c3-d62b-42f7-a943-0498da2d76ce/persian-woocommerce-sms","title":"افزونه پیامک ووکامرس Persian WooCommerce SMS < 3.3.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"76e185c3-d62b-42f7-a943-0498da2d76ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76e185c3-d62b-42f7-a943-0498da2d76ce?source=api-prod","cve":"CVE-2016-10987","affectedVersions":"<=3.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8306090a-cb23-4cff-b859-07b0a0bf9186/persian-woocommerce-sms","title":"Persian Woocommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"8306090a-cb23-4cff-b859-07b0a0bf9186"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8306090a-cb23-4cff-b859-07b0a0bf9186?source=api-prod","cve":"CVE-2024-54312","affectedVersions":"<=7.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/9c7edcbd-83b8-405b-892a-c404947990b3/persian-woocommerce-sms","title":"افزونه پیامک ووکامرس Persian WooCommerce SMS <= 4.4.0 - Cross-Site Scripting and SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"9c7edcbd-83b8-405b-892a-c404947990b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9c7edcbd-83b8-405b-892a-c404947990b3?source=api-prod","affectedVersions":"<=4.4.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8845d56-2e8a-472a-bc32-e26b388ce58d/persian-woocommerce-sms","title":"Persian WooCommerce SMS <= 7.0.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8845d56-2e8a-472a-bc32-e26b388ce58d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8845d56-2e8a-472a-bc32-e26b388ce58d?source=api-prod","cve":"CVE-2024-9213","affectedVersions":"<=7.0.2","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_706978656c796f7572736974652d70726f811c9dc5_gen.json b/internal/data/assets/plugin_706978656c796f7572736974652d70726f811c9dc5_gen.json
index 7224e410..efd90159 100644
--- a/internal/data/assets/plugin_706978656c796f7572736974652d70726f811c9dc5_gen.json
+++ b/internal/data/assets/plugin_706978656c796f7572736974652d70726f811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0fa6a112-ee69-43eb-bded-daba2c2c4dc5/pixelyoursite-pro","title":"PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 08:43:25","sources":[{"name":"Wordfence","remoteId":"0fa6a112-ee69-43eb-bded-daba2c2c4dc5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fa6a112-ee69-43eb-bded-daba2c2c4dc5?source=api-prod","cve":"CVE-2026-1844","affectedVersions":"<=12.4.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/273e25aa-4c00-4463-afc5-d8b2433af064/pixelyoursite-pro","title":"PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-01 16:53:58","sources":[{"name":"Wordfence","remoteId":"273e25aa-4c00-4463-afc5-d8b2433af064"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/273e25aa-4c00-4463-afc5-d8b2433af064?source=api-prod","cve":"CVE-2026-7049","affectedVersions":"<=12.5.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/5ebf1e83-50b8-4f56-ba76-10100375edda/pixelyoursite-pro","title":"PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ebf1e83-50b8-4f56-ba76-10100375edda"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ebf1e83-50b8-4f56-ba76-10100375edda?source=api-prod","cve":"CVE-2023-2584","affectedVersions":"<=9.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fd7a515-6389-4152-8dac-d5497dd94f6d/pixelyoursite-pro","title":"PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fd7a515-6389-4152-8dac-d5497dd94f6d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fd7a515-6389-4152-8dac-d5497dd94f6d?source=api-prod","cve":"CVE-2024-7870","affectedVersions":"<=10.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ca14ec54-0864-47f7-9653-1fe04e2875de/pixelyoursite-pro","title":"PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 19:45:43","sources":[{"name":"Wordfence","remoteId":"ca14ec54-0864-47f7-9653-1fe04e2875de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca14ec54-0864-47f7-9653-1fe04e2875de?source=api-prod","cve":"CVE-2026-18059","affectedVersions":"<12.6.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0fa6a112-ee69-43eb-bded-daba2c2c4dc5/pixelyoursite-pro","title":"PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 08:43:25","sources":[{"name":"Wordfence","remoteId":"0fa6a112-ee69-43eb-bded-daba2c2c4dc5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fa6a112-ee69-43eb-bded-daba2c2c4dc5?source=api-prod","cve":"CVE-2026-1844","affectedVersions":"<=12.4.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/273e25aa-4c00-4463-afc5-d8b2433af064/pixelyoursite-pro","title":"PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-01 16:53:58","sources":[{"name":"Wordfence","remoteId":"273e25aa-4c00-4463-afc5-d8b2433af064"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/273e25aa-4c00-4463-afc5-d8b2433af064?source=api-prod","cve":"CVE-2026-7049","affectedVersions":"<=12.5.0.1","severity":"high"},{"advisoryId":"WPSECADV/WF/47d78b7b-0109-4296-b111-6ca747d7d5e0/pixelyoursite-pro","title":"PixelYourSite (Pro + Free) – Your smart PIXEL (TAG) Manager (plugin) < 11.4.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"47d78b7b-0109-4296-b111-6ca747d7d5e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/47d78b7b-0109-4296-b111-6ca747d7d5e0?source=api-prod","cve":"CVE-2026-109987","affectedVersions":"<12.6.8","severity":"high"},{"advisoryId":"WPSECADV/WF/5ebf1e83-50b8-4f56-ba76-10100375edda/pixelyoursite-pro","title":"PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ebf1e83-50b8-4f56-ba76-10100375edda"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ebf1e83-50b8-4f56-ba76-10100375edda?source=api-prod","cve":"CVE-2023-2584","affectedVersions":"<=9.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fd7a515-6389-4152-8dac-d5497dd94f6d/pixelyoursite-pro","title":"PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fd7a515-6389-4152-8dac-d5497dd94f6d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fd7a515-6389-4152-8dac-d5497dd94f6d?source=api-prod","cve":"CVE-2024-7870","affectedVersions":"<=10.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ca14ec54-0864-47f7-9653-1fe04e2875de/pixelyoursite-pro","title":"PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 19:45:43","sources":[{"name":"Wordfence","remoteId":"ca14ec54-0864-47f7-9653-1fe04e2875de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca14ec54-0864-47f7-9653-1fe04e2875de?source=api-prod","cve":"CVE-2026-18059","affectedVersions":"<12.6.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_706978656c796f757273697465811c9dc5_gen.json b/internal/data/assets/plugin_706978656c796f757273697465811c9dc5_gen.json
index 97b02354..4eb4cbb3 100644
--- a/internal/data/assets/plugin_706978656c796f757273697465811c9dc5_gen.json
+++ b/internal/data/assets/plugin_706978656c796f757273697465811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0fe77926-8a43-42ce-9d3d-3aac2334dcbd/pixelyoursite","title":"PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-29 05:47:53","sources":[{"name":"Wordfence","remoteId":"0fe77926-8a43-42ce-9d3d-3aac2334dcbd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fe77926-8a43-42ce-9d3d-3aac2334dcbd?source=api-prod","cve":"CVE-2025-14280","affectedVersions":"<=11.1.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/44dfc7c7-6479-4e73-bd1c-ee4002f46a65/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 11.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-23 10:55:28","sources":[{"name":"Wordfence","remoteId":"44dfc7c7-6479-4e73-bd1c-ee4002f46a65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44dfc7c7-6479-4e73-bd1c-ee4002f46a65?source=api-prod","cve":"CVE-2026-95530","affectedVersions":"<=11.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/4c4f2d9d-d34c-45dd-aff8-ca9bbe808b5a/pixelyoursite","title":"PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 08:43:23","sources":[{"name":"Wordfence","remoteId":"4c4f2d9d-d34c-45dd-aff8-ca9bbe808b5a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c4f2d9d-d34c-45dd-aff8-ca9bbe808b5a?source=api-prod","cve":"CVE-2026-1841","affectedVersions":"<=11.2.0","severity":"high"},{"advisoryId":"WPSECADV/WF/53c25e24-fac6-404c-be6c-678a383b48a1/pixelyoursite","title":"PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-21 17:47:54","sources":[{"name":"Wordfence","remoteId":"53c25e24-fac6-404c-be6c-678a383b48a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53c25e24-fac6-404c-be6c-678a383b48a1?source=api-prod","cve":"CVE-2025-10588","affectedVersions":"<=11.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ebf1e83-50b8-4f56-ba76-10100375edda/pixelyoursite","title":"PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ebf1e83-50b8-4f56-ba76-10100375edda"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ebf1e83-50b8-4f56-ba76-10100375edda?source=api-prod","cve":"CVE-2023-2584","affectedVersions":"<=9.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6036876a-764d-4f08-96dd-b9b31dbd78b9/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) Manager < 11.1.2 - Authenticated (Administrator+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"6036876a-764d-4f08-96dd-b9b31dbd78b9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6036876a-764d-4f08-96dd-b9b31dbd78b9?source=api-prod","cve":"CVE-2025-10723","affectedVersions":"<11.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/78ca8110-fd39-4fcb-bac7-94732c14aee2/pixelyoursite","title":"PixelYourSite <= 5.2.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"78ca8110-fd39-4fcb-bac7-94732c14aee2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78ca8110-fd39-4fcb-bac7-94732c14aee2?source=api-prod","cve":"CVE-2018-0578","affectedVersions":"<5.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fd7a515-6389-4152-8dac-d5497dd94f6d/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fd7a515-6389-4152-8dac-d5497dd94f6d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fd7a515-6389-4152-8dac-d5497dd94f6d?source=api-prod","cve":"CVE-2024-7870","affectedVersions":"<=9.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/996c2843-158c-475a-874e-c5af00347d8c/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) Manager <= 10.0.1.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"996c2843-158c-475a-874e-c5af00347d8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/996c2843-158c-475a-874e-c5af00347d8c?source=api-prod","cve":"CVE-2025-22300","affectedVersions":"<=10.0.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ca14ec54-0864-47f7-9653-1fe04e2875de/pixelyoursite","title":"PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 19:45:43","sources":[{"name":"Wordfence","remoteId":"ca14ec54-0864-47f7-9653-1fe04e2875de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca14ec54-0864-47f7-9653-1fe04e2875de?source=api-prod","cve":"CVE-2026-18059","affectedVersions":"<=11.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb0fee1c-9dac-497c-a364-3b616e4b8ac0/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) Manager <= 9.6.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb0fee1c-9dac-497c-a364-3b616e4b8ac0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb0fee1c-9dac-497c-a364-3b616e4b8ac0?source=api-prod","cve":"CVE-2024-37447","affectedVersions":"<=9.6.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ef268946-853f-4bcf-874e-6a5aa344d57e/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 10.1.1.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"ef268946-853f-4bcf-874e-6a5aa344d57e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ef268946-853f-4bcf-874e-6a5aa344d57e?source=api-prod","cve":"CVE-2025-0769","affectedVersions":"=10.1.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f9c6eccc-3f91-4923-b3d3-46070bb3662d/pixelyoursite","title":"PixelYourSite <= 9.3.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9c6eccc-3f91-4923-b3d3-46070bb3662d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9c6eccc-3f91-4923-b3d3-46070bb3662d?source=api-prod","cve":"CVE-2023-22700","affectedVersions":"<=9.3.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0fe77926-8a43-42ce-9d3d-3aac2334dcbd/pixelyoursite","title":"PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-29 05:47:53","sources":[{"name":"Wordfence","remoteId":"0fe77926-8a43-42ce-9d3d-3aac2334dcbd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0fe77926-8a43-42ce-9d3d-3aac2334dcbd?source=api-prod","cve":"CVE-2025-14280","affectedVersions":"<=11.1.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/44dfc7c7-6479-4e73-bd1c-ee4002f46a65/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 11.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-23 10:55:28","sources":[{"name":"Wordfence","remoteId":"44dfc7c7-6479-4e73-bd1c-ee4002f46a65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44dfc7c7-6479-4e73-bd1c-ee4002f46a65?source=api-prod","cve":"CVE-2026-95530","affectedVersions":"<=11.4.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/47d78b7b-0109-4296-b111-6ca747d7d5e0/pixelyoursite","title":"PixelYourSite (Pro + Free) – Your smart PIXEL (TAG) Manager (plugin) < 11.4.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"47d78b7b-0109-4296-b111-6ca747d7d5e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/47d78b7b-0109-4296-b111-6ca747d7d5e0?source=api-prod","cve":"CVE-2026-109987","affectedVersions":"<11.4.3","severity":"high"},{"advisoryId":"WPSECADV/WF/4c4f2d9d-d34c-45dd-aff8-ca9bbe808b5a/pixelyoursite","title":"PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-13 08:43:23","sources":[{"name":"Wordfence","remoteId":"4c4f2d9d-d34c-45dd-aff8-ca9bbe808b5a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c4f2d9d-d34c-45dd-aff8-ca9bbe808b5a?source=api-prod","cve":"CVE-2026-1841","affectedVersions":"<=11.2.0","severity":"high"},{"advisoryId":"WPSECADV/WF/53c25e24-fac6-404c-be6c-678a383b48a1/pixelyoursite","title":"PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-21 17:47:54","sources":[{"name":"Wordfence","remoteId":"53c25e24-fac6-404c-be6c-678a383b48a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53c25e24-fac6-404c-be6c-678a383b48a1?source=api-prod","cve":"CVE-2025-10588","affectedVersions":"<=11.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ebf1e83-50b8-4f56-ba76-10100375edda/pixelyoursite","title":"PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ebf1e83-50b8-4f56-ba76-10100375edda"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ebf1e83-50b8-4f56-ba76-10100375edda?source=api-prod","cve":"CVE-2023-2584","affectedVersions":"<=9.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6036876a-764d-4f08-96dd-b9b31dbd78b9/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) Manager < 11.1.2 - Authenticated (Administrator+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"6036876a-764d-4f08-96dd-b9b31dbd78b9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6036876a-764d-4f08-96dd-b9b31dbd78b9?source=api-prod","cve":"CVE-2025-10723","affectedVersions":"<11.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/78ca8110-fd39-4fcb-bac7-94732c14aee2/pixelyoursite","title":"PixelYourSite <= 5.2.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-04-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"78ca8110-fd39-4fcb-bac7-94732c14aee2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78ca8110-fd39-4fcb-bac7-94732c14aee2?source=api-prod","cve":"CVE-2018-0578","affectedVersions":"<5.3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/7fd7a515-6389-4152-8dac-d5497dd94f6d/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"7fd7a515-6389-4152-8dac-d5497dd94f6d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7fd7a515-6389-4152-8dac-d5497dd94f6d?source=api-prod","cve":"CVE-2024-7870","affectedVersions":"<=9.7.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/996c2843-158c-475a-874e-c5af00347d8c/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) Manager <= 10.0.1.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"996c2843-158c-475a-874e-c5af00347d8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/996c2843-158c-475a-874e-c5af00347d8c?source=api-prod","cve":"CVE-2025-22300","affectedVersions":"<=10.0.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/ca14ec54-0864-47f7-9653-1fe04e2875de/pixelyoursite","title":"PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 19:45:43","sources":[{"name":"Wordfence","remoteId":"ca14ec54-0864-47f7-9653-1fe04e2875de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ca14ec54-0864-47f7-9653-1fe04e2875de?source=api-prod","cve":"CVE-2026-18059","affectedVersions":"<=11.2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb0fee1c-9dac-497c-a364-3b616e4b8ac0/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) Manager <= 9.6.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb0fee1c-9dac-497c-a364-3b616e4b8ac0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb0fee1c-9dac-497c-a364-3b616e4b8ac0?source=api-prod","cve":"CVE-2024-37447","affectedVersions":"<=9.6.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/ef268946-853f-4bcf-874e-6a5aa344d57e/pixelyoursite","title":"PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 10.1.1.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"ef268946-853f-4bcf-874e-6a5aa344d57e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ef268946-853f-4bcf-874e-6a5aa344d57e?source=api-prod","cve":"CVE-2025-0769","affectedVersions":"=10.1.1.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f9c6eccc-3f91-4923-b3d3-46070bb3662d/pixelyoursite","title":"PixelYourSite <= 9.3.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"f9c6eccc-3f91-4923-b3d3-46070bb3662d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f9c6eccc-3f91-4923-b3d3-46070bb3662d?source=api-prod","cve":"CVE-2023-22700","affectedVersions":"<=9.3.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_706f7075702d62792d737570737973746963811c9dc5_gen.json b/internal/data/assets/plugin_706f7075702d62792d737570737973746963811c9dc5_gen.json
index b6d453d8..29b0f2ce 100644
--- a/internal/data/assets/plugin_706f7075702d62792d737570737973746963811c9dc5_gen.json
+++ b/internal/data/assets/plugin_706f7075702d62792d737570737973746963811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0c1ebc88-0987-46d6-9e80-6f3aa50d10af/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c1ebc88-0987-46d6-9e80-6f3aa50d10af"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c1ebc88-0987-46d6-9e80-6f3aa50d10af?source=api-prod","cve":"CVE-2021-24275","affectedVersions":"<=1.10.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/10021498-73c8-4767-b059-f282ddc35963/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.19 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"10021498-73c8-4767-b059-f282ddc35963"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10021498-73c8-4767-b059-f282ddc35963?source=api-prod","cve":"CVE-2023-39997","affectedVersions":"<=1.10.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/12acf651-6476-491b-84b3-afbc6c655b17/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.18 - Prototype Pollution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"12acf651-6476-491b-84b3-afbc6c655b17"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12acf651-6476-491b-84b3-afbc6c655b17?source=api-prod","cve":"CVE-2023-3186","affectedVersions":"<1.10.19","severity":"high"},{"advisoryId":"WPSECADV/WF/1fdf895c-dd2a-4e2c-b323-a42226982cb7/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.13.2 - Authenticated (Administrator+) SQL Injection via 'sidx' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 17:27:27","sources":[{"name":"Wordfence","remoteId":"1fdf895c-dd2a-4e2c-b323-a42226982cb7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1fdf895c-dd2a-4e2c-b323-a42226982cb7?source=api-prod","cve":"CVE-2026-104023","affectedVersions":"<=1.13.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5db5ea76-f0b6-4e30-aebf-c3769d0b3480/popup-by-supsystic","title":"Popup by Supsystic < 1.7.9 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"5db5ea76-f0b6-4e30-aebf-c3769d0b3480"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5db5ea76-f0b6-4e30-aebf-c3769d0b3480?source=api-prod","cve":"CVE-2016-10915","affectedVersions":"<1.7.9","severity":"high"},{"advisoryId":"WPSECADV/WF/73b99342-65ca-4f63-b1ea-638255821265/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.27 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"73b99342-65ca-4f63-b1ea-638255821265"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/73b99342-65ca-4f63-b1ea-638255821265?source=api-prod","cve":"CVE-2024-31421","affectedVersions":"<=1.10.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/752ec260-d405-41af-8700-7780df1aa59b/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.13.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"752ec260-d405-41af-8700-7780df1aa59b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/752ec260-d405-41af-8700-7780df1aa59b?source=api-prod","cve":"CVE-2026-73381","affectedVersions":"<=1.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/835579b0-8a96-40fa-a6a3-30571a0a1d0a/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-04 16:04:04","sources":[{"name":"Wordfence","remoteId":"835579b0-8a96-40fa-a6a3-30571a0a1d0a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/835579b0-8a96-40fa-a6a3-30571a0a1d0a?source=api-prod","cve":"CVE-2026-18322","affectedVersions":"<=1.12.0","severity":"high"},{"advisoryId":"WPSECADV/WF/c57bd721-2888-47d1-97a4-7c7603396f2b/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.11.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"c57bd721-2888-47d1-97a4-7c7603396f2b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c57bd721-2888-47d1-97a4-7c7603396f2b?source=api-prod","cve":"CVE-2026-27537","affectedVersions":"<=1.11.2","severity":"high"},{"advisoryId":"WPSECADV/WF/d2b3279b-fd39-4c34-92e8-57d309f37a93/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.8 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2b3279b-fd39-4c34-92e8-57d309f37a93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2b3279b-fd39-4c34-92e8-57d309f37a93?source=api-prod","cve":"CVE-2022-0424","affectedVersions":"<1.10.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/e43df95c-761a-460c-a3ac-da60383b067d/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.13.0 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"e43df95c-761a-460c-a3ac-da60383b067d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e43df95c-761a-460c-a3ac-da60383b067d?source=api-prod","cve":"CVE-2026-73380","affectedVersions":"<=1.13.0","severity":"high"},{"advisoryId":"WPSECADV/WF/e66ae9e3-7455-4671-9fcb-f0d017ae3346/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.29 - Authenticated (Admin+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"e66ae9e3-7455-4671-9fcb-f0d017ae3346"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e66ae9e3-7455-4671-9fcb-f0d017ae3346?source=api-prod","cve":"CVE-2024-52434","affectedVersions":"<=1.10.29","severity":"critical"},{"advisoryId":"WPSECADV/WF/ee135d1f-378a-4ec4-9cc1-8ed9208a04cd/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 09:57:08","sources":[{"name":"Wordfence","remoteId":"ee135d1f-378a-4ec4-9cc1-8ed9208a04cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee135d1f-378a-4ec4-9cc1-8ed9208a04cd?source=api-prod","cve":"CVE-2026-102398","affectedVersions":"<=1.13.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f458663f-6b1a-4acd-b2db-c66d7a915ab7/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"f458663f-6b1a-4acd-b2db-c66d7a915ab7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f458663f-6b1a-4acd-b2db-c66d7a915ab7?source=api-prod","cve":"CVE-2023-46197","affectedVersions":"<=1.10.19","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0c1ebc88-0987-46d6-9e80-6f3aa50d10af/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c1ebc88-0987-46d6-9e80-6f3aa50d10af"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c1ebc88-0987-46d6-9e80-6f3aa50d10af?source=api-prod","cve":"CVE-2021-24275","affectedVersions":"<=1.10.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/10021498-73c8-4767-b059-f282ddc35963/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.19 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"10021498-73c8-4767-b059-f282ddc35963"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10021498-73c8-4767-b059-f282ddc35963?source=api-prod","cve":"CVE-2023-39997","affectedVersions":"<=1.10.19","severity":"medium"},{"advisoryId":"WPSECADV/WF/12acf651-6476-491b-84b3-afbc6c655b17/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.18 - Prototype Pollution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"12acf651-6476-491b-84b3-afbc6c655b17"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12acf651-6476-491b-84b3-afbc6c655b17?source=api-prod","cve":"CVE-2023-3186","affectedVersions":"<1.10.19","severity":"high"},{"advisoryId":"WPSECADV/WF/1fdf895c-dd2a-4e2c-b323-a42226982cb7/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.13.2 - Authenticated (Administrator+) SQL Injection via 'sidx' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 17:27:27","sources":[{"name":"Wordfence","remoteId":"1fdf895c-dd2a-4e2c-b323-a42226982cb7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1fdf895c-dd2a-4e2c-b323-a42226982cb7?source=api-prod","cve":"CVE-2026-104023","affectedVersions":"<=1.13.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/5db5ea76-f0b6-4e30-aebf-c3769d0b3480/popup-by-supsystic","title":"Popup by Supsystic < 1.7.9 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"5db5ea76-f0b6-4e30-aebf-c3769d0b3480"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5db5ea76-f0b6-4e30-aebf-c3769d0b3480?source=api-prod","cve":"CVE-2016-10915","affectedVersions":"<1.7.9","severity":"high"},{"advisoryId":"WPSECADV/WF/73b99342-65ca-4f63-b1ea-638255821265/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.27 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"73b99342-65ca-4f63-b1ea-638255821265"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/73b99342-65ca-4f63-b1ea-638255821265?source=api-prod","cve":"CVE-2024-31421","affectedVersions":"<=1.10.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/752ec260-d405-41af-8700-7780df1aa59b/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.13.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"752ec260-d405-41af-8700-7780df1aa59b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/752ec260-d405-41af-8700-7780df1aa59b?source=api-prod","cve":"CVE-2026-73381","affectedVersions":"<=1.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/835579b0-8a96-40fa-a6a3-30571a0a1d0a/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-04 16:04:04","sources":[{"name":"Wordfence","remoteId":"835579b0-8a96-40fa-a6a3-30571a0a1d0a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/835579b0-8a96-40fa-a6a3-30571a0a1d0a?source=api-prod","cve":"CVE-2026-18322","affectedVersions":"<=1.12.0","severity":"high"},{"advisoryId":"WPSECADV/WF/8c5fc64f-4a4c-4a23-a72f-9ba9fa7ab6b0/popup-by-supsystic","title":"Customer Engagement System – Popup Builder, Forms, CRM & Email Marketing Automation < 2.0.2 - Unauthenticated Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c5fc64f-4a4c-4a23-a72f-9ba9fa7ab6b0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c5fc64f-4a4c-4a23-a72f-9ba9fa7ab6b0?source=api-prod","cve":"CVE-2026-115225","affectedVersions":"<2.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/9b4946b7-9421-4e3c-807d-8799c957be2c/popup-by-supsystic","title":"Customer Engagement System – Popup Builder, Forms, CRM & Email Marketing Automation < 2.0.2 - Authenticated (Administrator+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b4946b7-9421-4e3c-807d-8799c957be2c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b4946b7-9421-4e3c-807d-8799c957be2c?source=api-prod","cve":"CVE-2026-115223","affectedVersions":"<2.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/c57bd721-2888-47d1-97a4-7c7603396f2b/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.11.2 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"c57bd721-2888-47d1-97a4-7c7603396f2b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c57bd721-2888-47d1-97a4-7c7603396f2b?source=api-prod","cve":"CVE-2026-27537","affectedVersions":"<=1.11.2","severity":"high"},{"advisoryId":"WPSECADV/WF/cd0deff3-3498-49c2-a222-7fced860fa83/popup-by-supsystic","title":"Customer Engagement System – Popup Builder, Forms, CRM & Email Marketing Automation < 2.0.2 - Authenticated (Administrator+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"cd0deff3-3498-49c2-a222-7fced860fa83"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cd0deff3-3498-49c2-a222-7fced860fa83?source=api-prod","cve":"CVE-2026-115224","affectedVersions":"<2.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2b3279b-fd39-4c34-92e8-57d309f37a93/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.8 - Sensitive Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-04-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2b3279b-fd39-4c34-92e8-57d309f37a93"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2b3279b-fd39-4c34-92e8-57d309f37a93?source=api-prod","cve":"CVE-2022-0424","affectedVersions":"<1.10.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/e43df95c-761a-460c-a3ac-da60383b067d/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.13.0 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"e43df95c-761a-460c-a3ac-da60383b067d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e43df95c-761a-460c-a3ac-da60383b067d?source=api-prod","cve":"CVE-2026-73380","affectedVersions":"<=1.13.0","severity":"high"},{"advisoryId":"WPSECADV/WF/e66ae9e3-7455-4671-9fcb-f0d017ae3346/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.29 - Authenticated (Admin+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"e66ae9e3-7455-4671-9fcb-f0d017ae3346"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e66ae9e3-7455-4671-9fcb-f0d017ae3346?source=api-prod","cve":"CVE-2024-52434","affectedVersions":"<=1.10.29","severity":"critical"},{"advisoryId":"WPSECADV/WF/ee135d1f-378a-4ec4-9cc1-8ed9208a04cd/popup-by-supsystic","title":"Smart Popup by Supsystic <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 09:57:08","sources":[{"name":"Wordfence","remoteId":"ee135d1f-378a-4ec4-9cc1-8ed9208a04cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee135d1f-378a-4ec4-9cc1-8ed9208a04cd?source=api-prod","cve":"CVE-2026-102398","affectedVersions":"<=1.13.1","severity":"high"},{"advisoryId":"WPSECADV/WF/f458663f-6b1a-4acd-b2db-c66d7a915ab7/popup-by-supsystic","title":"Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"f458663f-6b1a-4acd-b2db-c66d7a915ab7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f458663f-6b1a-4acd-b2db-c66d7a915ab7?source=api-prod","cve":"CVE-2023-46197","affectedVersions":"<=1.10.19","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_706f7075702d6d616b65722d7770811c9dc5_gen.json b/internal/data/assets/plugin_706f7075702d6d616b65722d7770811c9dc5_gen.json
index 64fb1cd9..97d315e7 100644
--- a/internal/data/assets/plugin_706f7075702d6d616b65722d7770811c9dc5_gen.json
+++ b/internal/data/assets/plugin_706f7075702d6d616b65722d7770811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/1e4f0d78-caa0-4575-a090-e1c12d4ed8fd/popup-maker-wp","title":"Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"1e4f0d78-caa0-4575-a090-e1c12d4ed8fd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1e4f0d78-caa0-4575-a090-e1c12d4ed8fd?source=api-prod","cve":"CVE-2024-34770","affectedVersions":"<=1.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2796092a-d677-479a-aaad-74642aa9364e/popup-maker-wp","title":"Popup Maker WP <= 1.4.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"2796092a-d677-479a-aaad-74642aa9364e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2796092a-d677-479a-aaad-74642aa9364e?source=api-prod","cve":"CVE-2026-85004","affectedVersions":"<=1.4.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c574642-7c24-4ede-a94d-b0af55fc9f5a/popup-maker-wp","title":"Popup Maker WP 1.2.2.1 - 1.4.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c574642-7c24-4ede-a94d-b0af55fc9f5a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c574642-7c24-4ede-a94d-b0af55fc9f5a?source=api-prod","cve":"CVE-2026-85005","affectedVersions":">=1.2.2.1,<=1.4.5","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/1e4f0d78-caa0-4575-a090-e1c12d4ed8fd/popup-maker-wp","title":"Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"1e4f0d78-caa0-4575-a090-e1c12d4ed8fd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1e4f0d78-caa0-4575-a090-e1c12d4ed8fd?source=api-prod","cve":"CVE-2024-34770","affectedVersions":"<=1.3.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2796092a-d677-479a-aaad-74642aa9364e/popup-maker-wp","title":"Popup Maker WP < 1.4.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"2796092a-d677-479a-aaad-74642aa9364e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2796092a-d677-479a-aaad-74642aa9364e?source=api-prod","cve":"CVE-2026-85004","affectedVersions":"<1.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/8c574642-7c24-4ede-a94d-b0af55fc9f5a/popup-maker-wp","title":"Popup Maker WP 1.2.2.1 - 1.4.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"8c574642-7c24-4ede-a94d-b0af55fc9f5a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8c574642-7c24-4ede-a94d-b0af55fc9f5a?source=api-prod","cve":"CVE-2026-85005","affectedVersions":">=1.2.2.1,<=1.4.5","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_70726f66696c652d6275696c646572811c9dc5_gen.json b/internal/data/assets/plugin_70726f66696c652d6275696c646572811c9dc5_gen.json
index 63293d33..719a5be9 100644
--- a/internal/data/assets/plugin_70726f66696c652d6275696c646572811c9dc5_gen.json
+++ b/internal/data/assets/plugin_70726f66696c652d6275696c646572811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/15b9d69c-012d-4a28-b8b1-15e6dd22979e/profile-builder","title":"Profile Builder <= 3.6.7 - Admin+ Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"15b9d69c-012d-4a28-b8b1-15e6dd22979e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/15b9d69c-012d-4a28-b8b1-15e6dd22979e?source=api-prod","cve":"CVE-2022-0884","affectedVersions":"<3.6.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/16a4665a-df79-4def-8215-df44dffdd332/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.16.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"16a4665a-df79-4def-8215-df44dffdd332"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16a4665a-df79-4def-8215-df44dffdd332?source=api-prod","cve":"CVE-2026-66701","affectedVersions":"<=3.16.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/1b07c449-eea5-4bf6-98a7-747358b423ee/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Authenticated (Administrator+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"1b07c449-eea5-4bf6-98a7-747358b423ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1b07c449-eea5-4bf6-98a7-747358b423ee?source=api-prod","cve":"CVE-2026-76547","affectedVersions":"<4.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/1bd80ab9-260a-46c5-949e-c1d5dcb32523/profile-builder","title":"Profile Builder <= 2.1.3 - Missing Access Controls\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"1bd80ab9-260a-46c5-949e-c1d5dcb32523"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1bd80ab9-260a-46c5-949e-c1d5dcb32523?source=api-prod","cve":"CVE-2015-9337","affectedVersions":"<=2.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/1d28e118-07d3-483e-87b8-66ccdb79e879/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-15 18:31:53","sources":[{"name":"Wordfence","remoteId":"1d28e118-07d3-483e-87b8-66ccdb79e879"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d28e118-07d3-483e-87b8-66ccdb79e879?source=api-prod","cve":"CVE-2025-8896","affectedVersions":"<=3.14.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/21618fba-3f57-43b2-b9ea-13484301755d/profile-builder","title":"Profile Builder <= 3.11.2 - Restricted Email Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"21618fba-3f57-43b2-b9ea-13484301755d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21618fba-3f57-43b2-b9ea-13484301755d?source=api-prod","cve":"CVE-2024-31341","affectedVersions":"<=3.11.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/21931b7b-3c3d-4297-878e-bc0f187557a0/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 13:40:10","sources":[{"name":"Wordfence","remoteId":"21931b7b-3c3d-4297-878e-bc0f187557a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21931b7b-3c3d-4297-878e-bc0f187557a0?source=api-prod","cve":"CVE-2026-115807","affectedVersions":"<=4.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/23caef95-36b6-40aa-8dd7-51a376790a40/profile-builder","title":"User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"23caef95-36b6-40aa-8dd7-51a376790a40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23caef95-36b6-40aa-8dd7-51a376790a40?source=api-prod","cve":"CVE-2024-0324","affectedVersions":"<=3.10.8","severity":"high"},{"advisoryId":"WPSECADV/WF/2c9fa6f9-a549-4629-862f-f9a47b13aa59/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.8 - Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c9fa6f9-a549-4629-862f-f9a47b13aa59"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c9fa6f9-a549-4629-862f-f9a47b13aa59?source=api-prod","cve":"CVE-2024-6695","affectedVersions":"<=3.11.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/2caed42f-fb5b-488a-af15-f5ad3d82a68c/profile-builder","title":"Profile Builder <= 2.4.0 - Privilege Escalation\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-07-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2caed42f-fb5b-488a-af15-f5ad3d82a68c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2caed42f-fb5b-488a-af15-f5ad3d82a68c?source=api-prod","affectedVersions":"<2.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/2f466add-992b-46c7-a1cc-5c05d59f4bdf/profile-builder","title":"User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:37:45","sources":[{"name":"Wordfence","remoteId":"2f466add-992b-46c7-a1cc-5c05d59f4bdf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f466add-992b-46c7-a1cc-5c05d59f4bdf?source=api-prod","cve":"CVE-2026-107748","affectedVersions":"<=4.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/346c9785-0069-40ec-a255-fe2dae30f7a0/profile-builder","title":"Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-02 21:31:42","sources":[{"name":"Wordfence","remoteId":"346c9785-0069-40ec-a255-fe2dae30f7a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/346c9785-0069-40ec-a255-fe2dae30f7a0?source=api-prod","cve":"CVE-2025-4671","affectedVersions":"<=3.13.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/35697cf5-4494-40f6-8772-dfa417ae6bcb/profile-builder","title":"Profile Builder <= 3.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"35697cf5-4494-40f6-8772-dfa417ae6bcb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/35697cf5-4494-40f6-8772-dfa417ae6bcb?source=api-prod","cve":"CVE-2021-24448","affectedVersions":"<=3.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/37ac92b5-a080-4e0a-823e-6b9039c99d61/profile-builder","title":"User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 16:02:50","sources":[{"name":"Wordfence","remoteId":"37ac92b5-a080-4e0a-823e-6b9039c99d61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/37ac92b5-a080-4e0a-823e-6b9039c99d61?source=api-prod","cve":"CVE-2026-75965","affectedVersions":"<=4.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3830ae19-cafc-40db-afde-2424cae23031/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-18 16:29:27","sources":[{"name":"Wordfence","remoteId":"3830ae19-cafc-40db-afde-2424cae23031"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3830ae19-cafc-40db-afde-2424cae23031?source=api-prod","cve":"CVE-2025-13054","affectedVersions":"<=3.14.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/4364e713-8463-4088-b198-ed8237e86d42/profile-builder","title":"Profile Builder < 2.5.8 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"4364e713-8463-4088-b198-ed8237e86d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4364e713-8463-4088-b198-ed8237e86d42?source=api-prod","affectedVersions":"<2.5.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/49cac6e5-c224-49f3-9f3d-07b07fc5e4cc/profile-builder","title":"User Profile Builder <= 3.15.1 - Unauthenticated Privilege Escalation via Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"49cac6e5-c224-49f3-9f3d-07b07fc5e4cc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49cac6e5-c224-49f3-9f3d-07b07fc5e4cc?source=api-prod","cve":"CVE-2025-15030","affectedVersions":"<=3.15.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/4d4991ff-903a-410a-b472-1a5f76a32940/profile-builder","title":"User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:53:31","sources":[{"name":"Wordfence","remoteId":"4d4991ff-903a-410a-b472-1a5f76a32940"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d4991ff-903a-410a-b472-1a5f76a32940?source=api-prod","cve":"CVE-2026-93656","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/502724d9-ccc4-42db-bc1e-c521f7c80e70/profile-builder","title":"Profile Builder/Profile Builder Pro <= 3.3.2 - Authenticated Blind SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-12-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"502724d9-ccc4-42db-bc1e-c521f7c80e70"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/502724d9-ccc4-42db-bc1e-c521f7c80e70?source=api-prod","affectedVersions":"<3.3.3","severity":"high"},{"advisoryId":"WPSECADV/WF/51b626e1-89c0-49b9-bfeb-32005e8e78d6/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"51b626e1-89c0-49b9-bfeb-32005e8e78d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51b626e1-89c0-49b9-bfeb-32005e8e78d6?source=api-prod","cve":"CVE-2024-12738","affectedVersions":"<=3.12.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ab513d4-4cb9-4761-92af-a2224cb6a306/profile-builder","title":"Profile Builder – User Profile & User Registration Forms < 1.1.66 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ab513d4-4cb9-4761-92af-a2224cb6a306"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ab513d4-4cb9-4761-92af-a2224cb6a306?source=api-prod","cve":"CVE-2014-10380","affectedVersions":"<1.1.66","severity":"medium"},{"advisoryId":"WPSECADV/WF/5cfede31-66c3-4d2c-a79d-0e0ea54da50c/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"5cfede31-66c3-4d2c-a79d-0e0ea54da50c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5cfede31-66c3-4d2c-a79d-0e0ea54da50c?source=api-prod","cve":"CVE-2024-6708","affectedVersions":"<=3.12.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/63c74d96-84da-408f-ba2c-cde0ff108bf1/profile-builder","title":"Profile Builder <= 3.4.8 - Admin Access via Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"63c74d96-84da-408f-ba2c-cde0ff108bf1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63c74d96-84da-408f-ba2c-cde0ff108bf1?source=api-prod","cve":"CVE-2021-24527","affectedVersions":"<3.4.9","severity":"critical"},{"advisoryId":"WPSECADV/WF/667cb690-4b75-4844-a44e-34553d1481c7/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.4 - Authenticated (Author+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 07:01:29","sources":[{"name":"Wordfence","remoteId":"667cb690-4b75-4844-a44e-34553d1481c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/667cb690-4b75-4844-a44e-34553d1481c7?source=api-prod","cve":"CVE-2026-112242","affectedVersions":"<=4.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/68cef86f-3a6a-47c4-a092-de3bb40ac157/profile-builder","title":"User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:54:29","sources":[{"name":"Wordfence","remoteId":"68cef86f-3a6a-47c4-a092-de3bb40ac157"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68cef86f-3a6a-47c4-a092-de3bb40ac157?source=api-prod","cve":"CVE-2026-95866","affectedVersions":"<=4.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/6e746509-4932-4f58-9d56-3a6596418d20/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e746509-4932-4f58-9d56-3a6596418d20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e746509-4932-4f58-9d56-3a6596418d20?source=api-prod","cve":"CVE-2026-76546","affectedVersions":"<4.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/760f7736-db49-4210-a2f3-3abb506106d7/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-30 21:39:25","sources":[{"name":"Wordfence","remoteId":"760f7736-db49-4210-a2f3-3abb506106d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/760f7736-db49-4210-a2f3-3abb506106d7?source=api-prod","cve":"CVE-2026-3139","affectedVersions":"<=3.15.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/7b44130c-b526-4670-bde2-e47fe823ac62/profile-builder","title":"Profile Builder – User Profile & User Registration Forms <= 3.6.4 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b44130c-b526-4670-bde2-e47fe823ac62"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b44130c-b526-4670-bde2-e47fe823ac62?source=api-prod","cve":"CVE-2021-36915","affectedVersions":"<=3.6.4","severity":"high"},{"advisoryId":"WPSECADV/WF/7d25cca1-eb57-4ba2-8923-a3c56f41ce22/profile-builder","title":"Profile Builder <= 3.9.7 - Missing Authorization to Initial Page Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d25cca1-eb57-4ba2-8923-a3c56f41ce22"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d25cca1-eb57-4ba2-8923-a3c56f41ce22?source=api-prod","cve":"CVE-2023-4059","affectedVersions":"<3.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/7e8c8027-6340-40d7-b34a-34024d5b2d89/profile-builder","title":"Profile Builder <= 3.13.8 - Unauthenticated Content Spoofing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"7e8c8027-6340-40d7-b34a-34024d5b2d89"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e8c8027-6340-40d7-b34a-34024d5b2d89?source=api-prod","cve":"CVE-2025-49292","affectedVersions":"<=3.13.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/87287221-ee9b-4ca2-bb35-f8945cd58ce7/profile-builder","title":"Profile Builder < 3.16.1 - Unauthenticated Limited File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"87287221-ee9b-4ca2-bb35-f8945cd58ce7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/87287221-ee9b-4ca2-bb35-f8945cd58ce7?source=api-prod","cve":"CVE-2026-82607","affectedVersions":"<=3.16.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/88bfd754-e2ee-47c7-9af5-f31cbe993102/profile-builder","title":"User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:37:33","sources":[{"name":"Wordfence","remoteId":"88bfd754-e2ee-47c7-9af5-f31cbe993102"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88bfd754-e2ee-47c7-9af5-f31cbe993102?source=api-prod","cve":"CVE-2026-109447","affectedVersions":"<=4.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/8fcf7283-eb6c-4fee-b606-79026e2227fc/profile-builder","title":"Profile Builder <= 3.1.0 - Privilege Escalation\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-02-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"8fcf7283-eb6c-4fee-b606-79026e2227fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8fcf7283-eb6c-4fee-b606-79026e2227fc?source=api-prod","affectedVersions":"<3.1.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/93e4fb7c-7973-496e-891f-d3b54d786e26/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"93e4fb7c-7973-496e-891f-d3b54d786e26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/93e4fb7c-7973-496e-891f-d3b54d786e26?source=api-prod","cve":"CVE-2026-76548","affectedVersions":"<4.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/99e6cc7b-7e65-4b8d-a927-1329ed6c1954/profile-builder","title":"User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"99e6cc7b-7e65-4b8d-a927-1329ed6c1954"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/99e6cc7b-7e65-4b8d-a927-1329ed6c1954?source=api-prod","cve":"CVE-2026-6431","affectedVersions":"<=3.15.7","severity":"high"},{"advisoryId":"WPSECADV/WF/9ccf2b56-0355-43e6-a616-d06196e90972/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-15 12:34:28","sources":[{"name":"Wordfence","remoteId":"9ccf2b56-0355-43e6-a616-d06196e90972"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ccf2b56-0355-43e6-a616-d06196e90972?source=api-prod","cve":"CVE-2025-2314","affectedVersions":"<=3.13.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f606fba-f779-42ea-a160-6c3b20dc5e79/profile-builder","title":"User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 18:24:03","sources":[{"name":"Wordfence","remoteId":"9f606fba-f779-42ea-a160-6c3b20dc5e79"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f606fba-f779-42ea-a160-6c3b20dc5e79?source=api-prod","cve":"CVE-2026-15826","affectedVersions":"<=3.16.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/a11db06c-32dc-456a-a5ea-5eded1f42a56/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a11db06c-32dc-456a-a5ea-5eded1f42a56"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a11db06c-32dc-456a-a5ea-5eded1f42a56?source=api-prod","cve":"CVE-2026-111966","affectedVersions":"<4.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2e35679-278e-4e7d-b366-fe7d8cba7930/profile-builder","title":"Profile Builder – User Profile & User Registration Forms <= 2.2.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-11-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2e35679-278e-4e7d-b366-fe7d8cba7930"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2e35679-278e-4e7d-b366-fe7d8cba7930?source=api-prod","cve":"CVE-2015-9328","affectedVersions":"<2.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0b2bdb3-713c-47c6-8907-ac0f86038dc2/profile-builder","title":"Profile Builder <= 3.10.3 - Cross-Site Request Forgery via pms-cross-promotion.php\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0b2bdb3-713c-47c6-8907-ac0f86038dc2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0b2bdb3-713c-47c6-8907-ac0f86038dc2?source=api-prod","cve":"CVE-2023-47669","affectedVersions":"<=3.10.3","severity":"high"},{"advisoryId":"WPSECADV/WF/b0b71f57-a641-4320-bec1-670bbbfbc708/profile-builder","title":"Profile Builder – User Profile & User Registration Forms < 2.4.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0b71f57-a641-4320-bec1-670bbbfbc708"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0b71f57-a641-4320-bec1-670bbbfbc708?source=api-prod","cve":"CVE-2016-10911","affectedVersions":"<2.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0bd0377-8242-426d-a115-53157a8c57a1/profile-builder","title":"User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 17:04:24","sources":[{"name":"Wordfence","remoteId":"b0bd0377-8242-426d-a115-53157a8c57a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0bd0377-8242-426d-a115-53157a8c57a1?source=api-prod","cve":"CVE-2026-75964","affectedVersions":"<=4.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/bb865548-4074-4d0b-a222-ab5328a1db40/profile-builder","title":"Profile Builder <= 3.16.3 - Privilege Escalation to Unauthenticated Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb865548-4074-4d0b-a222-ab5328a1db40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb865548-4074-4d0b-a222-ab5328a1db40?source=api-prod","cve":"CVE-2026-15368","affectedVersions":"<=3.16.3","severity":"high"},{"advisoryId":"WPSECADV/WF/bbedad66-a5a6-4fb5-b03e-0ecf9fbef19a/profile-builder","title":"Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"bbedad66-a5a6-4fb5-b03e-0ecf9fbef19a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bbedad66-a5a6-4fb5-b03e-0ecf9fbef19a?source=api-prod","cve":"CVE-2023-0814","affectedVersions":"<=3.9.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/c017b6c0-f078-4fc3-919a-8bf61dd8b4de/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"c017b6c0-f078-4fc3-919a-8bf61dd8b4de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c017b6c0-f078-4fc3-919a-8bf61dd8b4de?source=api-prod","cve":"CVE-2026-111982","affectedVersions":"<4.0.5","severity":"low"},{"advisoryId":"WPSECADV/WF/c62d8146-e4b1-4c86-9d8a-c3a9bbfb0763/profile-builder","title":"Profile Builder – User Profile & User Registration Forms Plugin < 1.1.60 - Authentication Bypass\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-05-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"c62d8146-e4b1-4c86-9d8a-c3a9bbfb0763"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c62d8146-e4b1-4c86-9d8a-c3a9bbfb0763?source=api-prod","affectedVersions":"<1.1.60","severity":"critical"},{"advisoryId":"WPSECADV/WF/c8661bd7-65b7-4277-81a0-fd410ae0ee1b/profile-builder","title":"Profile Builder - User Profile & User Registration Forms <= 3.6.1 - Cross-Site Scripting via site_url Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8661bd7-65b7-4277-81a0-fd410ae0ee1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8661bd7-65b7-4277-81a0-fd410ae0ee1b?source=api-prod","cve":"CVE-2022-0653","affectedVersions":"<=3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc358df9-7930-44da-8b33-d39db8a87b20/profile-builder","title":"Profile Builder <= 2.0.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-10-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"cc358df9-7930-44da-8b33-d39db8a87b20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc358df9-7930-44da-8b33-d39db8a87b20?source=api-prod","cve":"CVE-2014-8492","affectedVersions":"<=2.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2d6245c-74b9-4850-9741-d23bc4e30de3/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2d6245c-74b9-4850-9741-d23bc4e30de3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2d6245c-74b9-4850-9741-d23bc4e30de3?source=api-prod","cve":"CVE-2026-96338","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e731292a-4f95-46eb-889e-b00d58f3444e/profile-builder","title":"Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"e731292a-4f95-46eb-889e-b00d58f3444e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e731292a-4f95-46eb-889e-b00d58f3444e?source=api-prod","cve":"CVE-2023-2297","affectedVersions":"<=3.9.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/e748f351-9278-4043-a15e-4a3e85f445c5/profile-builder","title":"Profile Builder <= 4.0.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"e748f351-9278-4043-a15e-4a3e85f445c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e748f351-9278-4043-a15e-4a3e85f445c5?source=api-prod","cve":"CVE-2026-111948","affectedVersions":"<=4.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ea1dc52d-fcd6-4b35-899a-3aff814073e0/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.7 - Missing Authorization to Unauthenticated Media Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea1dc52d-fcd6-4b35-899a-3aff814073e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea1dc52d-fcd6-4b35-899a-3aff814073e0?source=api-prod","cve":"CVE-2024-6366","affectedVersions":"<=3.11.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3f2ecdb-bbd0-4834-b731-88724ca0dfd7/profile-builder","title":"User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:37:17","sources":[{"name":"Wordfence","remoteId":"f3f2ecdb-bbd0-4834-b731-88724ca0dfd7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3f2ecdb-bbd0-4834-b731-88724ca0dfd7?source=api-prod","cve":"CVE-2026-100186","affectedVersions":"<=4.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/f515ccf8-7231-4728-b155-c47049087d42/profile-builder","title":"Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f515ccf8-7231-4728-b155-c47049087d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f515ccf8-7231-4728-b155-c47049087d42?source=api-prod","cve":"CVE-2023-6504","affectedVersions":"<=3.10.6","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/15b9d69c-012d-4a28-b8b1-15e6dd22979e/profile-builder","title":"Profile Builder <= 3.6.7 - Admin+ Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"15b9d69c-012d-4a28-b8b1-15e6dd22979e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/15b9d69c-012d-4a28-b8b1-15e6dd22979e?source=api-prod","cve":"CVE-2022-0884","affectedVersions":"<3.6.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/16a4665a-df79-4def-8215-df44dffdd332/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.16.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"16a4665a-df79-4def-8215-df44dffdd332"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16a4665a-df79-4def-8215-df44dffdd332?source=api-prod","cve":"CVE-2026-66701","affectedVersions":"<=3.16.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/1b07c449-eea5-4bf6-98a7-747358b423ee/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Authenticated (Administrator+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"1b07c449-eea5-4bf6-98a7-747358b423ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1b07c449-eea5-4bf6-98a7-747358b423ee?source=api-prod","cve":"CVE-2026-76547","affectedVersions":"<4.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/1bd80ab9-260a-46c5-949e-c1d5dcb32523/profile-builder","title":"Profile Builder <= 2.1.3 - Missing Access Controls\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"1bd80ab9-260a-46c5-949e-c1d5dcb32523"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1bd80ab9-260a-46c5-949e-c1d5dcb32523?source=api-prod","cve":"CVE-2015-9337","affectedVersions":"<=2.1.3","severity":"high"},{"advisoryId":"WPSECADV/WF/1d28e118-07d3-483e-87b8-66ccdb79e879/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-15 18:31:53","sources":[{"name":"Wordfence","remoteId":"1d28e118-07d3-483e-87b8-66ccdb79e879"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d28e118-07d3-483e-87b8-66ccdb79e879?source=api-prod","cve":"CVE-2025-8896","affectedVersions":"<=3.14.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/21618fba-3f57-43b2-b9ea-13484301755d/profile-builder","title":"Profile Builder <= 3.11.2 - Restricted Email Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"21618fba-3f57-43b2-b9ea-13484301755d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21618fba-3f57-43b2-b9ea-13484301755d?source=api-prod","cve":"CVE-2024-31341","affectedVersions":"<=3.11.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/21931b7b-3c3d-4297-878e-bc0f187557a0/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 13:40:10","sources":[{"name":"Wordfence","remoteId":"21931b7b-3c3d-4297-878e-bc0f187557a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/21931b7b-3c3d-4297-878e-bc0f187557a0?source=api-prod","cve":"CVE-2026-115807","affectedVersions":"<=4.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/23caef95-36b6-40aa-8dd7-51a376790a40/profile-builder","title":"User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"23caef95-36b6-40aa-8dd7-51a376790a40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23caef95-36b6-40aa-8dd7-51a376790a40?source=api-prod","cve":"CVE-2024-0324","affectedVersions":"<=3.10.8","severity":"high"},{"advisoryId":"WPSECADV/WF/2c9fa6f9-a549-4629-862f-f9a47b13aa59/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.8 - Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"2c9fa6f9-a549-4629-862f-f9a47b13aa59"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2c9fa6f9-a549-4629-862f-f9a47b13aa59?source=api-prod","cve":"CVE-2024-6695","affectedVersions":"<=3.11.8","severity":"critical"},{"advisoryId":"WPSECADV/WF/2caed42f-fb5b-488a-af15-f5ad3d82a68c/profile-builder","title":"Profile Builder <= 2.4.0 - Privilege Escalation\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-07-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2caed42f-fb5b-488a-af15-f5ad3d82a68c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2caed42f-fb5b-488a-af15-f5ad3d82a68c?source=api-prod","affectedVersions":"<2.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/2f466add-992b-46c7-a1cc-5c05d59f4bdf/profile-builder","title":"User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:37:45","sources":[{"name":"Wordfence","remoteId":"2f466add-992b-46c7-a1cc-5c05d59f4bdf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f466add-992b-46c7-a1cc-5c05d59f4bdf?source=api-prod","cve":"CVE-2026-107748","affectedVersions":"<=4.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/346c9785-0069-40ec-a255-fe2dae30f7a0/profile-builder","title":"Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-02 21:31:42","sources":[{"name":"Wordfence","remoteId":"346c9785-0069-40ec-a255-fe2dae30f7a0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/346c9785-0069-40ec-a255-fe2dae30f7a0?source=api-prod","cve":"CVE-2025-4671","affectedVersions":"<=3.13.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/35697cf5-4494-40f6-8772-dfa417ae6bcb/profile-builder","title":"Profile Builder <= 3.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"35697cf5-4494-40f6-8772-dfa417ae6bcb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/35697cf5-4494-40f6-8772-dfa417ae6bcb?source=api-prod","cve":"CVE-2021-24448","affectedVersions":"<=3.4.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/37ac92b5-a080-4e0a-823e-6b9039c99d61/profile-builder","title":"User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 16:02:50","sources":[{"name":"Wordfence","remoteId":"37ac92b5-a080-4e0a-823e-6b9039c99d61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/37ac92b5-a080-4e0a-823e-6b9039c99d61?source=api-prod","cve":"CVE-2026-75965","affectedVersions":"<=4.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3830ae19-cafc-40db-afde-2424cae23031/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-18 16:29:27","sources":[{"name":"Wordfence","remoteId":"3830ae19-cafc-40db-afde-2424cae23031"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3830ae19-cafc-40db-afde-2424cae23031?source=api-prod","cve":"CVE-2025-13054","affectedVersions":"<=3.14.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/4364e713-8463-4088-b198-ed8237e86d42/profile-builder","title":"Profile Builder < 2.5.8 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"4364e713-8463-4088-b198-ed8237e86d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4364e713-8463-4088-b198-ed8237e86d42?source=api-prod","affectedVersions":"<2.5.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/49cac6e5-c224-49f3-9f3d-07b07fc5e4cc/profile-builder","title":"User Profile Builder <= 3.15.1 - Unauthenticated Privilege Escalation via Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"49cac6e5-c224-49f3-9f3d-07b07fc5e4cc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/49cac6e5-c224-49f3-9f3d-07b07fc5e4cc?source=api-prod","cve":"CVE-2025-15030","affectedVersions":"<=3.15.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/4d4991ff-903a-410a-b472-1a5f76a32940/profile-builder","title":"User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:53:31","sources":[{"name":"Wordfence","remoteId":"4d4991ff-903a-410a-b472-1a5f76a32940"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d4991ff-903a-410a-b472-1a5f76a32940?source=api-prod","cve":"CVE-2026-93656","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/502724d9-ccc4-42db-bc1e-c521f7c80e70/profile-builder","title":"Profile Builder/Profile Builder Pro <= 3.3.2 - Authenticated Blind SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-12-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"502724d9-ccc4-42db-bc1e-c521f7c80e70"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/502724d9-ccc4-42db-bc1e-c521f7c80e70?source=api-prod","affectedVersions":"<3.3.3","severity":"high"},{"advisoryId":"WPSECADV/WF/51b626e1-89c0-49b9-bfeb-32005e8e78d6/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"51b626e1-89c0-49b9-bfeb-32005e8e78d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51b626e1-89c0-49b9-bfeb-32005e8e78d6?source=api-prod","cve":"CVE-2024-12738","affectedVersions":"<=3.12.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ab513d4-4cb9-4761-92af-a2224cb6a306/profile-builder","title":"Profile Builder – User Profile & User Registration Forms < 1.1.66 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ab513d4-4cb9-4761-92af-a2224cb6a306"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ab513d4-4cb9-4761-92af-a2224cb6a306?source=api-prod","cve":"CVE-2014-10380","affectedVersions":"<1.1.66","severity":"medium"},{"advisoryId":"WPSECADV/WF/5cfede31-66c3-4d2c-a79d-0e0ea54da50c/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.1 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"5cfede31-66c3-4d2c-a79d-0e0ea54da50c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5cfede31-66c3-4d2c-a79d-0e0ea54da50c?source=api-prod","cve":"CVE-2024-6708","affectedVersions":"<=3.12.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/63c74d96-84da-408f-ba2c-cde0ff108bf1/profile-builder","title":"Profile Builder <= 3.4.8 - Admin Access via Password Reset\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-07-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"63c74d96-84da-408f-ba2c-cde0ff108bf1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/63c74d96-84da-408f-ba2c-cde0ff108bf1?source=api-prod","cve":"CVE-2021-24527","affectedVersions":"<3.4.9","severity":"critical"},{"advisoryId":"WPSECADV/WF/667cb690-4b75-4844-a44e-34553d1481c7/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.4 - Authenticated (Author+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 07:01:29","sources":[{"name":"Wordfence","remoteId":"667cb690-4b75-4844-a44e-34553d1481c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/667cb690-4b75-4844-a44e-34553d1481c7?source=api-prod","cve":"CVE-2026-112242","affectedVersions":"<=4.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/68cef86f-3a6a-47c4-a092-de3bb40ac157/profile-builder","title":"User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 18:54:29","sources":[{"name":"Wordfence","remoteId":"68cef86f-3a6a-47c4-a092-de3bb40ac157"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68cef86f-3a6a-47c4-a092-de3bb40ac157?source=api-prod","cve":"CVE-2026-95866","affectedVersions":"<=4.0.2","severity":"high"},{"advisoryId":"WPSECADV/WF/6e746509-4932-4f58-9d56-3a6596418d20/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e746509-4932-4f58-9d56-3a6596418d20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e746509-4932-4f58-9d56-3a6596418d20?source=api-prod","cve":"CVE-2026-76546","affectedVersions":"<4.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/760f7736-db49-4210-a2f3-3abb506106d7/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-30 21:39:25","sources":[{"name":"Wordfence","remoteId":"760f7736-db49-4210-a2f3-3abb506106d7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/760f7736-db49-4210-a2f3-3abb506106d7?source=api-prod","cve":"CVE-2026-3139","affectedVersions":"<=3.15.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/7b44130c-b526-4670-bde2-e47fe823ac62/profile-builder","title":"Profile Builder – User Profile & User Registration Forms <= 3.6.4 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b44130c-b526-4670-bde2-e47fe823ac62"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b44130c-b526-4670-bde2-e47fe823ac62?source=api-prod","cve":"CVE-2021-36915","affectedVersions":"<=3.6.4","severity":"high"},{"advisoryId":"WPSECADV/WF/7d25cca1-eb57-4ba2-8923-a3c56f41ce22/profile-builder","title":"Profile Builder <= 3.9.7 - Missing Authorization to Initial Page Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"7d25cca1-eb57-4ba2-8923-a3c56f41ce22"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d25cca1-eb57-4ba2-8923-a3c56f41ce22?source=api-prod","cve":"CVE-2023-4059","affectedVersions":"<3.9.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/7e8c8027-6340-40d7-b34a-34024d5b2d89/profile-builder","title":"Profile Builder <= 3.13.8 - Unauthenticated Content Spoofing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"7e8c8027-6340-40d7-b34a-34024d5b2d89"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e8c8027-6340-40d7-b34a-34024d5b2d89?source=api-prod","cve":"CVE-2025-49292","affectedVersions":"<=3.13.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/87287221-ee9b-4ca2-bb35-f8945cd58ce7/profile-builder","title":"Profile Builder < 3.16.1 - Unauthenticated Limited File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"87287221-ee9b-4ca2-bb35-f8945cd58ce7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/87287221-ee9b-4ca2-bb35-f8945cd58ce7?source=api-prod","cve":"CVE-2026-82607","affectedVersions":"<=3.16.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/88bfd754-e2ee-47c7-9af5-f31cbe993102/profile-builder","title":"User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:37:33","sources":[{"name":"Wordfence","remoteId":"88bfd754-e2ee-47c7-9af5-f31cbe993102"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88bfd754-e2ee-47c7-9af5-f31cbe993102?source=api-prod","cve":"CVE-2026-109447","affectedVersions":"<=4.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/893f7ee5-e15a-4505-a6f9-29c8d346b772/profile-builder","title":"Profile Builder 4.0.0 - 4.0.4 - Authenticated (Subscriber+) Comment reCAPTCHA Protection Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"893f7ee5-e15a-4505-a6f9-29c8d346b772"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/893f7ee5-e15a-4505-a6f9-29c8d346b772?source=api-prod","cve":"CVE-2026-111965","affectedVersions":">=4.0.0,<=4.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/8fcf7283-eb6c-4fee-b606-79026e2227fc/profile-builder","title":"Profile Builder <= 3.1.0 - Privilege Escalation\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-02-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"8fcf7283-eb6c-4fee-b606-79026e2227fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8fcf7283-eb6c-4fee-b606-79026e2227fc?source=api-prod","affectedVersions":"<3.1.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/93e4fb7c-7973-496e-891f-d3b54d786e26/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"93e4fb7c-7973-496e-891f-d3b54d786e26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/93e4fb7c-7973-496e-891f-d3b54d786e26?source=api-prod","cve":"CVE-2026-76548","affectedVersions":"<4.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/99e6cc7b-7e65-4b8d-a927-1329ed6c1954/profile-builder","title":"User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"99e6cc7b-7e65-4b8d-a927-1329ed6c1954"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/99e6cc7b-7e65-4b8d-a927-1329ed6c1954?source=api-prod","cve":"CVE-2026-6431","affectedVersions":"<=3.15.7","severity":"high"},{"advisoryId":"WPSECADV/WF/9ccf2b56-0355-43e6-a616-d06196e90972/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-15 12:34:28","sources":[{"name":"Wordfence","remoteId":"9ccf2b56-0355-43e6-a616-d06196e90972"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ccf2b56-0355-43e6-a616-d06196e90972?source=api-prod","cve":"CVE-2025-2314","affectedVersions":"<=3.13.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/9f606fba-f779-42ea-a160-6c3b20dc5e79/profile-builder","title":"User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 18:24:03","sources":[{"name":"Wordfence","remoteId":"9f606fba-f779-42ea-a160-6c3b20dc5e79"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f606fba-f779-42ea-a160-6c3b20dc5e79?source=api-prod","cve":"CVE-2026-15826","affectedVersions":"<=3.16.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/a11db06c-32dc-456a-a5ea-5eded1f42a56/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a11db06c-32dc-456a-a5ea-5eded1f42a56"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a11db06c-32dc-456a-a5ea-5eded1f42a56?source=api-prod","cve":"CVE-2026-111966","affectedVersions":"<4.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/a2e35679-278e-4e7d-b366-fe7d8cba7930/profile-builder","title":"Profile Builder – User Profile & User Registration Forms <= 2.2.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-11-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a2e35679-278e-4e7d-b366-fe7d8cba7930"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a2e35679-278e-4e7d-b366-fe7d8cba7930?source=api-prod","cve":"CVE-2015-9328","affectedVersions":"<2.2.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0b2bdb3-713c-47c6-8907-ac0f86038dc2/profile-builder","title":"Profile Builder <= 3.10.3 - Cross-Site Request Forgery via pms-cross-promotion.php\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0b2bdb3-713c-47c6-8907-ac0f86038dc2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0b2bdb3-713c-47c6-8907-ac0f86038dc2?source=api-prod","cve":"CVE-2023-47669","affectedVersions":"<=3.10.3","severity":"high"},{"advisoryId":"WPSECADV/WF/b0b71f57-a641-4320-bec1-670bbbfbc708/profile-builder","title":"Profile Builder – User Profile & User Registration Forms < 2.4.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0b71f57-a641-4320-bec1-670bbbfbc708"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0b71f57-a641-4320-bec1-670bbbfbc708?source=api-prod","cve":"CVE-2016-10911","affectedVersions":"<2.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0bd0377-8242-426d-a115-53157a8c57a1/profile-builder","title":"User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 17:04:24","sources":[{"name":"Wordfence","remoteId":"b0bd0377-8242-426d-a115-53157a8c57a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0bd0377-8242-426d-a115-53157a8c57a1?source=api-prod","cve":"CVE-2026-75964","affectedVersions":"<=4.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/bb865548-4074-4d0b-a222-ab5328a1db40/profile-builder","title":"Profile Builder <= 3.16.3 - Privilege Escalation to Unauthenticated Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb865548-4074-4d0b-a222-ab5328a1db40"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb865548-4074-4d0b-a222-ab5328a1db40?source=api-prod","cve":"CVE-2026-15368","affectedVersions":"<=3.16.3","severity":"high"},{"advisoryId":"WPSECADV/WF/bbedad66-a5a6-4fb5-b03e-0ecf9fbef19a/profile-builder","title":"Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"bbedad66-a5a6-4fb5-b03e-0ecf9fbef19a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bbedad66-a5a6-4fb5-b03e-0ecf9fbef19a?source=api-prod","cve":"CVE-2023-0814","affectedVersions":"<=3.9.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/c017b6c0-f078-4fc3-919a-8bf61dd8b4de/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"c017b6c0-f078-4fc3-919a-8bf61dd8b4de"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c017b6c0-f078-4fc3-919a-8bf61dd8b4de?source=api-prod","cve":"CVE-2026-111982","affectedVersions":"<4.0.5","severity":"low"},{"advisoryId":"WPSECADV/WF/c62d8146-e4b1-4c86-9d8a-c3a9bbfb0763/profile-builder","title":"Profile Builder – User Profile & User Registration Forms Plugin < 1.1.60 - Authentication Bypass\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-05-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"c62d8146-e4b1-4c86-9d8a-c3a9bbfb0763"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c62d8146-e4b1-4c86-9d8a-c3a9bbfb0763?source=api-prod","affectedVersions":"<1.1.60","severity":"critical"},{"advisoryId":"WPSECADV/WF/c8661bd7-65b7-4277-81a0-fd410ae0ee1b/profile-builder","title":"Profile Builder - User Profile & User Registration Forms <= 3.6.1 - Cross-Site Scripting via site_url Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-02-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8661bd7-65b7-4277-81a0-fd410ae0ee1b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8661bd7-65b7-4277-81a0-fd410ae0ee1b?source=api-prod","cve":"CVE-2022-0653","affectedVersions":"<=3.6.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/cc358df9-7930-44da-8b33-d39db8a87b20/profile-builder","title":"Profile Builder <= 2.0.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-10-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"cc358df9-7930-44da-8b33-d39db8a87b20"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cc358df9-7930-44da-8b33-d39db8a87b20?source=api-prod","cve":"CVE-2014-8492","affectedVersions":"<=2.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2d6245c-74b9-4850-9741-d23bc4e30de3/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2d6245c-74b9-4850-9741-d23bc4e30de3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2d6245c-74b9-4850-9741-d23bc4e30de3?source=api-prod","cve":"CVE-2026-96338","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e731292a-4f95-46eb-889e-b00d58f3444e/profile-builder","title":"Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"e731292a-4f95-46eb-889e-b00d58f3444e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e731292a-4f95-46eb-889e-b00d58f3444e?source=api-prod","cve":"CVE-2023-2297","affectedVersions":"<=3.9.0","severity":"critical"},{"advisoryId":"WPSECADV/WF/e748f351-9278-4043-a15e-4a3e85f445c5/profile-builder","title":"Profile Builder <= 4.0.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"e748f351-9278-4043-a15e-4a3e85f445c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e748f351-9278-4043-a15e-4a3e85f445c5?source=api-prod","cve":"CVE-2026-111948","affectedVersions":"<=4.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ea1dc52d-fcd6-4b35-899a-3aff814073e0/profile-builder","title":"User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.7 - Missing Authorization to Unauthenticated Media Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"ea1dc52d-fcd6-4b35-899a-3aff814073e0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea1dc52d-fcd6-4b35-899a-3aff814073e0?source=api-prod","cve":"CVE-2024-6366","affectedVersions":"<=3.11.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3f2ecdb-bbd0-4834-b731-88724ca0dfd7/profile-builder","title":"User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 16:37:17","sources":[{"name":"Wordfence","remoteId":"f3f2ecdb-bbd0-4834-b731-88724ca0dfd7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3f2ecdb-bbd0-4834-b731-88724ca0dfd7?source=api-prod","cve":"CVE-2026-100186","affectedVersions":"<=4.0.3","severity":"high"},{"advisoryId":"WPSECADV/WF/f515ccf8-7231-4728-b155-c47049087d42/profile-builder","title":"Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-01-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f515ccf8-7231-4728-b155-c47049087d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f515ccf8-7231-4728-b155-c47049087d42?source=api-prod","cve":"CVE-2023-6504","affectedVersions":"<=3.10.6","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_71692d6164646f6e732d666f722d656c656d656e746f72811c9dc5_gen.json b/internal/data/assets/plugin_71692d6164646f6e732d666f722d656c656d656e746f72811c9dc5_gen.json
index 88a3cfa8..7b58533d 100644
--- a/internal/data/assets/plugin_71692d6164646f6e732d666f722d656c656d656e746f72811c9dc5_gen.json
+++ b/internal/data/assets/plugin_71692d6164646f6e732d666f722d656c656d656e746f72811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/061ada09-932f-4d2c-aa9e-c53f1d711c85/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-05 14:59:22","sources":[{"name":"Wordfence","remoteId":"061ada09-932f-4d2c-aa9e-c53f1d711c85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/061ada09-932f-4d2c-aa9e-c53f1d711c85?source=api-prod","cve":"CVE-2024-4364","affectedVersions":"<=1.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0dd93514-657c-4b04-931a-23f3d405fb88/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-22 19:29:15","sources":[{"name":"Wordfence","remoteId":"0dd93514-657c-4b04-931a-23f3d405fb88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0dd93514-657c-4b04-931a-23f3d405fb88?source=api-prod","cve":"CVE-2024-9530","affectedVersions":"<=1.8.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ef82a52-0a32-4dc4-b027-3d2098549404/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-27 16:10:13","sources":[{"name":"Wordfence","remoteId":"0ef82a52-0a32-4dc4-b027-3d2098549404"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ef82a52-0a32-4dc4-b027-3d2098549404?source=api-prod","cve":"CVE-2025-6252","affectedVersions":"<=1.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/1e9c10d2-7aa8-4b99-8cdb-81e8e464fa8a/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"1e9c10d2-7aa8-4b99-8cdb-81e8e464fa8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1e9c10d2-7aa8-4b99-8cdb-81e8e464fa8a?source=api-prod","cve":"CVE-2026-62079","affectedVersions":"<=1.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/284daad9-d31e-4d29-ac15-ba293ba9640d/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 15:08:52","sources":[{"name":"Wordfence","remoteId":"284daad9-d31e-4d29-ac15-ba293ba9640d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/284daad9-d31e-4d29-ac15-ba293ba9640d?source=api-prod","cve":"CVE-2024-4887","affectedVersions":"<=1.7.2","severity":"high"},{"advisoryId":"WPSECADV/WF/40a883e8-7ce0-4fca-a585-428b67144694/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"40a883e8-7ce0-4fca-a585-428b67144694"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40a883e8-7ce0-4fca-a585-428b67144694?source=api-prod","cve":"CVE-2024-0826","affectedVersions":"<=1.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/4fdfdcbe-014b-4b68-9ac5-976d384106c3/qi-addons-for-elementor","title":"Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-01 16:22:45","sources":[{"name":"Wordfence","remoteId":"4fdfdcbe-014b-4b68-9ac5-976d384106c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4fdfdcbe-014b-4b68-9ac5-976d384106c3?source=api-prod","cve":"CVE-2025-8146","affectedVersions":"<=1.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d979950-d365-4750-a4f1-df9335d3452d/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.6.3 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"9d979950-d365-4750-a4f1-df9335d3452d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d979950-d365-4750-a4f1-df9335d3452d?source=api-prod","cve":"CVE-2023-47679","affectedVersions":"<=1.6.3","severity":"high"},{"advisoryId":"WPSECADV/WF/add39d28-4070-44e2-8dff-0371e0c58453/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"add39d28-4070-44e2-8dff-0371e0c58453"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/add39d28-4070-44e2-8dff-0371e0c58453?source=api-prod","cve":"CVE-2024-13699","affectedVersions":"<=1.8.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/bb228bda-5094-4e54-a197-3b66376e2216/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb228bda-5094-4e54-a197-3b66376e2216"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb228bda-5094-4e54-a197-3b66376e2216?source=api-prod","cve":"CVE-2023-47680","affectedVersions":"<=1.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/d623d4d6-2d76-4b4e-bd8b-69fe6ae352ca/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 18:44:08","sources":[{"name":"Wordfence","remoteId":"d623d4d6-2d76-4b4e-bd8b-69fe6ae352ca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d623d4d6-2d76-4b4e-bd8b-69fe6ae352ca?source=api-prod","cve":"CVE-2026-92249","affectedVersions":"<=1.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/e154a12d-8ade-456e-ad64-e1cd419e2b2c/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"e154a12d-8ade-456e-ad64-e1cd419e2b2c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e154a12d-8ade-456e-ad64-e1cd419e2b2c?source=api-prod","cve":"CVE-2024-3309","affectedVersions":"<=1.7.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/061ada09-932f-4d2c-aa9e-c53f1d711c85/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-05 14:59:22","sources":[{"name":"Wordfence","remoteId":"061ada09-932f-4d2c-aa9e-c53f1d711c85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/061ada09-932f-4d2c-aa9e-c53f1d711c85?source=api-prod","cve":"CVE-2024-4364","affectedVersions":"<=1.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/0dd93514-657c-4b04-931a-23f3d405fb88/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-22 19:29:15","sources":[{"name":"Wordfence","remoteId":"0dd93514-657c-4b04-931a-23f3d405fb88"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0dd93514-657c-4b04-931a-23f3d405fb88?source=api-prod","cve":"CVE-2024-9530","affectedVersions":"<=1.8.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/0ef82a52-0a32-4dc4-b027-3d2098549404/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-27 16:10:13","sources":[{"name":"Wordfence","remoteId":"0ef82a52-0a32-4dc4-b027-3d2098549404"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ef82a52-0a32-4dc4-b027-3d2098549404?source=api-prod","cve":"CVE-2025-6252","affectedVersions":"<=1.9.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/1e9c10d2-7aa8-4b99-8cdb-81e8e464fa8a/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"1e9c10d2-7aa8-4b99-8cdb-81e8e464fa8a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1e9c10d2-7aa8-4b99-8cdb-81e8e464fa8a?source=api-prod","cve":"CVE-2026-62079","affectedVersions":"<=1.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/284daad9-d31e-4d29-ac15-ba293ba9640d/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 15:08:52","sources":[{"name":"Wordfence","remoteId":"284daad9-d31e-4d29-ac15-ba293ba9640d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/284daad9-d31e-4d29-ac15-ba293ba9640d?source=api-prod","cve":"CVE-2024-4887","affectedVersions":"<=1.7.2","severity":"high"},{"advisoryId":"WPSECADV/WF/40a883e8-7ce0-4fca-a585-428b67144694/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"40a883e8-7ce0-4fca-a585-428b67144694"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40a883e8-7ce0-4fca-a585-428b67144694?source=api-prod","cve":"CVE-2024-0826","affectedVersions":"<=1.6.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/4fdfdcbe-014b-4b68-9ac5-976d384106c3/qi-addons-for-elementor","title":"Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-01 16:22:45","sources":[{"name":"Wordfence","remoteId":"4fdfdcbe-014b-4b68-9ac5-976d384106c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4fdfdcbe-014b-4b68-9ac5-976d384106c3?source=api-prod","cve":"CVE-2025-8146","affectedVersions":"<=1.9.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/6bce1240-4ef9-4715-a178-1a8ba2c10a18/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.11.1 - Authenticated (Contributor+) Arbitrary HTML Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bce1240-4ef9-4715-a178-1a8ba2c10a18"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bce1240-4ef9-4715-a178-1a8ba2c10a18?source=api-prod","cve":"CVE-2026-115183","affectedVersions":"<=1.11.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9d979950-d365-4750-a4f1-df9335d3452d/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.6.3 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"9d979950-d365-4750-a4f1-df9335d3452d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d979950-d365-4750-a4f1-df9335d3452d?source=api-prod","cve":"CVE-2023-47679","affectedVersions":"<=1.6.3","severity":"high"},{"advisoryId":"WPSECADV/WF/add39d28-4070-44e2-8dff-0371e0c58453/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"add39d28-4070-44e2-8dff-0371e0c58453"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/add39d28-4070-44e2-8dff-0371e0c58453?source=api-prod","cve":"CVE-2024-13699","affectedVersions":"<=1.8.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/bb228bda-5094-4e54-a197-3b66376e2216/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"bb228bda-5094-4e54-a197-3b66376e2216"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb228bda-5094-4e54-a197-3b66376e2216?source=api-prod","cve":"CVE-2023-47680","affectedVersions":"<=1.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/d623d4d6-2d76-4b4e-bd8b-69fe6ae352ca/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 18:44:08","sources":[{"name":"Wordfence","remoteId":"d623d4d6-2d76-4b4e-bd8b-69fe6ae352ca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d623d4d6-2d76-4b4e-bd8b-69fe6ae352ca?source=api-prod","cve":"CVE-2026-92249","affectedVersions":"<=1.11","severity":"medium"},{"advisoryId":"WPSECADV/WF/e154a12d-8ade-456e-ad64-e1cd419e2b2c/qi-addons-for-elementor","title":"Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"e154a12d-8ade-456e-ad64-e1cd419e2b2c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e154a12d-8ade-456e-ad64-e1cd419e2b2c?source=api-prod","cve":"CVE-2024-3309","affectedVersions":"<=1.7.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_717569636b2d6576656e742d6d616e61676572811c9dc5_gen.json b/internal/data/assets/plugin_717569636b2d6576656e742d6d616e61676572811c9dc5_gen.json
index 0c130979..db1c2643 100644
--- a/internal/data/assets/plugin_717569636b2d6576656e742d6d616e61676572811c9dc5_gen.json
+++ b/internal/data/assets/plugin_717569636b2d6576656e742d6d616e61676572811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/quick-event-manager","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<9.2.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/408d602f-380d-4202-b9fa-9b86c801f892/quick-event-manager","title":"Quick Event Manager <= 9.17 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"408d602f-380d-4202-b9fa-9b86c801f892"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/408d602f-380d-4202-b9fa-9b86c801f892?source=api-prod","cve":"CVE-2026-84847","affectedVersions":"<=9.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/53199f3c-80d1-4c4e-93ef-8a234ba8ba85/quick-event-manager","title":"Quick Event Manager <= 9.7.4 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"53199f3c-80d1-4c4e-93ef-8a234ba8ba85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53199f3c-80d1-4c4e-93ef-8a234ba8ba85?source=api-prod","cve":"CVE-2023-23975","affectedVersions":"<=9.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d795754-3d42-49b5-99ab-c52eeca518f5/quick-event-manager","title":"Quick Event Manager <= 9.17 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"5d795754-3d42-49b5-99ab-c52eeca518f5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d795754-3d42-49b5-99ab-c52eeca518f5?source=api-prod","cve":"CVE-2026-84848","affectedVersions":"<=9.17","severity":"high"},{"advisoryId":"WPSECADV/WF/835f6efd-636e-411f-97a1-fa14b9a629b3/quick-event-manager","title":"Quick Event Manager <= 9.7.4 - Unauthenticated Stored Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"835f6efd-636e-411f-97a1-fa14b9a629b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/835f6efd-636e-411f-97a1-fa14b9a629b3?source=api-prod","cve":"CVE-2023-23979","affectedVersions":"<=9.7.4","severity":"high"},{"advisoryId":"WPSECADV/WF/8962c601-2c2c-4b96-b8a4-fdc2ad8a2c08/quick-event-manager","title":"Quick Event Manager <= 9.6.4 - Authenticated(Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"8962c601-2c2c-4b96-b8a4-fdc2ad8a2c08"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8962c601-2c2c-4b96-b8a4-fdc2ad8a2c08?source=api-prod","cve":"CVE-2022-46863","affectedVersions":"<=9.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8f008c6-42c6-40c3-9058-d8812ec40bef/quick-event-manager","title":"Quick Event Manager <= 9.7.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8f008c6-42c6-40c3-9058-d8812ec40bef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8f008c6-42c6-40c3-9058-d8812ec40bef?source=api-prod","cve":"CVE-2023-23491","affectedVersions":"<9.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/d26e8b21-fa9e-4dfe-a095-5c9f74d968f4/quick-event-manager","title":"Quick Event Manager <= 9.7.4 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"d26e8b21-fa9e-4dfe-a095-5c9f74d968f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d26e8b21-fa9e-4dfe-a095-5c9f74d968f4?source=api-prod","cve":"CVE-2023-23974","affectedVersions":"<=9.7.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/quick-event-manager","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<9.2.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/408d602f-380d-4202-b9fa-9b86c801f892/quick-event-manager","title":"Quick Event Manager <= 9.18 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"408d602f-380d-4202-b9fa-9b86c801f892"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/408d602f-380d-4202-b9fa-9b86c801f892?source=api-prod","cve":"CVE-2026-84847","affectedVersions":"<=9.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/53199f3c-80d1-4c4e-93ef-8a234ba8ba85/quick-event-manager","title":"Quick Event Manager <= 9.7.4 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"53199f3c-80d1-4c4e-93ef-8a234ba8ba85"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53199f3c-80d1-4c4e-93ef-8a234ba8ba85?source=api-prod","cve":"CVE-2023-23975","affectedVersions":"<=9.7.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d795754-3d42-49b5-99ab-c52eeca518f5/quick-event-manager","title":"Quick Event Manager <= 9.18 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"5d795754-3d42-49b5-99ab-c52eeca518f5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d795754-3d42-49b5-99ab-c52eeca518f5?source=api-prod","cve":"CVE-2026-84848","affectedVersions":"<=9.18","severity":"high"},{"advisoryId":"WPSECADV/WF/835f6efd-636e-411f-97a1-fa14b9a629b3/quick-event-manager","title":"Quick Event Manager <= 9.7.4 - Unauthenticated Stored Cross Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"835f6efd-636e-411f-97a1-fa14b9a629b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/835f6efd-636e-411f-97a1-fa14b9a629b3?source=api-prod","cve":"CVE-2023-23979","affectedVersions":"<=9.7.4","severity":"high"},{"advisoryId":"WPSECADV/WF/8962c601-2c2c-4b96-b8a4-fdc2ad8a2c08/quick-event-manager","title":"Quick Event Manager <= 9.6.4 - Authenticated(Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-02-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"8962c601-2c2c-4b96-b8a4-fdc2ad8a2c08"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8962c601-2c2c-4b96-b8a4-fdc2ad8a2c08?source=api-prod","cve":"CVE-2022-46863","affectedVersions":"<=9.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/c8f008c6-42c6-40c3-9058-d8812ec40bef/quick-event-manager","title":"Quick Event Manager <= 9.7.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"c8f008c6-42c6-40c3-9058-d8812ec40bef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c8f008c6-42c6-40c3-9058-d8812ec40bef?source=api-prod","cve":"CVE-2023-23491","affectedVersions":"<9.7.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/d26e8b21-fa9e-4dfe-a095-5c9f74d968f4/quick-event-manager","title":"Quick Event Manager <= 9.7.4 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"d26e8b21-fa9e-4dfe-a095-5c9f74d968f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d26e8b21-fa9e-4dfe-a095-5c9f74d968f4?source=api-prod","cve":"CVE-2023-23974","affectedVersions":"<=9.7.4","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7265616c7072657373811c9dc5_gen.json b/internal/data/assets/plugin_7265616c7072657373811c9dc5_gen.json
index ff774e0f..c6af4f1b 100644
--- a/internal/data/assets/plugin_7265616c7072657373811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7265616c7072657373811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/996697c7-39a9-411e-a1cf-c9bb7c34b258/realpress","title":"RealPress – Real Estate Plugin <= 1.1.2 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"996697c7-39a9-411e-a1cf-c9bb7c34b258"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/996697c7-39a9-411e-a1cf-c9bb7c34b258?source=api-prod","cve":"CVE-2026-66458","affectedVersions":"<=1.1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/c773a399-61ef-4bb0-987d-6de0bbe58ec1/realpress","title":"RealPress <= 1.0.9 - Missing Authorization to Unauthenticated Page Creation and Email Sending\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"c773a399-61ef-4bb0-987d-6de0bbe58ec1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c773a399-61ef-4bb0-987d-6de0bbe58ec1?source=api-prod","cve":"CVE-2025-11191","affectedVersions":"<=1.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/d48f98cb-18d5-4b15-96cb-94a4c86148e4/realpress","title":"RealPress – Real Estate Plugin <= 1.1.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"d48f98cb-18d5-4b15-96cb-94a4c86148e4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d48f98cb-18d5-4b15-96cb-94a4c86148e4?source=api-prod","cve":"CVE-2026-27050","affectedVersions":"<=1.1.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/996697c7-39a9-411e-a1cf-c9bb7c34b258/realpress","title":"RealPress – Real Estate Plugin <= 1.1.4 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"996697c7-39a9-411e-a1cf-c9bb7c34b258"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/996697c7-39a9-411e-a1cf-c9bb7c34b258?source=api-prod","cve":"CVE-2026-66458","affectedVersions":"<=1.1.4","severity":"high"},{"advisoryId":"WPSECADV/WF/c773a399-61ef-4bb0-987d-6de0bbe58ec1/realpress","title":"RealPress <= 1.0.9 - Missing Authorization to Unauthenticated Page Creation and Email Sending\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"c773a399-61ef-4bb0-987d-6de0bbe58ec1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c773a399-61ef-4bb0-987d-6de0bbe58ec1?source=api-prod","cve":"CVE-2025-11191","affectedVersions":"<=1.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/d48f98cb-18d5-4b15-96cb-94a4c86148e4/realpress","title":"RealPress – Real Estate Plugin <= 1.1.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"d48f98cb-18d5-4b15-96cb-94a4c86148e4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d48f98cb-18d5-4b15-96cb-94a4c86148e4?source=api-prod","cve":"CVE-2026-27050","affectedVersions":"<=1.1.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7265636970652d636172642d626c6f636b732d62792d77707a6f6f6d811c9dc5_gen.json b/internal/data/assets/plugin_7265636970652d636172642d626c6f636b732d62792d77707a6f6f6d811c9dc5_gen.json
index 0419ac65..382914b7 100644
--- a/internal/data/assets/plugin_7265636970652d636172642d626c6f636b732d62792d77707a6f6f6d811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7265636970652d636172642d626c6f636b732d62792d77707a6f6f6d811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0c05dcd9-71d2-4881-b5aa-335821ff95b3/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks for Gutenberg & Elementor <= 3.4.3 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c05dcd9-71d2-4881-b5aa-335821ff95b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c05dcd9-71d2-4881-b5aa-335821ff95b3?source=api-prod","cve":"CVE-2025-26983","affectedVersions":"<=3.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/67c15451-672d-4297-9d19-090a4458605f/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks for Gutenberg & Elementor < 3.4.13 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"67c15451-672d-4297-9d19-090a4458605f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/67c15451-672d-4297-9d19-090a4458605f?source=api-prod","cve":"CVE-2025-14973","affectedVersions":"<3.4.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/6f6ece0e-7c7c-4c9b-b860-3b279e98c087/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks by WPZOOM <= 2.8.2 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f6ece0e-7c7c-4c9b-b860-3b279e98c087"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f6ece0e-7c7c-4c9b-b860-3b279e98c087?source=api-prod","cve":"CVE-2021-24634","affectedVersions":"<2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a684bf5f-7cf6-43b1-b457-fdc2ba74852d/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks Lite <= 3.4.13 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"a684bf5f-7cf6-43b1-b457-fdc2ba74852d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a684bf5f-7cf6-43b1-b457-fdc2ba74852d?source=api-prod","cve":"CVE-2026-3011","affectedVersions":"<=3.4.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/a991921e-04cb-4704-8a6a-948fa6be97bf/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks Lite <= 3.4.18 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a991921e-04cb-4704-8a6a-948fa6be97bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a991921e-04cb-4704-8a6a-948fa6be97bf?source=api-prod","cve":"CVE-2026-73361","affectedVersions":"<=3.4.18","severity":"high"},{"advisoryId":"WPSECADV/WF/b59decf5-938c-4a5f-a839-47e19e978c84/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks for Gutenberg & Elementor <= 3.3.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"b59decf5-938c-4a5f-a839-47e19e978c84"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b59decf5-938c-4a5f-a839-47e19e978c84?source=api-prod","cve":"CVE-2024-43293","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bbc7704b-8a28-4daf-8b83-bccc3783c43c/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks for Gutenberg & Elementor <= 3.4.8 - Incorrect Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"bbc7704b-8a28-4daf-8b83-bccc3783c43c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bbc7704b-8a28-4daf-8b83-bccc3783c43c?source=api-prod","cve":"CVE-2025-62019","affectedVersions":"<=3.4.8","severity":"high"},{"advisoryId":"WPSECADV/WF/ff9c424c-f37f-4c30-aa95-da597008cbb2/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks by WPZOOM <= 2.8.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ff9c424c-f37f-4c30-aa95-da597008cbb2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ff9c424c-f37f-4c30-aa95-da597008cbb2?source=api-prod","cve":"CVE-2021-24632","affectedVersions":"<2.8.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0c05dcd9-71d2-4881-b5aa-335821ff95b3/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks for Gutenberg & Elementor <= 3.4.3 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c05dcd9-71d2-4881-b5aa-335821ff95b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c05dcd9-71d2-4881-b5aa-335821ff95b3?source=api-prod","cve":"CVE-2025-26983","affectedVersions":"<=3.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/67c15451-672d-4297-9d19-090a4458605f/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks for Gutenberg & Elementor < 3.4.13 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"67c15451-672d-4297-9d19-090a4458605f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/67c15451-672d-4297-9d19-090a4458605f?source=api-prod","cve":"CVE-2025-14973","affectedVersions":"<3.4.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/6f6ece0e-7c7c-4c9b-b860-3b279e98c087/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks by WPZOOM <= 2.8.2 - Authenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"6f6ece0e-7c7c-4c9b-b860-3b279e98c087"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6f6ece0e-7c7c-4c9b-b860-3b279e98c087?source=api-prod","cve":"CVE-2021-24634","affectedVersions":"<2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a684bf5f-7cf6-43b1-b457-fdc2ba74852d/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks Lite <= 3.4.13 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"a684bf5f-7cf6-43b1-b457-fdc2ba74852d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a684bf5f-7cf6-43b1-b457-fdc2ba74852d?source=api-prod","cve":"CVE-2026-3011","affectedVersions":"<=3.4.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/a991921e-04cb-4704-8a6a-948fa6be97bf/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks Lite <= 3.4.18 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a991921e-04cb-4704-8a6a-948fa6be97bf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a991921e-04cb-4704-8a6a-948fa6be97bf?source=api-prod","cve":"CVE-2026-73361","affectedVersions":"<=3.4.18","severity":"high"},{"advisoryId":"WPSECADV/WF/b59decf5-938c-4a5f-a839-47e19e978c84/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks for Gutenberg & Elementor <= 3.3.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"b59decf5-938c-4a5f-a839-47e19e978c84"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b59decf5-938c-4a5f-a839-47e19e978c84?source=api-prod","cve":"CVE-2024-43293","affectedVersions":"<=3.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bbc7704b-8a28-4daf-8b83-bccc3783c43c/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks for Gutenberg & Elementor <= 3.4.8 - Incorrect Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"bbc7704b-8a28-4daf-8b83-bccc3783c43c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bbc7704b-8a28-4daf-8b83-bccc3783c43c?source=api-prod","cve":"CVE-2025-62019","affectedVersions":"<=3.4.8","severity":"high"},{"advisoryId":"WPSECADV/WF/ed5cabb3-161d-46cb-9e1f-34e189a831cd/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks Lite 3.5.0 - 3.6.3 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed5cabb3-161d-46cb-9e1f-34e189a831cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed5cabb3-161d-46cb-9e1f-34e189a831cd?source=api-prod","cve":"CVE-2026-115281","affectedVersions":">=3.5.0,<=3.6.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ff9c424c-f37f-4c30-aa95-da597008cbb2/recipe-card-blocks-by-wpzoom","title":"Recipe Card Blocks by WPZOOM <= 2.8.0 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"ff9c424c-f37f-4c30-aa95-da597008cbb2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ff9c424c-f37f-4c30-aa95-da597008cbb2?source=api-prod","cve":"CVE-2021-24632","affectedVersions":"<2.8.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_72657061796d656e742d63616c63756c61746f72811c9dc5_gen.json b/internal/data/assets/plugin_72657061796d656e742d63616c63756c61746f72811c9dc5_gen.json
index 14a09fde..4a5784fe 100644
--- a/internal/data/assets/plugin_72657061796d656e742d63616c63756c61746f72811c9dc5_gen.json
+++ b/internal/data/assets/plugin_72657061796d656e742d63616c63756c61746f72811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/df5c31fc-48ae-4152-b1e7-f280b1d93ca6/repayment-calculator","title":"Loan Calculator <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"df5c31fc-48ae-4152-b1e7-f280b1d93ca6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/df5c31fc-48ae-4152-b1e7-f280b1d93ca6?source=api-prod","cve":"CVE-2025-46442","affectedVersions":"<=1.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/df5c31fc-48ae-4152-b1e7-f280b1d93ca6/repayment-calculator","title":"Loan Calculator <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"df5c31fc-48ae-4152-b1e7-f280b1d93ca6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/df5c31fc-48ae-4152-b1e7-f280b1d93ca6?source=api-prod","cve":"CVE-2025-46442","affectedVersions":"<=1.2","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_726f6d657468656d65666f726d811c9dc5_gen.json b/internal/data/assets/plugin_726f6d657468656d65666f726d811c9dc5_gen.json
index dadbce86..8781fbe6 100644
--- a/internal/data/assets/plugin_726f6d657468656d65666f726d811c9dc5_gen.json
+++ b/internal/data/assets/plugin_726f6d657468656d65666f726d811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0d6adf41-6cb1-4c11-940d-fabc9298f3af/romethemeform","title":"RomethemeForm For Elementor <= 1.1.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"0d6adf41-6cb1-4c11-940d-fabc9298f3af"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0d6adf41-6cb1-4c11-940d-fabc9298f3af?source=api-prod","cve":"CVE-2024-32727","affectedVersions":"<=1.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/42610230-3635-463f-b97f-212ecb1fe041/romethemeform","title":"RTMForm Builder <= 1.2.7 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-17 17:17:00","sources":[{"name":"Wordfence","remoteId":"42610230-3635-463f-b97f-212ecb1fe041"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/42610230-3635-463f-b97f-212ecb1fe041?source=api-prod","cve":"CVE-2026-74003","affectedVersions":"<=1.2.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/81a293ea-abda-4c90-a109-791ca5ba89a4/romethemeform","title":"RomethemeForm For Elementor <= 1.1.5 - Missing Authorization via export_entries, rtformnewform, and rtformupdate\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"81a293ea-abda-4c90-a109-791ca5ba89a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81a293ea-abda-4c90-a109-791ca5ba89a4?source=api-prod","cve":"CVE-2023-6325","affectedVersions":"<=1.1.5","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0d6adf41-6cb1-4c11-940d-fabc9298f3af/romethemeform","title":"RomethemeForm For Elementor <= 1.1.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"0d6adf41-6cb1-4c11-940d-fabc9298f3af"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0d6adf41-6cb1-4c11-940d-fabc9298f3af?source=api-prod","cve":"CVE-2024-32727","affectedVersions":"<=1.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/42610230-3635-463f-b97f-212ecb1fe041/romethemeform","title":"RTMForm Builder <= 1.2.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-17 17:17:00","sources":[{"name":"Wordfence","remoteId":"42610230-3635-463f-b97f-212ecb1fe041"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/42610230-3635-463f-b97f-212ecb1fe041?source=api-prod","cve":"CVE-2026-74003","affectedVersions":"<=1.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/81a293ea-abda-4c90-a109-791ca5ba89a4/romethemeform","title":"RomethemeForm For Elementor <= 1.1.5 - Missing Authorization via export_entries, rtformnewform, and rtformupdate\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"81a293ea-abda-4c90-a109-791ca5ba89a4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81a293ea-abda-4c90-a109-791ca5ba89a4?source=api-prod","cve":"CVE-2023-6325","affectedVersions":"<=1.1.5","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_726f79616c2d656c656d656e746f722d6164646f6e73811c9dc5_gen.json b/internal/data/assets/plugin_726f79616c2d656c656d656e746f722d6164646f6e73811c9dc5_gen.json
index 27f48796..ecb014a4 100644
--- a/internal/data/assets/plugin_726f79616c2d656c656d656e746f722d6164646f6e73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_726f79616c2d656c656d656e746f722d6164646f6e73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0a941aef-85f6-4719-b6ab-ace77a03e93e/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a941aef-85f6-4719-b6ab-ace77a03e93e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a941aef-85f6-4719-b6ab-ace77a03e93e?source=api-prod","cve":"CVE-2022-4705","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c7a23b2-0d42-4e35-94aa-4cd6e25d8a9b/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1056 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c7a23b2-0d42-4e35-94aa-4cd6e25d8a9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c7a23b2-0d42-4e35-94aa-4cd6e25d8a9b?source=api-prod","cve":"CVE-2026-40763","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/16d083bc-d726-4291-bc6d-a7bf83fa78c3/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-16 13:10:11","sources":[{"name":"Wordfence","remoteId":"16d083bc-d726-4291-bc6d-a7bf83fa78c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16d083bc-d726-4291-bc6d-a7bf83fa78c3?source=api-prod","cve":"CVE-2026-5162","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/201ff7b6-d72a-43c3-a7b1-c4f917c9d27f/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-25 20:58:34","sources":[{"name":"Wordfence","remoteId":"201ff7b6-d72a-43c3-a7b1-c4f917c9d27f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/201ff7b6-d72a-43c3-a7b1-c4f917c9d27f?source=api-prod","cve":"CVE-2025-5338","affectedVersions":"<=1.7.1028","severity":"medium"},{"advisoryId":"WPSECADV/WF/256b4818-290b-4660-8e83-c18b068a8959/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"256b4818-290b-4660-8e83-c18b068a8959"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/256b4818-290b-4660-8e83-c18b068a8959?source=api-prod","cve":"CVE-2024-0442","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/2626db42-0047-4801-bbcb-e236440c1677/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.93 - Unauthenticated IP Spoofing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"2626db42-0047-4801-bbcb-e236440c1677"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2626db42-0047-4801-bbcb-e236440c1677?source=api-prod","cve":"CVE-2024-32786","affectedVersions":"<=1.3.93","severity":"medium"},{"advisoryId":"WPSECADV/WF/2bbfbbd4-9055-4ede-8a51-d49e000aa4f9/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2bbfbbd4-9055-4ede-8a51-d49e000aa4f9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2bbfbbd4-9055-4ede-8a51-d49e000aa4f9?source=api-prod","cve":"CVE-2026-25436","affectedVersions":"<1.7.1053","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d4225a6-4aae-49a5-93e1-8dcc9a77e089/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-03 19:31:46","sources":[{"name":"Wordfence","remoteId":"2d4225a6-4aae-49a5-93e1-8dcc9a77e089"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d4225a6-4aae-49a5-93e1-8dcc9a77e089?source=api-prod","cve":"CVE-2026-0664","affectedVersions":"<=1.7.1049","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ecec7d7-d1b2-4ccf-ade6-1f78224968c6/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-01 20:11:49","sources":[{"name":"Wordfence","remoteId":"2ecec7d7-d1b2-4ccf-ade6-1f78224968c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ecec7d7-d1b2-4ccf-ade6-1f78224968c6?source=api-prod","cve":"CVE-2026-4024","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/30a89e75-2ab1-4e65-8646-b100efed5dbd/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.980 - Authenticated (Author+) External Entity Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"30a89e75-2ab1-4e65-8646-b100efed5dbd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/30a89e75-2ab1-4e65-8646-b100efed5dbd?source=api-prod","cve":"CVE-2024-50442","affectedVersions":"<=1.3.980","severity":"medium"},{"advisoryId":"WPSECADV/WF/337cbec1-c8a8-41b5-8c32-779be671120f/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"337cbec1-c8a8-41b5-8c32-779be671120f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/337cbec1-c8a8-41b5-8c32-779be671120f?source=api-prod","cve":"CVE-2024-3675","affectedVersions":"<=1.3.971","severity":"medium"},{"advisoryId":"WPSECADV/WF/345d0ffd-5cb1-460a-827d-104dde1d94cd/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"345d0ffd-5cb1-460a-827d-104dde1d94cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/345d0ffd-5cb1-460a-827d-104dde1d94cd?source=api-prod","cve":"CVE-2026-13402","affectedVersions":"<=1.7.1062","severity":"medium"},{"advisoryId":"WPSECADV/WF/37223d1f-82c8-414f-bf39-63e728541aa3/royal-elementor-addons","title":"Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"37223d1f-82c8-414f-bf39-63e728541aa3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/37223d1f-82c8-414f-bf39-63e728541aa3?source=api-prod","cve":"CVE-2024-9059","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/39075385-f8b8-4f40-9ec1-8f9f8d2bee0c/royal-elementor-addons","title":"Royal Elementor Addons < 1.7.1041 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"39075385-f8b8-4f40-9ec1-8f9f8d2bee0c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39075385-f8b8-4f40-9ec1-8f9f8d2bee0c?source=api-prod","cve":"CVE-2026-40720","affectedVersions":"<1.7.1041","severity":"high"},{"advisoryId":"WPSECADV/WF/39242dd0-f968-403e-82f8-2f1d1fccce49/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Administrator+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"39242dd0-f968-403e-82f8-2f1d1fccce49"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39242dd0-f968-403e-82f8-2f1d1fccce49?source=api-prod","cve":"CVE-2026-13405","affectedVersions":"<1.7.1066","severity":"high"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/royal-elementor-addons","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.3.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/3ba3cf12-facb-479b-8077-fd279c40607e/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.80 - Missing Authorization to Private/Password Protected Post Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ba3cf12-facb-479b-8077-fd279c40607e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ba3cf12-facb-479b-8077-fd279c40607e?source=api-prod","cve":"CVE-2023-5922","affectedVersions":"<=1.3.80","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d3516e7-cce4-4def-be38-d16be3110d59/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d3516e7-cce4-4def-be38-d16be3110d59"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d3516e7-cce4-4def-be38-d16be3110d59?source=api-prod","cve":"CVE-2024-0513","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/3dc3b715-23eb-4cb9-8f44-1d3134c560ec/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"3dc3b715-23eb-4cb9-8f44-1d3134c560ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3dc3b715-23eb-4cb9-8f44-1d3134c560ec?source=api-prod","cve":"CVE-2022-4102","affectedVersions":"<=1.3.55","severity":"high"},{"advisoryId":"WPSECADV/WF/3edfc4af-2a28-4bdf-becf-018d9f656947/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 15:36:21","sources":[{"name":"Wordfence","remoteId":"3edfc4af-2a28-4bdf-becf-018d9f656947"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3edfc4af-2a28-4bdf-becf-018d9f656947?source=api-prod","cve":"CVE-2025-13067","affectedVersions":"<=1.7.1049","severity":"high"},{"advisoryId":"WPSECADV/WF/40ca3778-95ff-4b2c-ac47-4ae8c86e245a/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"40ca3778-95ff-4b2c-ac47-4ae8c86e245a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40ca3778-95ff-4b2c-ac47-4ae8c86e245a?source=api-prod","cve":"CVE-2024-2799","affectedVersions":"<=1.3.971","severity":"medium"},{"advisoryId":"WPSECADV/WF/4529464e-6830-4c2a-8146-79cf5fc1bc7c/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.982 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"4529464e-6830-4c2a-8146-79cf5fc1bc7c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4529464e-6830-4c2a-8146-79cf5fc1bc7c?source=api-prod","cve":"CVE-2024-44001","affectedVersions":"<=1.3.982","severity":"medium"},{"advisoryId":"WPSECADV/WF/45608b2a-997e-447b-b3f3-d57a199bf76b/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:00:00","sources":[{"name":"Wordfence","remoteId":"45608b2a-997e-447b-b3f3-d57a199bf76b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/45608b2a-997e-447b-b3f3-d57a199bf76b?source=api-prod","cve":"CVE-2026-112865","affectedVersions":"<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/4809d513-69e8-4572-9549-9dba9f40cb80/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.75 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"4809d513-69e8-4572-9549-9dba9f40cb80"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4809d513-69e8-4572-9549-9dba9f40cb80?source=api-prod","cve":"CVE-2022-47175","affectedVersions":"<=1.3.75","severity":"medium"},{"advisoryId":"WPSECADV/WF/4a7ef5a0-f6c8-41e1-bb3b-119a682be69f/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"4a7ef5a0-f6c8-41e1-bb3b-119a682be69f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a7ef5a0-f6c8-41e1-bb3b-119a682be69f?source=api-prod","cve":"CVE-2024-10798","affectedVersions":"<=1.7.1003","severity":"medium"},{"advisoryId":"WPSECADV/WF/4cad9170-0121-45b0-a1a5-7519be0a381e/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1066 - Unauthenticated Arbitrary HTML Injection in Notification Emails\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"4cad9170-0121-45b0-a1a5-7519be0a381e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4cad9170-0121-45b0-a1a5-7519be0a381e?source=api-prod","cve":"CVE-2026-13407","affectedVersions":"<=1.7.1066","severity":"high"},{"advisoryId":"WPSECADV/WF/4d565196-592d-415c-b37c-e54456aa9ed8/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-31 17:22:35","sources":[{"name":"Wordfence","remoteId":"4d565196-592d-415c-b37c-e54456aa9ed8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d565196-592d-415c-b37c-e54456aa9ed8?source=api-prod","cve":"CVE-2024-4342","affectedVersions":"<=1.3.975","severity":"medium"},{"advisoryId":"WPSECADV/WF/50518a54-16d8-4467-beca-a6b8196ed9b9/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1006 - Authenticated (Admin+) Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"50518a54-16d8-4467-beca-a6b8196ed9b9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50518a54-16d8-4467-beca-a6b8196ed9b9?source=api-prod","cve":"CVE-2025-26990","affectedVersions":"<=1.7.1006","severity":"medium"},{"advisoryId":"WPSECADV/WF/5122800d-f274-4129-84d4-02380269502c/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"5122800d-f274-4129-84d4-02380269502c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5122800d-f274-4129-84d4-02380269502c?source=api-prod","cve":"CVE-2024-3887","affectedVersions":"<=1.3.974","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/royal-elementor-addons","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":">=1.3,<=1.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/55db7d81-7ffb-49da-b64e-23e892bddc57/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"55db7d81-7ffb-49da-b64e-23e892bddc57"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/55db7d81-7ffb-49da-b64e-23e892bddc57?source=api-prod","cve":"CVE-2022-4707","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/55f7e39b-e7a5-462b-b1e4-c3d92038f17e/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"55f7e39b-e7a5-462b-b1e4-c3d92038f17e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/55f7e39b-e7a5-462b-b1e4-c3d92038f17e?source=api-prod","cve":"CVE-2022-4701","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/5666e2b7-acb3-4abb-ac2a-1575206435cf/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"5666e2b7-acb3-4abb-ac2a-1575206435cf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5666e2b7-acb3-4abb-ac2a-1575206435cf?source=api-prod","cve":"CVE-2025-1455","affectedVersions":"<=1.7.1012","severity":"medium"},{"advisoryId":"WPSECADV/WF/57bf222b-5f49-46e2-be84-3e6444807096/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"57bf222b-5f49-46e2-be84-3e6444807096"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57bf222b-5f49-46e2-be84-3e6444807096?source=api-prod","cve":"CVE-2024-4489","affectedVersions":"<=1.3.976","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ccece54-18fa-42e4-ba1a-d0879b73d66d/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ccece54-18fa-42e4-ba1a-d0879b73d66d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ccece54-18fa-42e4-ba1a-d0879b73d66d?source=api-prod","cve":"CVE-2024-8482","affectedVersions":"<=1.3.986","severity":"medium"},{"advisoryId":"WPSECADV/WF/5eab79e6-cb47-4fe7-993a-e833bd6689f8/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"5eab79e6-cb47-4fe7-993a-e833bd6689f8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5eab79e6-cb47-4fe7-993a-e833bd6689f8?source=api-prod","cve":"CVE-2026-17585","affectedVersions":"<=1.7.1066","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ee7b4d8-c397-41f6-981f-9a010e4ab2f1/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ee7b4d8-c397-41f6-981f-9a010e4ab2f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ee7b4d8-c397-41f6-981f-9a010e4ab2f1?source=api-prod","cve":"CVE-2024-12120","affectedVersions":"<=1.7.1017","severity":"medium"},{"advisoryId":"WPSECADV/WF/62a5c796-1c14-4cb1-9f21-340b40e418df/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"62a5c796-1c14-4cb1-9f21-340b40e418df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/62a5c796-1c14-4cb1-9f21-340b40e418df?source=api-prod","cve":"CVE-2022-4703","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/64cce528-0ad0-45ec-a8f6-e8791b0bece0/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"64cce528-0ad0-45ec-a8f6-e8791b0bece0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64cce528-0ad0-45ec-a8f6-e8791b0bece0?source=api-prod","cve":"CVE-2022-4704","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/68c6e428-b9cf-442f-a896-a8ceb4b9be0e/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"68c6e428-b9cf-442f-a896-a8ceb4b9be0e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68c6e428-b9cf-442f-a896-a8ceb4b9be0e?source=api-prod","cve":"CVE-2025-1456","affectedVersions":"<=1.7.1012","severity":"medium"},{"advisoryId":"WPSECADV/WF/6aa3d312-485a-4a93-a075-fa7152395f11/royal-elementor-addons","title":"Royal Elementor Addons <=1.3.55 - Authenticated (Subscriber+) Arbitrary Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"6aa3d312-485a-4a93-a075-fa7152395f11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6aa3d312-485a-4a93-a075-fa7152395f11?source=api-prod","cve":"CVE-2022-4102","affectedVersions":"<=1.3.55","severity":"high"},{"advisoryId":"WPSECADV/WF/6ab93ea4-4d15-43cb-be70-6eb4921194d1/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Unauthenticated Like Count Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"6ab93ea4-4d15-43cb-be70-6eb4921194d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ab93ea4-4d15-43cb-be70-6eb4921194d1?source=api-prod","cve":"CVE-2026-13404","affectedVersions":"<1.7.1066","severity":"medium"},{"advisoryId":"WPSECADV/WF/6bc6a436-6df3-4eaf-a16b-d8b3c3ca7d87/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bc6a436-6df3-4eaf-a16b-d8b3c3ca7d87"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bc6a436-6df3-4eaf-a16b-d8b3c3ca7d87?source=api-prod","cve":"CVE-2025-1441","affectedVersions":"<=1.7.1007","severity":"medium"},{"advisoryId":"WPSECADV/WF/70582781-9de5-4124-bde4-d3d26724e9b3/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"70582781-9de5-4124-bde4-d3d26724e9b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70582781-9de5-4124-bde4-d3d26724e9b3?source=api-prod","cve":"CVE-2024-2798","affectedVersions":"<=1.3.971","severity":"medium"},{"advisoryId":"WPSECADV/WF/7a04705d-cd17-4b4b-b04d-de55d6479dab/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"7a04705d-cd17-4b4b-b04d-de55d6479dab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a04705d-cd17-4b4b-b04d-de55d6479dab?source=api-prod","cve":"CVE-2024-1567","affectedVersions":"<=1.3.94","severity":"high"},{"advisoryId":"WPSECADV/WF/7f197721-d7d6-49db-8cdc-0162c0c2960b/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"7f197721-d7d6-49db-8cdc-0162c0c2960b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f197721-d7d6-49db-8cdc-0162c0c2960b?source=api-prod","cve":"CVE-2026-27421","affectedVersions":"<1.7.1053","severity":"medium"},{"advisoryId":"WPSECADV/WF/83a0150d-a9fa-4cc2-8fe8-a429747a9964/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"83a0150d-a9fa-4cc2-8fe8-a429747a9964"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83a0150d-a9fa-4cc2-8fe8-a429747a9964?source=api-prod","cve":"CVE-2024-5818","affectedVersions":"<=1.3.980","severity":"medium"},{"advisoryId":"WPSECADV/WF/83ea2ec3-5d5b-44ea-83e6-41c4fa6e2e5f/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via  Advanced Accordion Title Tags\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"83ea2ec3-5d5b-44ea-83e6-41c4fa6e2e5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83ea2ec3-5d5b-44ea-83e6-41c4fa6e2e5f?source=api-prod","cve":"CVE-2024-3889","affectedVersions":"<=1.3.971","severity":"medium"},{"advisoryId":"WPSECADV/WF/8619c999-5cf7-4888-bdb2-815238411303/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"8619c999-5cf7-4888-bdb2-815238411303"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8619c999-5cf7-4888-bdb2-815238411303?source=api-prod","cve":"CVE-2024-1500","affectedVersions":"<=1.3.91","severity":"medium"},{"advisoryId":"WPSECADV/WF/86c9bcf1-c69e-47ca-b74b-8ce6157f520b/royal-elementor-addons","title":"Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"86c9bcf1-c69e-47ca-b74b-8ce6157f520b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86c9bcf1-c69e-47ca-b74b-8ce6157f520b?source=api-prod","cve":"CVE-2023-3709","affectedVersions":"<=1.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/8810200b-e026-4258-86aa-5c1a200fcf9b/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-15 16:21:37","sources":[{"name":"Wordfence","remoteId":"8810200b-e026-4258-86aa-5c1a200fcf9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8810200b-e026-4258-86aa-5c1a200fcf9b?source=api-prod","cve":"CVE-2026-17123","affectedVersions":"<=1.7.1064","severity":"high"},{"advisoryId":"WPSECADV/WF/8ec27c65-5104-4636-bb95-f9832a3f4fff/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:02:00","sources":[{"name":"Wordfence","remoteId":"8ec27c65-5104-4636-bb95-f9832a3f4fff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ec27c65-5104-4636-bb95-f9832a3f4fff?source=api-prod","cve":"CVE-2026-97254","affectedVersions":"<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/9744055a-b199-4945-afcc-4f5b85f5f1e8/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"9744055a-b199-4945-afcc-4f5b85f5f1e8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9744055a-b199-4945-afcc-4f5b85f5f1e8?source=api-prod","cve":"CVE-2026-6229","affectedVersions":"<=1.7.1057","severity":"high"},{"advisoryId":"WPSECADV/WF/9e860c60-b330-4a6c-8d15-947451af62fc/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1001 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"9e860c60-b330-4a6c-8d15-947451af62fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9e860c60-b330-4a6c-8d15-947451af62fc?source=api-prod","cve":"CVE-2024-56226","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/a4178271-c09e-4094-a616-5a00d28f39a3/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"a4178271-c09e-4094-a616-5a00d28f39a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a4178271-c09e-4094-a616-5a00d28f39a3?source=api-prod","cve":"CVE-2024-0515","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/a4b353bf-f9be-465a-8723-9ea721b5baab/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a4b353bf-f9be-465a-8723-9ea721b5baab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a4b353bf-f9be-465a-8723-9ea721b5baab?source=api-prod","cve":"CVE-2024-56062","affectedVersions":"<=1.3.987","severity":"medium"},{"advisoryId":"WPSECADV/WF/a720b38c-37f0-4edf-9868-de3a105551ee/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"a720b38c-37f0-4edf-9868-de3a105551ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a720b38c-37f0-4edf-9868-de3a105551ee?source=api-prod","cve":"CVE-2025-39361","affectedVersions":"<=1.7.1017","severity":"medium"},{"advisoryId":"WPSECADV/WF/a8e34c05-7431-4acd-91f3-aab5e66f61ad/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-13 19:52:46","sources":[{"name":"Wordfence","remoteId":"a8e34c05-7431-4acd-91f3-aab5e66f61ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a8e34c05-7431-4acd-91f3-aab5e66f61ad?source=api-prod","cve":"CVE-2025-0393","affectedVersions":"<=1.7.1006","severity":"medium"},{"advisoryId":"WPSECADV/WF/a8e39f0b-eb4c-4568-9f5a-60a0dc3eb6ba/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a8e39f0b-eb4c-4568-9f5a-60a0dc3eb6ba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a8e39f0b-eb4c-4568-9f5a-60a0dc3eb6ba?source=api-prod","cve":"CVE-2024-9668","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9d95af5-96da-4259-98c6-e2c4c574a896/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9d95af5-96da-4259-98c6-e2c4c574a896"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9d95af5-96da-4259-98c6-e2c4c574a896?source=api-prod","cve":"CVE-2023-5360","affectedVersions":"<=1.3.78","severity":"critical"},{"advisoryId":"WPSECADV/WF/ac6c6ce4-9944-4c8e-89aa-6a2e870ef205/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac6c6ce4-9944-4c8e-89aa-6a2e870ef205"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac6c6ce4-9944-4c8e-89aa-6a2e870ef205?source=api-prod","cve":"CVE-2022-4710","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/acaa3142-2bbc-43d3-8ecc-05e8edb931ec/royal-elementor-addons","title":"Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"acaa3142-2bbc-43d3-8ecc-05e8edb931ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/acaa3142-2bbc-43d3-8ecc-05e8edb931ec?source=api-prod","cve":"CVE-2025-5092","affectedVersions":"<=1.7.1031","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0955689-43a0-442c-974b-5db5e4171f6a/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0955689-43a0-442c-974b-5db5e4171f6a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0955689-43a0-442c-974b-5db5e4171f6a?source=api-prod","cve":"CVE-2024-0514","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2ff2954-f494-4cd7-9f29-ee0e8551e339/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b2ff2954-f494-4cd7-9f29-ee0e8551e339"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2ff2954-f494-4cd7-9f29-ee0e8551e339?source=api-prod","cve":"CVE-2024-0512","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3e12653-ddfe-4e02-9d9e-0263b9f71def/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3e12653-ddfe-4e02-9d9e-0263b9f71def"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3e12653-ddfe-4e02-9d9e-0263b9f71def?source=api-prod","cve":"CVE-2022-4708","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/b957eb0d-882d-4646-ad84-9c64f957be14/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"b957eb0d-882d-4646-ad84-9c64f957be14"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b957eb0d-882d-4646-ad84-9c64f957be14?source=api-prod","cve":"CVE-2025-3813","affectedVersions":"<=1.7.1020","severity":"medium"},{"advisoryId":"WPSECADV/WF/ba7b8fe5-aa49-4a70-89c9-1b95a30b1142/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-23 16:35:20","sources":[{"name":"Wordfence","remoteId":"ba7b8fe5-aa49-4a70-89c9-1b95a30b1142"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ba7b8fe5-aa49-4a70-89c9-1b95a30b1142?source=api-prod","cve":"CVE-2026-5428","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc2e883b-fb91-425c-a779-89a34eed2ba8/royal-elementor-addons","title":"Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc2e883b-fb91-425c-a779-89a34eed2ba8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc2e883b-fb91-425c-a779-89a34eed2ba8?source=api-prod","cve":"CVE-2022-4103","affectedVersions":"<=1.3.55","severity":"medium"},{"advisoryId":"WPSECADV/WF/bd90b85e-22a9-4c08-b2cf-4f75406e7ca3/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd90b85e-22a9-4c08-b2cf-4f75406e7ca3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd90b85e-22a9-4c08-b2cf-4f75406e7ca3?source=api-prod","cve":"CVE-2024-9682","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/bdd4022f-b038-4351-9798-77e7c24f1173/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.977 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"bdd4022f-b038-4351-9798-77e7c24f1173"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdd4022f-b038-4351-9798-77e7c24f1173?source=api-prod","cve":"CVE-2025-39543","affectedVersions":"<=1.3.977","severity":"medium"},{"advisoryId":"WPSECADV/WF/be6db702-43bc-4d1f-a222-d323c70c6bb3/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1052 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"be6db702-43bc-4d1f-a222-d323c70c6bb3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be6db702-43bc-4d1f-a222-d323c70c6bb3?source=api-prod","cve":"CVE-2026-28135","affectedVersions":"<=1.7.1052","severity":"medium"},{"advisoryId":"WPSECADV/WF/c23e9810-40ea-43e2-9292-f05f300a7ddf/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"c23e9810-40ea-43e2-9292-f05f300a7ddf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c23e9810-40ea-43e2-9292-f05f300a7ddf?source=api-prod","cve":"CVE-2022-4711","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3dfb0b7-5d9f-492b-9a1a-d4445d39c00c/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3dfb0b7-5d9f-492b-9a1a-d4445d39c00c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3dfb0b7-5d9f-492b-9a1a-d4445d39c00c?source=api-prod","cve":"CVE-2024-7417","affectedVersions":"<=1.3.986","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3e47d14-4c00-4b10-9e4d-7f1d7946a2b4/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.93 - Authenticated (Contributor+) Stored Cross-Site Scriting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3e47d14-4c00-4b10-9e4d-7f1d7946a2b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3e47d14-4c00-4b10-9e4d-7f1d7946a2b4?source=api-prod","cve":"CVE-2024-31236","affectedVersions":"<=1.3.93","severity":"medium"},{"advisoryId":"WPSECADV/WF/c4192a7f-b962-46f9-a524-7271ed6f4917/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-16 15:17:51","sources":[{"name":"Wordfence","remoteId":"c4192a7f-b962-46f9-a524-7271ed6f4917"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4192a7f-b962-46f9-a524-7271ed6f4917?source=api-prod","cve":"CVE-2026-2373","affectedVersions":"<=1.7.1049","severity":"medium"},{"advisoryId":"WPSECADV/WF/c91a14d3-bc41-4490-888c-486ad2994095/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-04 14:32:14","sources":[{"name":"Wordfence","remoteId":"c91a14d3-bc41-4490-888c-486ad2994095"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c91a14d3-bc41-4490-888c-486ad2994095?source=api-prod","cve":"CVE-2026-4803","affectedVersions":"<=1.7.1056","severity":"high"},{"advisoryId":"WPSECADV/WF/cb0ac434-7e85-44d4-b21e-df462f63cd9c/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb0ac434-7e85-44d4-b21e-df462f63cd9c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb0ac434-7e85-44d4-b21e-df462f63cd9c?source=api-prod","cve":"CVE-2024-4488","affectedVersions":"<=1.3.976","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb47b6cc-87e4-4d29-bbc7-6d7552bc3943/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb47b6cc-87e4-4d29-bbc7-6d7552bc3943"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb47b6cc-87e4-4d29-bbc7-6d7552bc3943?source=api-prod","cve":"CVE-2022-4702","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/cca7bb88-4a2c-4406-8610-15ce6e77c31f/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-31 17:38:07","sources":[{"name":"Wordfence","remoteId":"cca7bb88-4a2c-4406-8610-15ce6e77c31f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cca7bb88-4a2c-4406-8610-15ce6e77c31f?source=api-prod","cve":"CVE-2024-4087","affectedVersions":"<=1.3.975","severity":"medium"},{"advisoryId":"WPSECADV/WF/cdc37da4-9de6-467b-a168-e3fa29baa06b/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1036 - Missing Authorization to Unauthenticated Media File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdc37da4-9de6-467b-a168-e3fa29baa06b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdc37da4-9de6-467b-a168-e3fa29baa06b?source=api-prod","cve":"CVE-2025-11363","affectedVersions":"<=1.7.1036","severity":"medium"},{"advisoryId":"WPSECADV/WF/cdd464ad-24bc-4922-8bfa-ac42fbe60b52/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdd464ad-24bc-4922-8bfa-ac42fbe60b52"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdd464ad-24bc-4922-8bfa-ac42fbe60b52?source=api-prod","cve":"CVE-2022-4700","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2031289-eaf3-4a1b-8771-769c08d99ca3/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2031289-eaf3-4a1b-8771-769c08d99ca3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2031289-eaf3-4a1b-8771-769c08d99ca3?source=api-prod","affectedVersions":"<=1.3.55","severity":"high"},{"advisoryId":"WPSECADV/WF/d3457b87-c860-4cf2-ac3d-2c6521b629ea/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3457b87-c860-4cf2-ac3d-2c6521b629ea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3457b87-c860-4cf2-ac3d-2c6521b629ea?source=api-prod","cve":"CVE-2024-0516","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/d384e03a-ad2d-4399-9c82-a0ff70ac90f7/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1069 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:03:00","sources":[{"name":"Wordfence","remoteId":"d384e03a-ad2d-4399-9c82-a0ff70ac90f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d384e03a-ad2d-4399-9c82-a0ff70ac90f7?source=api-prod","cve":"CVE-2026-97255","affectedVersions":"<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/d7ce047b-3cd3-475b-9a9f-38d15174e7e5/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 16:21:26","sources":[{"name":"Wordfence","remoteId":"d7ce047b-3cd3-475b-9a9f-38d15174e7e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7ce047b-3cd3-475b-9a9f-38d15174e7e5?source=api-prod","cve":"CVE-2026-8118","affectedVersions":">=1.7.1058,<=1.7.1059","severity":"medium"},{"advisoryId":"WPSECADV/WF/dc8bef03-51e0-4448-bddd-85300104e875/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"dc8bef03-51e0-4448-bddd-85300104e875"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc8bef03-51e0-4448-bddd-85300104e875?source=api-prod","cve":"CVE-2024-0511","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/df06f6c7-98b8-4d17-aa53-c5f13ada7c62/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"df06f6c7-98b8-4d17-aa53-c5f13ada7c62"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/df06f6c7-98b8-4d17-aa53-c5f13ada7c62?source=api-prod","cve":"CVE-2026-13406","affectedVersions":"<1.7.1066","severity":"medium"},{"advisoryId":"WPSECADV/WF/dfd45df4-439a-4e46-aba0-a2831c665ea6/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"dfd45df4-439a-4e46-aba0-a2831c665ea6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dfd45df4-439a-4e46-aba0-a2831c665ea6?source=api-prod","cve":"CVE-2026-19226","affectedVersions":"<1.7.1066","severity":"medium"},{"advisoryId":"WPSECADV/WF/ead108c4-ac09-42ea-95c5-e95dc514f1cb/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-18 15:19:11","sources":[{"name":"Wordfence","remoteId":"ead108c4-ac09-42ea-95c5-e95dc514f1cb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ead108c4-ac09-42ea-95c5-e95dc514f1cb?source=api-prod","cve":"CVE-2025-6251","affectedVersions":"<=1.7.1036","severity":"medium"},{"advisoryId":"WPSECADV/WF/ec33a828-6387-42d3-b0ab-a2461ff1a4c4/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1064 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec33a828-6387-42d3-b0ab-a2461ff1a4c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec33a828-6387-42d3-b0ab-a2461ff1a4c4?source=api-prod","cve":"CVE-2026-19217","affectedVersions":"<=1.7.1064","severity":"medium"},{"advisoryId":"WPSECADV/WF/ed86e902-7637-481d-9005-7025187ba200/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 19:53:33","sources":[{"name":"Wordfence","remoteId":"ed86e902-7637-481d-9005-7025187ba200"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed86e902-7637-481d-9005-7025187ba200?source=api-prod","cve":"CVE-2026-6504","affectedVersions":"<=1.7.1058","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee96d8c5-baf0-4c5c-9ace-e88bbb95ee0a/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-04 14:53:29","sources":[{"name":"Wordfence","remoteId":"ee96d8c5-baf0-4c5c-9ace-e88bbb95ee0a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee96d8c5-baf0-4c5c-9ace-e88bbb95ee0a?source=api-prod","cve":"CVE-2026-5159","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/f1dafafe-91bb-4cd6-93f3-e67538389697/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1068 - Authenticated (Contributor+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 07:22:41","sources":[{"name":"Wordfence","remoteId":"f1dafafe-91bb-4cd6-93f3-e67538389697"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f1dafafe-91bb-4cd6-93f3-e67538389697?source=api-prod","cve":"CVE-2026-111851","affectedVersions":"<=1.7.1068","severity":"high"},{"advisoryId":"WPSECADV/WF/f7f9b1ef-2efc-4d88-bff8-e0dd711b85ab/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1001 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"f7f9b1ef-2efc-4d88-bff8-e0dd711b85ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7f9b1ef-2efc-4d88-bff8-e0dd711b85ab?source=api-prod","cve":"CVE-2024-56227","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/fa530112-a7cd-4c54-aa87-9e7337d01557/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"fa530112-a7cd-4c54-aa87-9e7337d01557"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fa530112-a7cd-4c54-aa87-9e7337d01557?source=api-prod","cve":"CVE-2022-4709","affectedVersions":"<=1.3.59","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0045d2e8-0a5a-4b64-a27d-174fede659b0/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1037 - 1.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"0045d2e8-0a5a-4b64-a27d-174fede659b0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0045d2e8-0a5a-4b64-a27d-174fede659b0?source=api-prod","cve":"CVE-2026-107098","affectedVersions":">=1.7.1037,<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/069132ee-53a9-44a2-ae6c-8a83463aed9e/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.3.71 - 1.7.1069 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"069132ee-53a9-44a2-ae6c-8a83463aed9e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/069132ee-53a9-44a2-ae6c-8a83463aed9e?source=api-prod","cve":"CVE-2026-107097","affectedVersions":">=1.3.71,<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/0a941aef-85f6-4719-b6ab-ace77a03e93e/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a941aef-85f6-4719-b6ab-ace77a03e93e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a941aef-85f6-4719-b6ab-ace77a03e93e?source=api-prod","cve":"CVE-2022-4705","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/0c7a23b2-0d42-4e35-94aa-4cd6e25d8a9b/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1056 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"0c7a23b2-0d42-4e35-94aa-4cd6e25d8a9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c7a23b2-0d42-4e35-94aa-4cd6e25d8a9b?source=api-prod","cve":"CVE-2026-40763","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/16d083bc-d726-4291-bc6d-a7bf83fa78c3/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-16 13:10:11","sources":[{"name":"Wordfence","remoteId":"16d083bc-d726-4291-bc6d-a7bf83fa78c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16d083bc-d726-4291-bc6d-a7bf83fa78c3?source=api-prod","cve":"CVE-2026-5162","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/201ff7b6-d72a-43c3-a7b1-c4f917c9d27f/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-25 20:58:34","sources":[{"name":"Wordfence","remoteId":"201ff7b6-d72a-43c3-a7b1-c4f917c9d27f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/201ff7b6-d72a-43c3-a7b1-c4f917c9d27f?source=api-prod","cve":"CVE-2025-5338","affectedVersions":"<=1.7.1028","severity":"medium"},{"advisoryId":"WPSECADV/WF/256b4818-290b-4660-8e83-c18b068a8959/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"256b4818-290b-4660-8e83-c18b068a8959"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/256b4818-290b-4660-8e83-c18b068a8959?source=api-prod","cve":"CVE-2024-0442","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/2626db42-0047-4801-bbcb-e236440c1677/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.93 - Unauthenticated IP Spoofing\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"2626db42-0047-4801-bbcb-e236440c1677"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2626db42-0047-4801-bbcb-e236440c1677?source=api-prod","cve":"CVE-2024-32786","affectedVersions":"<=1.3.93","severity":"medium"},{"advisoryId":"WPSECADV/WF/2bbfbbd4-9055-4ede-8a51-d49e000aa4f9/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2bbfbbd4-9055-4ede-8a51-d49e000aa4f9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2bbfbbd4-9055-4ede-8a51-d49e000aa4f9?source=api-prod","cve":"CVE-2026-25436","affectedVersions":"<1.7.1053","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d4225a6-4aae-49a5-93e1-8dcc9a77e089/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-03 19:31:46","sources":[{"name":"Wordfence","remoteId":"2d4225a6-4aae-49a5-93e1-8dcc9a77e089"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d4225a6-4aae-49a5-93e1-8dcc9a77e089?source=api-prod","cve":"CVE-2026-0664","affectedVersions":"<=1.7.1049","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ecec7d7-d1b2-4ccf-ade6-1f78224968c6/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-01 20:11:49","sources":[{"name":"Wordfence","remoteId":"2ecec7d7-d1b2-4ccf-ade6-1f78224968c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ecec7d7-d1b2-4ccf-ade6-1f78224968c6?source=api-prod","cve":"CVE-2026-4024","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/30a89e75-2ab1-4e65-8646-b100efed5dbd/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.980 - Authenticated (Author+) External Entity Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"30a89e75-2ab1-4e65-8646-b100efed5dbd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/30a89e75-2ab1-4e65-8646-b100efed5dbd?source=api-prod","cve":"CVE-2024-50442","affectedVersions":"<=1.3.980","severity":"medium"},{"advisoryId":"WPSECADV/WF/337cbec1-c8a8-41b5-8c32-779be671120f/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"337cbec1-c8a8-41b5-8c32-779be671120f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/337cbec1-c8a8-41b5-8c32-779be671120f?source=api-prod","cve":"CVE-2024-3675","affectedVersions":"<=1.3.971","severity":"medium"},{"advisoryId":"WPSECADV/WF/345d0ffd-5cb1-460a-827d-104dde1d94cd/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"345d0ffd-5cb1-460a-827d-104dde1d94cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/345d0ffd-5cb1-460a-827d-104dde1d94cd?source=api-prod","cve":"CVE-2026-13402","affectedVersions":"<=1.7.1062","severity":"medium"},{"advisoryId":"WPSECADV/WF/37223d1f-82c8-414f-bf39-63e728541aa3/royal-elementor-addons","title":"Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"37223d1f-82c8-414f-bf39-63e728541aa3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/37223d1f-82c8-414f-bf39-63e728541aa3?source=api-prod","cve":"CVE-2024-9059","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/39075385-f8b8-4f40-9ec1-8f9f8d2bee0c/royal-elementor-addons","title":"Royal Elementor Addons < 1.7.1041 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"39075385-f8b8-4f40-9ec1-8f9f8d2bee0c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39075385-f8b8-4f40-9ec1-8f9f8d2bee0c?source=api-prod","cve":"CVE-2026-40720","affectedVersions":"<1.7.1041","severity":"high"},{"advisoryId":"WPSECADV/WF/39242dd0-f968-403e-82f8-2f1d1fccce49/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Administrator+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"39242dd0-f968-403e-82f8-2f1d1fccce49"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39242dd0-f968-403e-82f8-2f1d1fccce49?source=api-prod","cve":"CVE-2026-13405","affectedVersions":"<1.7.1066","severity":"high"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/royal-elementor-addons","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.3.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/3ba3cf12-facb-479b-8077-fd279c40607e/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.80 - Missing Authorization to Private/Password Protected Post Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"3ba3cf12-facb-479b-8077-fd279c40607e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ba3cf12-facb-479b-8077-fd279c40607e?source=api-prod","cve":"CVE-2023-5922","affectedVersions":"<=1.3.80","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d3516e7-cce4-4def-be38-d16be3110d59/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d3516e7-cce4-4def-be38-d16be3110d59"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d3516e7-cce4-4def-be38-d16be3110d59?source=api-prod","cve":"CVE-2024-0513","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/3dc3b715-23eb-4cb9-8f44-1d3134c560ec/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"3dc3b715-23eb-4cb9-8f44-1d3134c560ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3dc3b715-23eb-4cb9-8f44-1d3134c560ec?source=api-prod","cve":"CVE-2022-4102","affectedVersions":"<=1.3.55","severity":"high"},{"advisoryId":"WPSECADV/WF/3edfc4af-2a28-4bdf-becf-018d9f656947/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 15:36:21","sources":[{"name":"Wordfence","remoteId":"3edfc4af-2a28-4bdf-becf-018d9f656947"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3edfc4af-2a28-4bdf-becf-018d9f656947?source=api-prod","cve":"CVE-2025-13067","affectedVersions":"<=1.7.1049","severity":"high"},{"advisoryId":"WPSECADV/WF/40ca3778-95ff-4b2c-ac47-4ae8c86e245a/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"40ca3778-95ff-4b2c-ac47-4ae8c86e245a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40ca3778-95ff-4b2c-ac47-4ae8c86e245a?source=api-prod","cve":"CVE-2024-2799","affectedVersions":"<=1.3.971","severity":"medium"},{"advisoryId":"WPSECADV/WF/4529464e-6830-4c2a-8146-79cf5fc1bc7c/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.982 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"4529464e-6830-4c2a-8146-79cf5fc1bc7c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4529464e-6830-4c2a-8146-79cf5fc1bc7c?source=api-prod","cve":"CVE-2024-44001","affectedVersions":"<=1.3.982","severity":"medium"},{"advisoryId":"WPSECADV/WF/45608b2a-997e-447b-b3f3-d57a199bf76b/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:00:00","sources":[{"name":"Wordfence","remoteId":"45608b2a-997e-447b-b3f3-d57a199bf76b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/45608b2a-997e-447b-b3f3-d57a199bf76b?source=api-prod","cve":"CVE-2026-112865","affectedVersions":"<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/4809d513-69e8-4572-9549-9dba9f40cb80/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.75 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"4809d513-69e8-4572-9549-9dba9f40cb80"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4809d513-69e8-4572-9549-9dba9f40cb80?source=api-prod","cve":"CVE-2022-47175","affectedVersions":"<=1.3.75","severity":"medium"},{"advisoryId":"WPSECADV/WF/4a7ef5a0-f6c8-41e1-bb3b-119a682be69f/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"4a7ef5a0-f6c8-41e1-bb3b-119a682be69f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a7ef5a0-f6c8-41e1-bb3b-119a682be69f?source=api-prod","cve":"CVE-2024-10798","affectedVersions":"<=1.7.1003","severity":"medium"},{"advisoryId":"WPSECADV/WF/4cad9170-0121-45b0-a1a5-7519be0a381e/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1066 - Unauthenticated Arbitrary HTML Injection in Notification Emails\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"4cad9170-0121-45b0-a1a5-7519be0a381e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4cad9170-0121-45b0-a1a5-7519be0a381e?source=api-prod","cve":"CVE-2026-13407","affectedVersions":"<=1.7.1066","severity":"high"},{"advisoryId":"WPSECADV/WF/4d565196-592d-415c-b37c-e54456aa9ed8/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-31 17:22:35","sources":[{"name":"Wordfence","remoteId":"4d565196-592d-415c-b37c-e54456aa9ed8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d565196-592d-415c-b37c-e54456aa9ed8?source=api-prod","cve":"CVE-2024-4342","affectedVersions":"<=1.3.975","severity":"medium"},{"advisoryId":"WPSECADV/WF/50518a54-16d8-4467-beca-a6b8196ed9b9/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1006 - Authenticated (Admin+) Server Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"50518a54-16d8-4467-beca-a6b8196ed9b9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50518a54-16d8-4467-beca-a6b8196ed9b9?source=api-prod","cve":"CVE-2025-26990","affectedVersions":"<=1.7.1006","severity":"medium"},{"advisoryId":"WPSECADV/WF/5122800d-f274-4129-84d4-02380269502c/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"5122800d-f274-4129-84d4-02380269502c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5122800d-f274-4129-84d4-02380269502c?source=api-prod","cve":"CVE-2024-3887","affectedVersions":"<=1.3.974","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/royal-elementor-addons","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":">=1.3,<=1.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/55db7d81-7ffb-49da-b64e-23e892bddc57/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"55db7d81-7ffb-49da-b64e-23e892bddc57"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/55db7d81-7ffb-49da-b64e-23e892bddc57?source=api-prod","cve":"CVE-2022-4707","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/55f7e39b-e7a5-462b-b1e4-c3d92038f17e/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"55f7e39b-e7a5-462b-b1e4-c3d92038f17e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/55f7e39b-e7a5-462b-b1e4-c3d92038f17e?source=api-prod","cve":"CVE-2022-4701","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/5666e2b7-acb3-4abb-ac2a-1575206435cf/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"5666e2b7-acb3-4abb-ac2a-1575206435cf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5666e2b7-acb3-4abb-ac2a-1575206435cf?source=api-prod","cve":"CVE-2025-1455","affectedVersions":"<=1.7.1012","severity":"medium"},{"advisoryId":"WPSECADV/WF/57bf222b-5f49-46e2-be84-3e6444807096/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"57bf222b-5f49-46e2-be84-3e6444807096"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57bf222b-5f49-46e2-be84-3e6444807096?source=api-prod","cve":"CVE-2024-4489","affectedVersions":"<=1.3.976","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ccece54-18fa-42e4-ba1a-d0879b73d66d/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ccece54-18fa-42e4-ba1a-d0879b73d66d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ccece54-18fa-42e4-ba1a-d0879b73d66d?source=api-prod","cve":"CVE-2024-8482","affectedVersions":"<=1.3.986","severity":"medium"},{"advisoryId":"WPSECADV/WF/5eab79e6-cb47-4fe7-993a-e833bd6689f8/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"5eab79e6-cb47-4fe7-993a-e833bd6689f8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5eab79e6-cb47-4fe7-993a-e833bd6689f8?source=api-prod","cve":"CVE-2026-17585","affectedVersions":"<=1.7.1066","severity":"medium"},{"advisoryId":"WPSECADV/WF/5ee7b4d8-c397-41f6-981f-9a010e4ab2f1/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"5ee7b4d8-c397-41f6-981f-9a010e4ab2f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5ee7b4d8-c397-41f6-981f-9a010e4ab2f1?source=api-prod","cve":"CVE-2024-12120","affectedVersions":"<=1.7.1017","severity":"medium"},{"advisoryId":"WPSECADV/WF/62a5c796-1c14-4cb1-9f21-340b40e418df/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"62a5c796-1c14-4cb1-9f21-340b40e418df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/62a5c796-1c14-4cb1-9f21-340b40e418df?source=api-prod","cve":"CVE-2022-4703","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/64cce528-0ad0-45ec-a8f6-e8791b0bece0/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"64cce528-0ad0-45ec-a8f6-e8791b0bece0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64cce528-0ad0-45ec-a8f6-e8791b0bece0?source=api-prod","cve":"CVE-2022-4704","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/68c6e428-b9cf-442f-a896-a8ceb4b9be0e/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"68c6e428-b9cf-442f-a896-a8ceb4b9be0e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/68c6e428-b9cf-442f-a896-a8ceb4b9be0e?source=api-prod","cve":"CVE-2025-1456","affectedVersions":"<=1.7.1012","severity":"medium"},{"advisoryId":"WPSECADV/WF/6aa3d312-485a-4a93-a075-fa7152395f11/royal-elementor-addons","title":"Royal Elementor Addons <=1.3.55 - Authenticated (Subscriber+) Arbitrary Post Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"6aa3d312-485a-4a93-a075-fa7152395f11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6aa3d312-485a-4a93-a075-fa7152395f11?source=api-prod","cve":"CVE-2022-4102","affectedVersions":"<=1.3.55","severity":"high"},{"advisoryId":"WPSECADV/WF/6ab93ea4-4d15-43cb-be70-6eb4921194d1/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Unauthenticated Like Count Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"6ab93ea4-4d15-43cb-be70-6eb4921194d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ab93ea4-4d15-43cb-be70-6eb4921194d1?source=api-prod","cve":"CVE-2026-13404","affectedVersions":"<1.7.1066","severity":"medium"},{"advisoryId":"WPSECADV/WF/6bc6a436-6df3-4eaf-a16b-d8b3c3ca7d87/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"6bc6a436-6df3-4eaf-a16b-d8b3c3ca7d87"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6bc6a436-6df3-4eaf-a16b-d8b3c3ca7d87?source=api-prod","cve":"CVE-2025-1441","affectedVersions":"<=1.7.1007","severity":"medium"},{"advisoryId":"WPSECADV/WF/70582781-9de5-4124-bde4-d3d26724e9b3/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"70582781-9de5-4124-bde4-d3d26724e9b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/70582781-9de5-4124-bde4-d3d26724e9b3?source=api-prod","cve":"CVE-2024-2798","affectedVersions":"<=1.3.971","severity":"medium"},{"advisoryId":"WPSECADV/WF/7a04705d-cd17-4b4b-b04d-de55d6479dab/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"7a04705d-cd17-4b4b-b04d-de55d6479dab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a04705d-cd17-4b4b-b04d-de55d6479dab?source=api-prod","cve":"CVE-2024-1567","affectedVersions":"<=1.3.94","severity":"high"},{"advisoryId":"WPSECADV/WF/7f197721-d7d6-49db-8cdc-0162c0c2960b/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"7f197721-d7d6-49db-8cdc-0162c0c2960b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f197721-d7d6-49db-8cdc-0162c0c2960b?source=api-prod","cve":"CVE-2026-27421","affectedVersions":"<1.7.1053","severity":"medium"},{"advisoryId":"WPSECADV/WF/83a0150d-a9fa-4cc2-8fe8-a429747a9964/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"83a0150d-a9fa-4cc2-8fe8-a429747a9964"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83a0150d-a9fa-4cc2-8fe8-a429747a9964?source=api-prod","cve":"CVE-2024-5818","affectedVersions":"<=1.3.980","severity":"medium"},{"advisoryId":"WPSECADV/WF/83ea2ec3-5d5b-44ea-83e6-41c4fa6e2e5f/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via  Advanced Accordion Title Tags\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"83ea2ec3-5d5b-44ea-83e6-41c4fa6e2e5f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83ea2ec3-5d5b-44ea-83e6-41c4fa6e2e5f?source=api-prod","cve":"CVE-2024-3889","affectedVersions":"<=1.3.971","severity":"medium"},{"advisoryId":"WPSECADV/WF/8619c999-5cf7-4888-bdb2-815238411303/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"8619c999-5cf7-4888-bdb2-815238411303"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8619c999-5cf7-4888-bdb2-815238411303?source=api-prod","cve":"CVE-2024-1500","affectedVersions":"<=1.3.91","severity":"medium"},{"advisoryId":"WPSECADV/WF/86c9bcf1-c69e-47ca-b74b-8ce6157f520b/royal-elementor-addons","title":"Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"86c9bcf1-c69e-47ca-b74b-8ce6157f520b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86c9bcf1-c69e-47ca-b74b-8ce6157f520b?source=api-prod","cve":"CVE-2023-3709","affectedVersions":"<=1.3.70","severity":"medium"},{"advisoryId":"WPSECADV/WF/8810200b-e026-4258-86aa-5c1a200fcf9b/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-15 16:21:37","sources":[{"name":"Wordfence","remoteId":"8810200b-e026-4258-86aa-5c1a200fcf9b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8810200b-e026-4258-86aa-5c1a200fcf9b?source=api-prod","cve":"CVE-2026-17123","affectedVersions":"<=1.7.1064","severity":"high"},{"advisoryId":"WPSECADV/WF/8ec27c65-5104-4636-bb95-f9832a3f4fff/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:02:00","sources":[{"name":"Wordfence","remoteId":"8ec27c65-5104-4636-bb95-f9832a3f4fff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ec27c65-5104-4636-bb95-f9832a3f4fff?source=api-prod","cve":"CVE-2026-97254","affectedVersions":"<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/93c9e453-f67c-4c4a-9873-1f00c8d9168b/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.3.81 - 1.7.1069 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"93c9e453-f67c-4c4a-9873-1f00c8d9168b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/93c9e453-f67c-4c4a-9873-1f00c8d9168b?source=api-prod","cve":"CVE-2026-107100","affectedVersions":">=1.3.81,<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/9744055a-b199-4945-afcc-4f5b85f5f1e8/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"9744055a-b199-4945-afcc-4f5b85f5f1e8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9744055a-b199-4945-afcc-4f5b85f5f1e8?source=api-prod","cve":"CVE-2026-6229","affectedVersions":"<=1.7.1057","severity":"high"},{"advisoryId":"WPSECADV/WF/9e860c60-b330-4a6c-8d15-947451af62fc/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1001 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"9e860c60-b330-4a6c-8d15-947451af62fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9e860c60-b330-4a6c-8d15-947451af62fc?source=api-prod","cve":"CVE-2024-56226","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/a4178271-c09e-4094-a616-5a00d28f39a3/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"a4178271-c09e-4094-a616-5a00d28f39a3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a4178271-c09e-4094-a616-5a00d28f39a3?source=api-prod","cve":"CVE-2024-0515","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/a4b353bf-f9be-465a-8723-9ea721b5baab/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"a4b353bf-f9be-465a-8723-9ea721b5baab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a4b353bf-f9be-465a-8723-9ea721b5baab?source=api-prod","cve":"CVE-2024-56062","affectedVersions":"<=1.3.987","severity":"medium"},{"advisoryId":"WPSECADV/WF/a720b38c-37f0-4edf-9868-de3a105551ee/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"a720b38c-37f0-4edf-9868-de3a105551ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a720b38c-37f0-4edf-9868-de3a105551ee?source=api-prod","cve":"CVE-2025-39361","affectedVersions":"<=1.7.1017","severity":"medium"},{"advisoryId":"WPSECADV/WF/a8e34c05-7431-4acd-91f3-aab5e66f61ad/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-13 19:52:46","sources":[{"name":"Wordfence","remoteId":"a8e34c05-7431-4acd-91f3-aab5e66f61ad"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a8e34c05-7431-4acd-91f3-aab5e66f61ad?source=api-prod","cve":"CVE-2025-0393","affectedVersions":"<=1.7.1006","severity":"medium"},{"advisoryId":"WPSECADV/WF/a8e39f0b-eb4c-4568-9f5a-60a0dc3eb6ba/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a8e39f0b-eb4c-4568-9f5a-60a0dc3eb6ba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a8e39f0b-eb4c-4568-9f5a-60a0dc3eb6ba?source=api-prod","cve":"CVE-2024-9668","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9d95af5-96da-4259-98c6-e2c4c574a896/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9d95af5-96da-4259-98c6-e2c4c574a896"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9d95af5-96da-4259-98c6-e2c4c574a896?source=api-prod","cve":"CVE-2023-5360","affectedVersions":"<=1.3.78","severity":"critical"},{"advisoryId":"WPSECADV/WF/ac6c6ce4-9944-4c8e-89aa-6a2e870ef205/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac6c6ce4-9944-4c8e-89aa-6a2e870ef205"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac6c6ce4-9944-4c8e-89aa-6a2e870ef205?source=api-prod","cve":"CVE-2022-4710","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/acaa3142-2bbc-43d3-8ecc-05e8edb931ec/royal-elementor-addons","title":"Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"acaa3142-2bbc-43d3-8ecc-05e8edb931ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/acaa3142-2bbc-43d3-8ecc-05e8edb931ec?source=api-prod","cve":"CVE-2025-5092","affectedVersions":"<=1.7.1031","severity":"medium"},{"advisoryId":"WPSECADV/WF/b0955689-43a0-442c-974b-5db5e4171f6a/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0955689-43a0-442c-974b-5db5e4171f6a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0955689-43a0-442c-974b-5db5e4171f6a?source=api-prod","cve":"CVE-2024-0514","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/b2ff2954-f494-4cd7-9f29-ee0e8551e339/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b2ff2954-f494-4cd7-9f29-ee0e8551e339"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2ff2954-f494-4cd7-9f29-ee0e8551e339?source=api-prod","cve":"CVE-2024-0512","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/b3e12653-ddfe-4e02-9d9e-0263b9f71def/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"b3e12653-ddfe-4e02-9d9e-0263b9f71def"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b3e12653-ddfe-4e02-9d9e-0263b9f71def?source=api-prod","cve":"CVE-2022-4708","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/b957eb0d-882d-4646-ad84-9c64f957be14/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"b957eb0d-882d-4646-ad84-9c64f957be14"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b957eb0d-882d-4646-ad84-9c64f957be14?source=api-prod","cve":"CVE-2025-3813","affectedVersions":"<=1.7.1020","severity":"medium"},{"advisoryId":"WPSECADV/WF/ba7b8fe5-aa49-4a70-89c9-1b95a30b1142/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-23 16:35:20","sources":[{"name":"Wordfence","remoteId":"ba7b8fe5-aa49-4a70-89c9-1b95a30b1142"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ba7b8fe5-aa49-4a70-89c9-1b95a30b1142?source=api-prod","cve":"CVE-2026-5428","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/bc2e883b-fb91-425c-a779-89a34eed2ba8/royal-elementor-addons","title":"Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"bc2e883b-fb91-425c-a779-89a34eed2ba8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc2e883b-fb91-425c-a779-89a34eed2ba8?source=api-prod","cve":"CVE-2022-4103","affectedVersions":"<=1.3.55","severity":"medium"},{"advisoryId":"WPSECADV/WF/bd90b85e-22a9-4c08-b2cf-4f75406e7ca3/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd90b85e-22a9-4c08-b2cf-4f75406e7ca3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd90b85e-22a9-4c08-b2cf-4f75406e7ca3?source=api-prod","cve":"CVE-2024-9682","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/bdd4022f-b038-4351-9798-77e7c24f1173/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.977 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"bdd4022f-b038-4351-9798-77e7c24f1173"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdd4022f-b038-4351-9798-77e7c24f1173?source=api-prod","cve":"CVE-2025-39543","affectedVersions":"<=1.3.977","severity":"medium"},{"advisoryId":"WPSECADV/WF/be6db702-43bc-4d1f-a222-d323c70c6bb3/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1052 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-02-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"be6db702-43bc-4d1f-a222-d323c70c6bb3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be6db702-43bc-4d1f-a222-d323c70c6bb3?source=api-prod","cve":"CVE-2026-28135","affectedVersions":"<=1.7.1052","severity":"medium"},{"advisoryId":"WPSECADV/WF/c23e9810-40ea-43e2-9292-f05f300a7ddf/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"c23e9810-40ea-43e2-9292-f05f300a7ddf"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c23e9810-40ea-43e2-9292-f05f300a7ddf?source=api-prod","cve":"CVE-2022-4711","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3dfb0b7-5d9f-492b-9a1a-d4445d39c00c/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3dfb0b7-5d9f-492b-9a1a-d4445d39c00c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3dfb0b7-5d9f-492b-9a1a-d4445d39c00c?source=api-prod","cve":"CVE-2024-7417","affectedVersions":"<=1.3.986","severity":"medium"},{"advisoryId":"WPSECADV/WF/c3e47d14-4c00-4b10-9e4d-7f1d7946a2b4/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.93 - Authenticated (Contributor+) Stored Cross-Site Scriting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"c3e47d14-4c00-4b10-9e4d-7f1d7946a2b4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3e47d14-4c00-4b10-9e4d-7f1d7946a2b4?source=api-prod","cve":"CVE-2024-31236","affectedVersions":"<=1.3.93","severity":"medium"},{"advisoryId":"WPSECADV/WF/c4192a7f-b962-46f9-a524-7271ed6f4917/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-16 15:17:51","sources":[{"name":"Wordfence","remoteId":"c4192a7f-b962-46f9-a524-7271ed6f4917"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c4192a7f-b962-46f9-a524-7271ed6f4917?source=api-prod","cve":"CVE-2026-2373","affectedVersions":"<=1.7.1049","severity":"medium"},{"advisoryId":"WPSECADV/WF/c91a14d3-bc41-4490-888c-486ad2994095/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-04 14:32:14","sources":[{"name":"Wordfence","remoteId":"c91a14d3-bc41-4490-888c-486ad2994095"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c91a14d3-bc41-4490-888c-486ad2994095?source=api-prod","cve":"CVE-2026-4803","affectedVersions":"<=1.7.1056","severity":"high"},{"advisoryId":"WPSECADV/WF/c96ab066-9973-4eeb-b256-af9096399679/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.3.68 - 1.7.1069 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"c96ab066-9973-4eeb-b256-af9096399679"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c96ab066-9973-4eeb-b256-af9096399679?source=api-prod","cve":"CVE-2026-106647","affectedVersions":">=1.3.68,<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb0ac434-7e85-44d4-b21e-df462f63cd9c/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb0ac434-7e85-44d4-b21e-df462f63cd9c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb0ac434-7e85-44d4-b21e-df462f63cd9c?source=api-prod","cve":"CVE-2024-4488","affectedVersions":"<=1.3.976","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb47b6cc-87e4-4d29-bbc7-6d7552bc3943/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"cb47b6cc-87e4-4d29-bbc7-6d7552bc3943"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb47b6cc-87e4-4d29-bbc7-6d7552bc3943?source=api-prod","cve":"CVE-2022-4702","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/cca7bb88-4a2c-4406-8610-15ce6e77c31f/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-31 17:38:07","sources":[{"name":"Wordfence","remoteId":"cca7bb88-4a2c-4406-8610-15ce6e77c31f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cca7bb88-4a2c-4406-8610-15ce6e77c31f?source=api-prod","cve":"CVE-2024-4087","affectedVersions":"<=1.3.975","severity":"medium"},{"advisoryId":"WPSECADV/WF/cdc37da4-9de6-467b-a168-e3fa29baa06b/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1036 - Missing Authorization to Unauthenticated Media File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdc37da4-9de6-467b-a168-e3fa29baa06b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdc37da4-9de6-467b-a168-e3fa29baa06b?source=api-prod","cve":"CVE-2025-11363","affectedVersions":"<=1.7.1036","severity":"medium"},{"advisoryId":"WPSECADV/WF/cdd464ad-24bc-4922-8bfa-ac42fbe60b52/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdd464ad-24bc-4922-8bfa-ac42fbe60b52"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdd464ad-24bc-4922-8bfa-ac42fbe60b52?source=api-prod","cve":"CVE-2022-4700","affectedVersions":"<=1.3.59","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2031289-eaf3-4a1b-8771-769c08d99ca3/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2031289-eaf3-4a1b-8771-769c08d99ca3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2031289-eaf3-4a1b-8771-769c08d99ca3?source=api-prod","affectedVersions":"<=1.3.55","severity":"high"},{"advisoryId":"WPSECADV/WF/d3457b87-c860-4cf2-ac3d-2c6521b629ea/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3457b87-c860-4cf2-ac3d-2c6521b629ea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3457b87-c860-4cf2-ac3d-2c6521b629ea?source=api-prod","cve":"CVE-2024-0516","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/d384e03a-ad2d-4399-9c82-a0ff70ac90f7/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1069 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 10:03:00","sources":[{"name":"Wordfence","remoteId":"d384e03a-ad2d-4399-9c82-a0ff70ac90f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d384e03a-ad2d-4399-9c82-a0ff70ac90f7?source=api-prod","cve":"CVE-2026-97255","affectedVersions":"<=1.7.1069","severity":"medium"},{"advisoryId":"WPSECADV/WF/d7b2cb52-1cae-4a86-a089-21fa9be5adc5/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1070 - Unauthenticated Unauthorized Email Relay\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"d7b2cb52-1cae-4a86-a089-21fa9be5adc5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7b2cb52-1cae-4a86-a089-21fa9be5adc5?source=api-prod","cve":"CVE-2026-106648","affectedVersions":"<1.7.1070","severity":"medium"},{"advisoryId":"WPSECADV/WF/d7ce047b-3cd3-475b-9a9f-38d15174e7e5/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 16:21:26","sources":[{"name":"Wordfence","remoteId":"d7ce047b-3cd3-475b-9a9f-38d15174e7e5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7ce047b-3cd3-475b-9a9f-38d15174e7e5?source=api-prod","cve":"CVE-2026-8118","affectedVersions":">=1.7.1058,<=1.7.1059","severity":"medium"},{"advisoryId":"WPSECADV/WF/dc8bef03-51e0-4448-bddd-85300104e875/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-02-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"dc8bef03-51e0-4448-bddd-85300104e875"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dc8bef03-51e0-4448-bddd-85300104e875?source=api-prod","cve":"CVE-2024-0511","affectedVersions":"<=1.3.87","severity":"medium"},{"advisoryId":"WPSECADV/WF/df06f6c7-98b8-4d17-aa53-c5f13ada7c62/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"df06f6c7-98b8-4d17-aa53-c5f13ada7c62"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/df06f6c7-98b8-4d17-aa53-c5f13ada7c62?source=api-prod","cve":"CVE-2026-13406","affectedVersions":"<1.7.1066","severity":"medium"},{"advisoryId":"WPSECADV/WF/dfd45df4-439a-4e46-aba0-a2831c665ea6/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"dfd45df4-439a-4e46-aba0-a2831c665ea6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dfd45df4-439a-4e46-aba0-a2831c665ea6?source=api-prod","cve":"CVE-2026-19226","affectedVersions":"<1.7.1066","severity":"medium"},{"advisoryId":"WPSECADV/WF/ead108c4-ac09-42ea-95c5-e95dc514f1cb/royal-elementor-addons","title":"Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-18 15:19:11","sources":[{"name":"Wordfence","remoteId":"ead108c4-ac09-42ea-95c5-e95dc514f1cb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ead108c4-ac09-42ea-95c5-e95dc514f1cb?source=api-prod","cve":"CVE-2025-6251","affectedVersions":"<=1.7.1036","severity":"medium"},{"advisoryId":"WPSECADV/WF/ec33a828-6387-42d3-b0ab-a2461ff1a4c4/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1064 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec33a828-6387-42d3-b0ab-a2461ff1a4c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec33a828-6387-42d3-b0ab-a2461ff1a4c4?source=api-prod","cve":"CVE-2026-19217","affectedVersions":"<=1.7.1064","severity":"medium"},{"advisoryId":"WPSECADV/WF/ed86e902-7637-481d-9005-7025187ba200/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-13 19:53:33","sources":[{"name":"Wordfence","remoteId":"ed86e902-7637-481d-9005-7025187ba200"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed86e902-7637-481d-9005-7025187ba200?source=api-prod","cve":"CVE-2026-6504","affectedVersions":"<=1.7.1058","severity":"medium"},{"advisoryId":"WPSECADV/WF/ee96d8c5-baf0-4c5c-9ace-e88bbb95ee0a/royal-elementor-addons","title":"Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-04 14:53:29","sources":[{"name":"Wordfence","remoteId":"ee96d8c5-baf0-4c5c-9ace-e88bbb95ee0a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee96d8c5-baf0-4c5c-9ace-e88bbb95ee0a?source=api-prod","cve":"CVE-2026-5159","affectedVersions":"<=1.7.1056","severity":"medium"},{"advisoryId":"WPSECADV/WF/f1dafafe-91bb-4cd6-93f3-e67538389697/royal-elementor-addons","title":"Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1068 - Authenticated (Contributor+) Remote Code Execution\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 07:22:41","sources":[{"name":"Wordfence","remoteId":"f1dafafe-91bb-4cd6-93f3-e67538389697"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f1dafafe-91bb-4cd6-93f3-e67538389697?source=api-prod","cve":"CVE-2026-111851","affectedVersions":"<=1.7.1068","severity":"high"},{"advisoryId":"WPSECADV/WF/f7f9b1ef-2efc-4d88-bff8-e0dd711b85ab/royal-elementor-addons","title":"Royal Elementor Addons <= 1.7.1001 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"f7f9b1ef-2efc-4d88-bff8-e0dd711b85ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7f9b1ef-2efc-4d88-bff8-e0dd711b85ab?source=api-prod","cve":"CVE-2024-56227","affectedVersions":"<=1.7.1001","severity":"medium"},{"advisoryId":"WPSECADV/WF/fa530112-a7cd-4c54-aa87-9e7337d01557/royal-elementor-addons","title":"Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"fa530112-a7cd-4c54-aa87-9e7337d01557"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fa530112-a7cd-4c54-aa87-9e7337d01557?source=api-prod","cve":"CVE-2022-4709","affectedVersions":"<=1.3.59","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_726f79616c2d6d6370811c9dc5_gen.json b/internal/data/assets/plugin_726f79616c2d6d6370811c9dc5_gen.json
index 9078439c..83301a84 100644
--- a/internal/data/assets/plugin_726f79616c2d6d6370811c9dc5_gen.json
+++ b/internal/data/assets/plugin_726f79616c2d6d6370811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/61279ddc-92cc-4181-ba23-7de1464a9dec/royal-mcp","title":"Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini <= 1.4.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"61279ddc-92cc-4181-ba23-7de1464a9dec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61279ddc-92cc-4181-ba23-7de1464a9dec?source=api-prod","cve":"CVE-2026-40775","affectedVersions":"<=1.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/bfa7ae6c-6bc8-4787-b95b-c12243d0a45c/royal-mcp","title":"Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini <= 1.4.25 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"bfa7ae6c-6bc8-4787-b95b-c12243d0a45c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bfa7ae6c-6bc8-4787-b95b-c12243d0a45c?source=api-prod","cve":"CVE-2026-54842","affectedVersions":"<=1.4.25","severity":"medium"},{"advisoryId":"WPSECADV/WF/eb8af5d6-8b98-4a87-a588-0af74af2cd50/royal-mcp","title":"Royal MCP <= 1.4.25 - Missing Authorization to Unauthenticated MCP Tool Use\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb8af5d6-8b98-4a87-a588-0af74af2cd50"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb8af5d6-8b98-4a87-a588-0af74af2cd50?source=api-prod","cve":"CVE-2026-10750","affectedVersions":"<=1.4.25","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0a2fd29f-c603-40f2-85e1-6c6885f40f56/royal-mcp","title":"Royal MCP – Secure AI Connector for Claude, ChatGPT & any LLM via MCP < 1.5.10 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"0a2fd29f-c603-40f2-85e1-6c6885f40f56"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0a2fd29f-c603-40f2-85e1-6c6885f40f56?source=api-prod","cve":"CVE-2026-111961","affectedVersions":"<1.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/61279ddc-92cc-4181-ba23-7de1464a9dec/royal-mcp","title":"Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini <= 1.4.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"61279ddc-92cc-4181-ba23-7de1464a9dec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61279ddc-92cc-4181-ba23-7de1464a9dec?source=api-prod","cve":"CVE-2026-40775","affectedVersions":"<=1.4.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/a1deef30-a6c3-466c-8eaa-93f26adc64bc/royal-mcp","title":"Royal MCP – Secure AI Connector for Claude, ChatGPT & any LLM via MCP 1.4.38 - 1.5.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"a1deef30-a6c3-466c-8eaa-93f26adc64bc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a1deef30-a6c3-466c-8eaa-93f26adc64bc?source=api-prod","cve":"CVE-2026-111960","affectedVersions":">=1.4.38,<=1.5.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/bfa7ae6c-6bc8-4787-b95b-c12243d0a45c/royal-mcp","title":"Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini <= 1.4.25 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"bfa7ae6c-6bc8-4787-b95b-c12243d0a45c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bfa7ae6c-6bc8-4787-b95b-c12243d0a45c?source=api-prod","cve":"CVE-2026-54842","affectedVersions":"<=1.4.25","severity":"medium"},{"advisoryId":"WPSECADV/WF/d9d2b2ce-c1a9-48b2-b68f-048cb991e31e/royal-mcp","title":"Royal MCP – Secure AI Connector for Claude, ChatGPT & any LLM via MCP < 1.5.7 - Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"d9d2b2ce-c1a9-48b2-b68f-048cb991e31e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d9d2b2ce-c1a9-48b2-b68f-048cb991e31e?source=api-prod","cve":"CVE-2026-111958","affectedVersions":"<1.5.7","severity":"high"},{"advisoryId":"WPSECADV/WF/eb8af5d6-8b98-4a87-a588-0af74af2cd50/royal-mcp","title":"Royal MCP <= 1.4.25 - Missing Authorization to Unauthenticated MCP Tool Use\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb8af5d6-8b98-4a87-a588-0af74af2cd50"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb8af5d6-8b98-4a87-a588-0af74af2cd50?source=api-prod","cve":"CVE-2026-10750","affectedVersions":"<=1.4.25","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_736368656d612d6170702d737472756374757265642d646174612d666f722d736368656d616f7267811c9dc5_gen.json b/internal/data/assets/plugin_736368656d612d6170702d737472756374757265642d646174612d666f722d736368656d616f7267811c9dc5_gen.json
index 2a27bc8d..803fa266 100644
--- a/internal/data/assets/plugin_736368656d612d6170702d737472756374757265642d646174612d666f722d736368656d616f7267811c9dc5_gen.json
+++ b/internal/data/assets/plugin_736368656d612d6170702d737472756374757265642d646174612d666f722d736368656d616f7267811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/1089ab17-b780-4840-8dcd-c50258513634/schema-app-structured-data-for-schemaorg","title":"Schema App Structured Data <= 2.2.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-23 18:14:16","sources":[{"name":"Wordfence","remoteId":"1089ab17-b780-4840-8dcd-c50258513634"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1089ab17-b780-4840-8dcd-c50258513634?source=api-prod","cve":"CVE-2024-0893","affectedVersions":"<=2.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/254291b3-a30d-44ff-9df4-6ba700a9efc9/schema-app-structured-data-for-schemaorg","title":"Schema App Structured Data <= 2.2.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"254291b3-a30d-44ff-9df4-6ba700a9efc9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/254291b3-a30d-44ff-9df4-6ba700a9efc9?source=api-prod","cve":"CVE-2024-0892","affectedVersions":"<=2.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3de82328-e44f-4488-a2ae-1dd2c3b8a502/schema-app-structured-data-for-schemaorg","title":"Schema App Structured Data <= 1.22.3 - Missing Authorization via page_init\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"3de82328-e44f-4488-a2ae-1dd2c3b8a502"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3de82328-e44f-4488-a2ae-1dd2c3b8a502?source=api-prod","cve":"CVE-2023-44258","affectedVersions":"<=1.22.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/48db673c-f978-45f4-9d7b-eddd81cee62e/schema-app-structured-data-for-schemaorg","title":"Schema App Structured Data <= 2.2.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-11 15:13:07","sources":[{"name":"Wordfence","remoteId":"48db673c-f978-45f4-9d7b-eddd81cee62e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/48db673c-f978-45f4-9d7b-eddd81cee62e?source=api-prod","cve":"CVE-2024-11279","affectedVersions":"<=2.2.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/1089ab17-b780-4840-8dcd-c50258513634/schema-app-structured-data-for-schemaorg","title":"Schema App Structured Data <= 2.2.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-23 18:14:16","sources":[{"name":"Wordfence","remoteId":"1089ab17-b780-4840-8dcd-c50258513634"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1089ab17-b780-4840-8dcd-c50258513634?source=api-prod","cve":"CVE-2024-0893","affectedVersions":"<=2.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/254291b3-a30d-44ff-9df4-6ba700a9efc9/schema-app-structured-data-for-schemaorg","title":"Schema App Structured Data <= 2.2.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"254291b3-a30d-44ff-9df4-6ba700a9efc9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/254291b3-a30d-44ff-9df4-6ba700a9efc9?source=api-prod","cve":"CVE-2024-0892","affectedVersions":"<=2.2.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/3de82328-e44f-4488-a2ae-1dd2c3b8a502/schema-app-structured-data-for-schemaorg","title":"Schema App Structured Data <= 1.22.3 - Missing Authorization via page_init\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"3de82328-e44f-4488-a2ae-1dd2c3b8a502"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3de82328-e44f-4488-a2ae-1dd2c3b8a502?source=api-prod","cve":"CVE-2023-44258","affectedVersions":"<=1.22.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/48db673c-f978-45f4-9d7b-eddd81cee62e/schema-app-structured-data-for-schemaorg","title":"Schema App Structured Data <= 2.2.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-11 15:13:07","sources":[{"name":"Wordfence","remoteId":"48db673c-f978-45f4-9d7b-eddd81cee62e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/48db673c-f978-45f4-9d7b-eddd81cee62e?source=api-prod","cve":"CVE-2024-11279","affectedVersions":"<=2.2.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/7e0a6ba5-6b2a-49b2-8780-df5eb6a5eecd/schema-app-structured-data-for-schemaorg","title":"Schema App Structured Data <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 14:46:32","sources":[{"name":"Wordfence","remoteId":"7e0a6ba5-6b2a-49b2-8780-df5eb6a5eecd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e0a6ba5-6b2a-49b2-8780-df5eb6a5eecd?source=api-prod","cve":"CVE-2026-96666","affectedVersions":"<=2.3.2","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_73656e647072657373811c9dc5_gen.json b/internal/data/assets/plugin_73656e647072657373811c9dc5_gen.json
index a772822b..ee055df2 100644
--- a/internal/data/assets/plugin_73656e647072657373811c9dc5_gen.json
+++ b/internal/data/assets/plugin_73656e647072657373811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2cd6e69b-f927-4cea-a838-5c73f52233a2/sendpress","title":"SendPress Newsletters <= 1.23.11.6 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2cd6e69b-f927-4cea-a838-5c73f52233a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2cd6e69b-f927-4cea-a838-5c73f52233a2?source=api-prod","cve":"CVE-2023-47517","affectedVersions":"<=1.23.11.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/5570b8ef-6fb9-4f9e-be39-d8c615d1abab/sendpress","title":"SendPress Newsletters < 1.2 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"5570b8ef-6fb9-4f9e-be39-d8c615d1abab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5570b8ef-6fb9-4f9e-be39-d8c615d1abab?source=api-prod","affectedVersions":"<=1.1.7.21","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d173077-06c4-4a23-a664-0be8516053ec/sendpress","title":"SendPress Newsletters <= 1.23.11.6 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"5d173077-06c4-4a23-a664-0be8516053ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d173077-06c4-4a23-a664-0be8516053ec?source=api-prod","cve":"CVE-2023-41729","affectedVersions":"<=1.23.11.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/8184fbf0-a798-494b-830d-b98b9ab7d2d0/sendpress","title":"SendPress Newsletters <= 1.26.1.20 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"8184fbf0-a798-494b-830d-b98b9ab7d2d0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8184fbf0-a798-494b-830d-b98b9ab7d2d0?source=api-prod","cve":"CVE-2026-92989","affectedVersions":"<=1.26.1.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/a758fcbe-1be0-4845-9ce9-795f3e5c4bd8/sendpress","title":"SendPress Newsletters < 1.2 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a758fcbe-1be0-4845-9ce9-795f3e5c4bd8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a758fcbe-1be0-4845-9ce9-795f3e5c4bd8?source=api-prod","cve":"CVE-2015-9448","affectedVersions":"<1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/b37e326a-f7bd-43e9-a0b1-d6da2bc5bc45/sendpress","title":"SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 16:53:05","sources":[{"name":"Wordfence","remoteId":"b37e326a-f7bd-43e9-a0b1-d6da2bc5bc45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b37e326a-f7bd-43e9-a0b1-d6da2bc5bc45?source=api-prod","cve":"CVE-2026-39795","affectedVersions":"<=1.26.1.20","severity":"high"},{"advisoryId":"WPSECADV/WF/cbce42a0-29a7-40df-973c-1fe7338f6c94/sendpress","title":"SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"cbce42a0-29a7-40df-973c-1fe7338f6c94"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cbce42a0-29a7-40df-973c-1fe7338f6c94?source=api-prod","cve":"CVE-2023-5660","affectedVersions":"<=1.22.3.31","severity":"medium"},{"advisoryId":"WPSECADV/WF/e2137992-a2f9-4dcf-a880-12811a7c5f26/sendpress","title":"SendPress <= 1.26.1.20 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"e2137992-a2f9-4dcf-a880-12811a7c5f26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e2137992-a2f9-4dcf-a880-12811a7c5f26?source=api-prod","cve":"CVE-2026-92990","affectedVersions":"<=1.26.1.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8d042be-e272-4e2d-93ec-83a0a42ecd51/sendpress","title":"SendPress Newsletters < 1.20.7.13 - Authenticated Stored Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8d042be-e272-4e2d-93ec-83a0a42ecd51"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8d042be-e272-4e2d-93ec-83a0a42ecd51?source=api-prod","affectedVersions":"<1.20.7.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/f03dfbd4-b34a-46ab-b8aa-e37fb0321e8e/sendpress","title":"SendPress Newsletters <= 1.23.11.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"f03dfbd4-b34a-46ab-b8aa-e37fb0321e8e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f03dfbd4-b34a-46ab-b8aa-e37fb0321e8e?source=api-prod","cve":"CVE-2023-35040","affectedVersions":"<=1.23.11.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/fb70339c-0f1a-4acc-af7a-8a0320fdfe71/sendpress","title":"SendPress Newsletters <= 1.23.11.6 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"fb70339c-0f1a-4acc-af7a-8a0320fdfe71"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fb70339c-0f1a-4acc-af7a-8a0320fdfe71?source=api-prod","cve":"CVE-2023-41730","affectedVersions":"<=1.23.11.6","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2cd6e69b-f927-4cea-a838-5c73f52233a2/sendpress","title":"SendPress Newsletters <= 1.23.11.6 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"2cd6e69b-f927-4cea-a838-5c73f52233a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2cd6e69b-f927-4cea-a838-5c73f52233a2?source=api-prod","cve":"CVE-2023-47517","affectedVersions":"<=1.23.11.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/5570b8ef-6fb9-4f9e-be39-d8c615d1abab/sendpress","title":"SendPress Newsletters < 1.2 - Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"5570b8ef-6fb9-4f9e-be39-d8c615d1abab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5570b8ef-6fb9-4f9e-be39-d8c615d1abab?source=api-prod","affectedVersions":"<=1.1.7.21","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d173077-06c4-4a23-a664-0be8516053ec/sendpress","title":"SendPress Newsletters <= 1.23.11.6 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"5d173077-06c4-4a23-a664-0be8516053ec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d173077-06c4-4a23-a664-0be8516053ec?source=api-prod","cve":"CVE-2023-41729","affectedVersions":"<=1.23.11.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6b562f31-6a57-4719-a0e1-6a92affef844/sendpress","title":"SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 14:44:53","sources":[{"name":"Wordfence","remoteId":"6b562f31-6a57-4719-a0e1-6a92affef844"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b562f31-6a57-4719-a0e1-6a92affef844?source=api-prod","cve":"CVE-2026-93855","affectedVersions":"<=1.26.1.20","severity":"high"},{"advisoryId":"WPSECADV/WF/8184fbf0-a798-494b-830d-b98b9ab7d2d0/sendpress","title":"SendPress Newsletters <= 1.26.1.20 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"8184fbf0-a798-494b-830d-b98b9ab7d2d0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8184fbf0-a798-494b-830d-b98b9ab7d2d0?source=api-prod","cve":"CVE-2026-92989","affectedVersions":"<=1.26.1.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/a758fcbe-1be0-4845-9ce9-795f3e5c4bd8/sendpress","title":"SendPress Newsletters < 1.2 - Authenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"a758fcbe-1be0-4845-9ce9-795f3e5c4bd8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a758fcbe-1be0-4845-9ce9-795f3e5c4bd8?source=api-prod","cve":"CVE-2015-9448","affectedVersions":"<1.2","severity":"high"},{"advisoryId":"WPSECADV/WF/b37e326a-f7bd-43e9-a0b1-d6da2bc5bc45/sendpress","title":"SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 16:53:05","sources":[{"name":"Wordfence","remoteId":"b37e326a-f7bd-43e9-a0b1-d6da2bc5bc45"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b37e326a-f7bd-43e9-a0b1-d6da2bc5bc45?source=api-prod","cve":"CVE-2026-39795","affectedVersions":"<=1.26.1.20","severity":"high"},{"advisoryId":"WPSECADV/WF/cbce42a0-29a7-40df-973c-1fe7338f6c94/sendpress","title":"SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"cbce42a0-29a7-40df-973c-1fe7338f6c94"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cbce42a0-29a7-40df-973c-1fe7338f6c94?source=api-prod","cve":"CVE-2023-5660","affectedVersions":"<=1.22.3.31","severity":"medium"},{"advisoryId":"WPSECADV/WF/e2137992-a2f9-4dcf-a880-12811a7c5f26/sendpress","title":"SendPress <= 1.26.1.20 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"e2137992-a2f9-4dcf-a880-12811a7c5f26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e2137992-a2f9-4dcf-a880-12811a7c5f26?source=api-prod","cve":"CVE-2026-92990","affectedVersions":"<=1.26.1.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/e8d042be-e272-4e2d-93ec-83a0a42ecd51/sendpress","title":"SendPress Newsletters < 1.20.7.13 - Authenticated Stored Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"e8d042be-e272-4e2d-93ec-83a0a42ecd51"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8d042be-e272-4e2d-93ec-83a0a42ecd51?source=api-prod","affectedVersions":"<1.20.7.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/f03dfbd4-b34a-46ab-b8aa-e37fb0321e8e/sendpress","title":"SendPress Newsletters <= 1.23.11.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"f03dfbd4-b34a-46ab-b8aa-e37fb0321e8e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f03dfbd4-b34a-46ab-b8aa-e37fb0321e8e?source=api-prod","cve":"CVE-2023-35040","affectedVersions":"<=1.23.11.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/fb70339c-0f1a-4acc-af7a-8a0320fdfe71/sendpress","title":"SendPress Newsletters <= 1.23.11.6 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"fb70339c-0f1a-4acc-af7a-8a0320fdfe71"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fb70339c-0f1a-4acc-af7a-8a0320fdfe71?source=api-prod","cve":"CVE-2023-41730","affectedVersions":"<=1.23.11.6","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_73656e7365692d6c6d73811c9dc5_gen.json b/internal/data/assets/plugin_73656e7365692d6c6d73811c9dc5_gen.json
index 5a868e5b..c43ad201 100644
--- a/internal/data/assets/plugin_73656e7365692d6c6d73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_73656e7365692d6c6d73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/031995fb-48c4-4f56-8b64-d66a47b2fbe9/sensei-lms","title":"Sensei LMS <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"031995fb-48c4-4f56-8b64-d66a47b2fbe9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/031995fb-48c4-4f56-8b64-d66a47b2fbe9?source=api-prod","cve":"CVE-2023-50875","affectedVersions":"<=4.17.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/1df16802-c102-4ff2-b8ff-8a588905d3f7/sensei-lms","title":"Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.1 - Unauthenticated Email Template Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"1df16802-c102-4ff2-b8ff-8a588905d3f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1df16802-c102-4ff2-b8ff-8a588905d3f7?source=api-prod","cve":"CVE-2024-7786","affectedVersions":"<=4.24.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/4559a3e5-e4f3-44b3-826e-acdf3bf5c8ae/sensei-lms","title":"Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.3 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"4559a3e5-e4f3-44b3-826e-acdf3bf5c8ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4559a3e5-e4f3-44b3-826e-acdf3bf5c8ae?source=api-prod","cve":"CVE-2025-0466","affectedVersions":"<=4.24.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/593299e5-d9eb-4240-8413-c0fe5ab79d82/sensei-lms","title":"Sensei LMS <= 4.23.1 & Sensei Pro (WC Paid Courses) <= 4.24.0.1.24.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"593299e5-d9eb-4240-8413-c0fe5ab79d82"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/593299e5-d9eb-4240-8413-c0fe5ab79d82?source=api-prod","cve":"CVE-2024-35686","affectedVersions":"<=4.23.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/84c57acb-e19b-4efa-95a2-82219b20964e/sensei-lms","title":"Sensei LMS <= 4.24.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"84c57acb-e19b-4efa-95a2-82219b20964e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84c57acb-e19b-4efa-95a2-82219b20964e?source=api-prod","cve":"CVE-2025-22740","affectedVersions":"<=4.24.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/989f4c4b-e0d6-4755-89ef-6cf4624f5473/sensei-lms","title":"Sensei LMS <= 4.4.3 - Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"989f4c4b-e0d6-4755-89ef-6cf4624f5473"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/989f4c4b-e0d6-4755-89ef-6cf4624f5473?source=api-prod","cve":"CVE-2022-2034","affectedVersions":"<=4.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3c2cda1-af8c-491c-b376-b39f274fed95/sensei-lms","title":"Sensei LMS – Online Courses, Quizzes, & Learning <= 4.19.2 - Authenticated (Teacher+) User Email Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3c2cda1-af8c-491c-b376-b39f274fed95"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3c2cda1-af8c-491c-b376-b39f274fed95?source=api-prod","cve":"CVE-2024-8009","affectedVersions":"<=4.19.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c1520cce-4ed7-4815-9023-4a994200601a/sensei-lms","title":"Sensei LMS <= 4.5.1 -  Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"c1520cce-4ed7-4815-9023-4a994200601a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c1520cce-4ed7-4815-9023-4a994200601a?source=api-prod","cve":"CVE-2022-2080","affectedVersions":"<=4.5.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/031995fb-48c4-4f56-8b64-d66a47b2fbe9/sensei-lms","title":"Sensei LMS <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"031995fb-48c4-4f56-8b64-d66a47b2fbe9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/031995fb-48c4-4f56-8b64-d66a47b2fbe9?source=api-prod","cve":"CVE-2023-50875","affectedVersions":"<=4.17.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/1df16802-c102-4ff2-b8ff-8a588905d3f7/sensei-lms","title":"Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.1 - Unauthenticated Email Template Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"1df16802-c102-4ff2-b8ff-8a588905d3f7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1df16802-c102-4ff2-b8ff-8a588905d3f7?source=api-prod","cve":"CVE-2024-7786","affectedVersions":"<=4.24.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/28d67772-81cc-4518-a5e3-553153eddd35/sensei-lms","title":"Sensei LMS – Online Courses, Quizzes, & Learning <= 4.26.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"28d67772-81cc-4518-a5e3-553153eddd35"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28d67772-81cc-4518-a5e3-553153eddd35?source=api-prod","cve":"CVE-2026-112328","affectedVersions":"<=4.26.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/4559a3e5-e4f3-44b3-826e-acdf3bf5c8ae/sensei-lms","title":"Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.3 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"4559a3e5-e4f3-44b3-826e-acdf3bf5c8ae"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4559a3e5-e4f3-44b3-826e-acdf3bf5c8ae?source=api-prod","cve":"CVE-2025-0466","affectedVersions":"<=4.24.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/593299e5-d9eb-4240-8413-c0fe5ab79d82/sensei-lms","title":"Sensei LMS <= 4.23.1 & Sensei Pro (WC Paid Courses) <= 4.24.0.1.24.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"593299e5-d9eb-4240-8413-c0fe5ab79d82"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/593299e5-d9eb-4240-8413-c0fe5ab79d82?source=api-prod","cve":"CVE-2024-35686","affectedVersions":"<=4.23.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/84c57acb-e19b-4efa-95a2-82219b20964e/sensei-lms","title":"Sensei LMS <= 4.24.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-03-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"84c57acb-e19b-4efa-95a2-82219b20964e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84c57acb-e19b-4efa-95a2-82219b20964e?source=api-prod","cve":"CVE-2025-22740","affectedVersions":"<=4.24.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/989f4c4b-e0d6-4755-89ef-6cf4624f5473/sensei-lms","title":"Sensei LMS <= 4.4.3 - Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"989f4c4b-e0d6-4755-89ef-6cf4624f5473"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/989f4c4b-e0d6-4755-89ef-6cf4624f5473?source=api-prod","cve":"CVE-2022-2034","affectedVersions":"<=4.4.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3c2cda1-af8c-491c-b376-b39f274fed95/sensei-lms","title":"Sensei LMS – Online Courses, Quizzes, & Learning <= 4.19.2 - Authenticated (Teacher+) User Email Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3c2cda1-af8c-491c-b376-b39f274fed95"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3c2cda1-af8c-491c-b376-b39f274fed95?source=api-prod","cve":"CVE-2024-8009","affectedVersions":"<=4.19.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/c1520cce-4ed7-4815-9023-4a994200601a/sensei-lms","title":"Sensei LMS <= 4.5.1 -  Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-08-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"c1520cce-4ed7-4815-9023-4a994200601a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c1520cce-4ed7-4815-9023-4a994200601a?source=api-prod","cve":"CVE-2022-2080","affectedVersions":"<=4.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/fc025b9a-2ff8-43d8-bfc2-5510fcaf5780/sensei-lms","title":"Sensei LMS – Online Courses, Quizzes, & Learning <= 4.26.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"fc025b9a-2ff8-43d8-bfc2-5510fcaf5780"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fc025b9a-2ff8-43d8-bfc2-5510fcaf5780?source=api-prod","cve":"CVE-2026-112329","affectedVersions":"<=4.26.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_73657175656e7469616c2d6f726465722d6e756d626572732d666f722d776f6f636f6d6d65726365811c9dc5_gen.json b/internal/data/assets/plugin_73657175656e7469616c2d6f726465722d6e756d626572732d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
index a3461caf..9bb20ca7 100644
--- a/internal/data/assets/plugin_73657175656e7469616c2d6f726465722d6e756d626572732d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
+++ b/internal/data/assets/plugin_73657175656e7469616c2d6f726465722d6e756d626572732d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/5fbb41db-5369-465e-80a7-3490df46e07e/sequential-order-numbers-for-woocommerce","title":"Sequential Order Numbers for WooCommerce <= 3.6.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"5fbb41db-5369-465e-80a7-3490df46e07e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5fbb41db-5369-465e-80a7-3490df46e07e?source=api-prod","cve":"CVE-2025-32263","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/b8fc89c0-292d-47b4-90b3-79edf3a9e76d/sequential-order-numbers-for-woocommerce","title":"BeRocket Plugins <= (Various Versions) - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8fc89c0-292d-47b4-90b3-79edf3a9e76d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8fc89c0-292d-47b4-90b3-79edf3a9e76d?source=api-prod","cve":"CVE-2022-45813","affectedVersions":"<=3.5.7.6","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/5fbb41db-5369-465e-80a7-3490df46e07e/sequential-order-numbers-for-woocommerce","title":"Sequential Order Numbers for WooCommerce <= 3.6.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"5fbb41db-5369-465e-80a7-3490df46e07e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5fbb41db-5369-465e-80a7-3490df46e07e?source=api-prod","cve":"CVE-2025-32263","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/942bceac-0587-4e74-bf3e-12d56dbb2186/sequential-order-numbers-for-woocommerce","title":"Sequential Order Numbers for WooCommerce <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array Keys\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 20:35:05","sources":[{"name":"Wordfence","remoteId":"942bceac-0587-4e74-bf3e-12d56dbb2186"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/942bceac-0587-4e74-bf3e-12d56dbb2186?source=api-prod","cve":"CVE-2026-104727","affectedVersions":"<=3.6.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/b8fc89c0-292d-47b4-90b3-79edf3a9e76d/sequential-order-numbers-for-woocommerce","title":"BeRocket Plugins <= (Various Versions) - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"b8fc89c0-292d-47b4-90b3-79edf3a9e76d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8fc89c0-292d-47b4-90b3-79edf3a9e76d?source=api-prod","cve":"CVE-2022-45813","affectedVersions":"<=3.5.7.6","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_73672d63616368657072657373811c9dc5_gen.json b/internal/data/assets/plugin_73672d63616368657072657373811c9dc5_gen.json
index f52c843d..3dfbd19a 100644
--- a/internal/data/assets/plugin_73672d63616368657072657373811c9dc5_gen.json
+++ b/internal/data/assets/plugin_73672d63616368657072657373811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2626ad96-4346-4564-b6bd-0c226bd8dfd4/sg-cachepress","title":"Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 13:17:17","sources":[{"name":"Wordfence","remoteId":"2626ad96-4346-4564-b6bd-0c226bd8dfd4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2626ad96-4346-4564-b6bd-0c226bd8dfd4?source=api-prod","cve":"CVE-2026-15421","affectedVersions":"<=7.8.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/657f3bd7-2cdc-4eb6-ba50-7c7fca468df0/sg-cachepress","title":"SiteGround Optimizer <= 5.0.12 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-03-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"657f3bd7-2cdc-4eb6-ba50-7c7fca468df0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/657f3bd7-2cdc-4eb6-ba50-7c7fca468df0?source=api-prod","cve":"CVE-2019-25217","affectedVersions":"<5.0.13","severity":"critical"},{"advisoryId":"WPSECADV/WF/811253a4-6dc9-45a2-b08f-74069fdcc9ea/sg-cachepress","title":"Speed Optimizer  <= 7.4.6 - Missing Authorization via purge_on_other_events()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"811253a4-6dc9-45a2-b08f-74069fdcc9ea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/811253a4-6dc9-45a2-b08f-74069fdcc9ea?source=api-prod","cve":"CVE-2024-32532","affectedVersions":"<=7.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/b27cd8ca-b892-4f91-990e-c6761cbf2c91/sg-cachepress","title":"Speed Optimizer – The All-In-One Performance-Boosting Plugin < 7.8.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b27cd8ca-b892-4f91-990e-c6761cbf2c91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b27cd8ca-b892-4f91-990e-c6761cbf2c91?source=api-prod","cve":"CVE-2026-111738","affectedVersions":"<7.8.5","severity":"low"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2626ad96-4346-4564-b6bd-0c226bd8dfd4/sg-cachepress","title":"Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-18 13:17:17","sources":[{"name":"Wordfence","remoteId":"2626ad96-4346-4564-b6bd-0c226bd8dfd4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2626ad96-4346-4564-b6bd-0c226bd8dfd4?source=api-prod","cve":"CVE-2026-15421","affectedVersions":"<=7.8.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/657f3bd7-2cdc-4eb6-ba50-7c7fca468df0/sg-cachepress","title":"SiteGround Optimizer <= 5.0.12 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-03-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"657f3bd7-2cdc-4eb6-ba50-7c7fca468df0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/657f3bd7-2cdc-4eb6-ba50-7c7fca468df0?source=api-prod","cve":"CVE-2019-25217","affectedVersions":"<5.0.13","severity":"critical"},{"advisoryId":"WPSECADV/WF/811253a4-6dc9-45a2-b08f-74069fdcc9ea/sg-cachepress","title":"Speed Optimizer  <= 7.4.6 - Missing Authorization via purge_on_other_events()\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"811253a4-6dc9-45a2-b08f-74069fdcc9ea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/811253a4-6dc9-45a2-b08f-74069fdcc9ea?source=api-prod","cve":"CVE-2024-32532","affectedVersions":"<=7.4.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e776008-2b26-49bb-b2f0-9621fd71d176/sg-cachepress","title":"Speed Optimizer – The All-In-One Performance-Boosting Plugin < 7.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e776008-2b26-49bb-b2f0-9621fd71d176"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e776008-2b26-49bb-b2f0-9621fd71d176?source=api-prod","cve":"CVE-2026-111737","affectedVersions":"<7.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/b27cd8ca-b892-4f91-990e-c6761cbf2c91/sg-cachepress","title":"Speed Optimizer – The All-In-One Performance-Boosting Plugin < 7.8.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"b27cd8ca-b892-4f91-990e-c6761cbf2c91"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b27cd8ca-b892-4f91-990e-c6761cbf2c91?source=api-prod","cve":"CVE-2026-111738","affectedVersions":"<7.8.5","severity":"low"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_736974656f726967696e2d70616e656c73811c9dc5_gen.json b/internal/data/assets/plugin_736974656f726967696e2d70616e656c73811c9dc5_gen.json
index 89fb0dbc..e309d3a5 100644
--- a/internal/data/assets/plugin_736974656f726967696e2d70616e656c73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_736974656f726967696e2d70616e656c73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/28e1a11b-5320-41be-bc78-580322e5f407/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-05-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"28e1a11b-5320-41be-bc78-580322e5f407"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28e1a11b-5320-41be-bc78-580322e5f407?source=api-prod","cve":"CVE-2020-13643","affectedVersions":"<2.10.16","severity":"high"},{"advisoryId":"WPSECADV/WF/52116a6f-506f-4eeb-9bcc-19900ef38101/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"52116a6f-506f-4eeb-9bcc-19900ef38101"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52116a6f-506f-4eeb-9bcc-19900ef38101?source=api-prod","cve":"CVE-2024-2202","affectedVersions":"<=2.29.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/645e9b69-9030-45ee-b921-08d09ec76c65/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.36.0 - Authenticated (Editor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 12:13:34","sources":[{"name":"Wordfence","remoteId":"645e9b69-9030-45ee-b921-08d09ec76c65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/645e9b69-9030-45ee-b921-08d09ec76c65?source=api-prod","cve":"CVE-2026-97256","affectedVersions":"<=2.36.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/704eed2c-5ea8-4c31-99c5-8c1b0572997c/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-05-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"704eed2c-5ea8-4c31-99c5-8c1b0572997c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/704eed2c-5ea8-4c31-99c5-8c1b0572997c?source=api-prod","cve":"CVE-2020-13642","affectedVersions":"<=2.10.15","severity":"high"},{"advisoryId":"WPSECADV/WF/7830b3dc-7d20-4516-b4d6-57636ca773e9/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 17:44:35","sources":[{"name":"Wordfence","remoteId":"7830b3dc-7d20-4516-b4d6-57636ca773e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7830b3dc-7d20-4516-b4d6-57636ca773e9?source=api-prod","cve":"CVE-2026-13295","affectedVersions":"<=2.34.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a97f72f6-86f7-45dc-908a-292ba735071d/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"a97f72f6-86f7-45dc-908a-292ba735071d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a97f72f6-86f7-45dc-908a-292ba735071d?source=api-prod","cve":"CVE-2024-4361","affectedVersions":"<=2.29.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/abe8c6b0-b16b-4391-88b4-dca507c973fc/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-13 21:46:56","sources":[{"name":"Wordfence","remoteId":"abe8c6b0-b16b-4391-88b4-dca507c973fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/abe8c6b0-b16b-4391-88b4-dca507c973fc?source=api-prod","cve":"CVE-2024-12240","affectedVersions":"<=2.31.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d10364ed-179d-4506-a6f0-42b03c005242/siteorigin-panels","title":"Page Builder by SiteOrigin < 2.0.5 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-12-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"d10364ed-179d-4506-a6f0-42b03c005242"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d10364ed-179d-4506-a6f0-42b03c005242?source=api-prod","affectedVersions":"<2.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/deeeb78d-1757-44ec-968b-968d919b84f1/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-02 13:14:54","sources":[{"name":"Wordfence","remoteId":"deeeb78d-1757-44ec-968b-968d919b84f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/deeeb78d-1757-44ec-968b-968d919b84f1?source=api-prod","cve":"CVE-2026-2448","affectedVersions":"<=2.33.5","severity":"high"},{"advisoryId":"WPSECADV/WF/e14c12ef-0774-4459-9a2c-9a4b633a0efe/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"e14c12ef-0774-4459-9a2c-9a4b633a0efe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e14c12ef-0774-4459-9a2c-9a4b633a0efe?source=api-prod","cve":"CVE-2025-1459","affectedVersions":"<=2.31.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/28e1a11b-5320-41be-bc78-580322e5f407/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-05-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"28e1a11b-5320-41be-bc78-580322e5f407"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/28e1a11b-5320-41be-bc78-580322e5f407?source=api-prod","cve":"CVE-2020-13643","affectedVersions":"<2.10.16","severity":"high"},{"advisoryId":"WPSECADV/WF/2cbac277-a827-4438-869d-5a6f96d137fc/siteorigin-panels","title":"Page Builder by SiteOrigin < 2.38.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"2cbac277-a827-4438-869d-5a6f96d137fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2cbac277-a827-4438-869d-5a6f96d137fc?source=api-prod","cve":"CVE-2026-110506","affectedVersions":"<2.38.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/52116a6f-506f-4eeb-9bcc-19900ef38101/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"52116a6f-506f-4eeb-9bcc-19900ef38101"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/52116a6f-506f-4eeb-9bcc-19900ef38101?source=api-prod","cve":"CVE-2024-2202","affectedVersions":"<=2.29.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/645e9b69-9030-45ee-b921-08d09ec76c65/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.36.0 - Authenticated (Editor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 12:13:34","sources":[{"name":"Wordfence","remoteId":"645e9b69-9030-45ee-b921-08d09ec76c65"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/645e9b69-9030-45ee-b921-08d09ec76c65?source=api-prod","cve":"CVE-2026-97256","affectedVersions":"<=2.36.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/704eed2c-5ea8-4c31-99c5-8c1b0572997c/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-05-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"704eed2c-5ea8-4c31-99c5-8c1b0572997c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/704eed2c-5ea8-4c31-99c5-8c1b0572997c?source=api-prod","cve":"CVE-2020-13642","affectedVersions":"<=2.10.15","severity":"high"},{"advisoryId":"WPSECADV/WF/7830b3dc-7d20-4516-b4d6-57636ca773e9/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 17:44:35","sources":[{"name":"Wordfence","remoteId":"7830b3dc-7d20-4516-b4d6-57636ca773e9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7830b3dc-7d20-4516-b4d6-57636ca773e9?source=api-prod","cve":"CVE-2026-13295","affectedVersions":"<=2.34.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a97f72f6-86f7-45dc-908a-292ba735071d/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-05-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"a97f72f6-86f7-45dc-908a-292ba735071d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a97f72f6-86f7-45dc-908a-292ba735071d?source=api-prod","cve":"CVE-2024-4361","affectedVersions":"<=2.29.15","severity":"medium"},{"advisoryId":"WPSECADV/WF/abe8c6b0-b16b-4391-88b4-dca507c973fc/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-13 21:46:56","sources":[{"name":"Wordfence","remoteId":"abe8c6b0-b16b-4391-88b4-dca507c973fc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/abe8c6b0-b16b-4391-88b4-dca507c973fc?source=api-prod","cve":"CVE-2024-12240","affectedVersions":"<=2.31.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d10364ed-179d-4506-a6f0-42b03c005242/siteorigin-panels","title":"Page Builder by SiteOrigin < 2.0.5 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-12-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"d10364ed-179d-4506-a6f0-42b03c005242"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d10364ed-179d-4506-a6f0-42b03c005242?source=api-prod","affectedVersions":"<2.0.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/deeeb78d-1757-44ec-968b-968d919b84f1/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-02 13:14:54","sources":[{"name":"Wordfence","remoteId":"deeeb78d-1757-44ec-968b-968d919b84f1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/deeeb78d-1757-44ec-968b-968d919b84f1?source=api-prod","cve":"CVE-2026-2448","affectedVersions":"<=2.33.5","severity":"high"},{"advisoryId":"WPSECADV/WF/e14c12ef-0774-4459-9a2c-9a4b633a0efe/siteorigin-panels","title":"Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"e14c12ef-0774-4459-9a2c-9a4b633a0efe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e14c12ef-0774-4459-9a2c-9a4b633a0efe?source=api-prod","cve":"CVE-2025-1459","affectedVersions":"<=2.31.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/e66c5a82-9647-46b0-ab3f-b2cd4740bb10/siteorigin-panels","title":"Page Builder by SiteOrigin < 2.38.0 - Authenticated (Contributor+) Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"e66c5a82-9647-46b0-ab3f-b2cd4740bb10"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e66c5a82-9647-46b0-ab3f-b2cd4740bb10?source=api-prod","cve":"CVE-2026-110507","affectedVersions":"<2.38.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7369746570726573732d6d756c74696c696e6775616c2d636d73811c9dc5_gen.json b/internal/data/assets/plugin_7369746570726573732d6d756c74696c696e6775616c2d636d73811c9dc5_gen.json
index 272033bf..7f3501e0 100644
--- a/internal/data/assets/plugin_7369746570726573732d6d756c74696c696e6775616c2d636d73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7369746570726573732d6d756c74696c696e6775616c2d636d73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/066b3b77-7888-4037-b443-a3c6fb540cf7/sitepress-multilingual-cms","title":"WPML 2.9.3-3.2.6 - Cross-Site Scripting in Accept-Language Header\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"066b3b77-7888-4037-b443-a3c6fb540cf7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/066b3b77-7888-4037-b443-a3c6fb540cf7?source=api-prod","cve":"CVE-2015-9416","affectedVersions":">=2.9.3,<=3.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/086b51b5-c9f6-4b30-8fa1-4bcc005c66ab/sitepress-multilingual-cms","title":"WPML <= 3.1.9 - SQL Injection via lang Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"086b51b5-c9f6-4b30-8fa1-4bcc005c66ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/086b51b5-c9f6-4b30-8fa1-4bcc005c66ab?source=api-prod","cve":"CVE-2015-2314","affectedVersions":"<=3.1.9","severity":"critical"},{"advisoryId":"WPSECADV/WF/0db3f234-111f-4c79-bb54-1a21e4fedb8c/sitepress-multilingual-cms","title":"WPML < 4.3.7 - Cross-Site Request Forgery Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-03-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"0db3f234-111f-4c79-bb54-1a21e4fedb8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0db3f234-111f-4c79-bb54-1a21e4fedb8c?source=api-prod","cve":"CVE-2020-10568","affectedVersions":"<4.3.7","severity":"high"},{"advisoryId":"WPSECADV/WF/2b2302d9-426c-415b-a7d3-3a9de95d87d1/sitepress-multilingual-cms","title":"WPML <= 4.6.0 - Reflected Cross-Site Scripting via wp_lang\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b2302d9-426c-415b-a7d3-3a9de95d87d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b2302d9-426c-415b-a7d3-3a9de95d87d1?source=api-prod","affectedVersions":"<=4.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/490f5939-a990-4fb7-9515-f8dcee53d75a/sitepress-multilingual-cms","title":"WPML < 3.1.8 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"490f5939-a990-4fb7-9515-f8dcee53d75a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/490f5939-a990-4fb7-9515-f8dcee53d75a?source=api-prod","cve":"CVE-2015-2792","affectedVersions":"<3.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/4ef3d4d1-95ce-4180-bb83-afd402094f04/sitepress-multilingual-cms","title":"WPML <= 4.5.10 - Missing Authorization to Translation Job Status Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"4ef3d4d1-95ce-4180-bb83-afd402094f04"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ef3d4d1-95ce-4180-bb83-afd402094f04?source=api-prod","cve":"CVE-2022-38974","affectedVersions":"<=4.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/69bd850d-79bf-429e-b133-6caefeba7377/sitepress-multilingual-cms","title":"WPML <= 4.5.13 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"69bd850d-79bf-429e-b133-6caefeba7377"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69bd850d-79bf-429e-b133-6caefeba7377?source=api-prod","cve":"CVE-2022-45071","affectedVersions":"<=4.5.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/781b00cd-3af9-432a-876b-bff482106ab0/sitepress-multilingual-cms","title":"WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"781b00cd-3af9-432a-876b-bff482106ab0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/781b00cd-3af9-432a-876b-bff482106ab0?source=api-prod","cve":"CVE-2026-12248","affectedVersions":"<=4.9.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e7e7d78-de2f-4bdf-b04a-373463bd4d9c/sitepress-multilingual-cms","title":"WPML Multilingual CMS <= 4.9.5 -  Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e7e7d78-de2f-4bdf-b04a-373463bd4d9c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e7e7d78-de2f-4bdf-b04a-373463bd4d9c?source=api-prod","cve":"CVE-2026-17509","affectedVersions":"<=4.9.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/92c1bd85-5f81-4bb6-b6af-6cda85b91b9e/sitepress-multilingual-cms","title":"WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-01 17:11:30","sources":[{"name":"Wordfence","remoteId":"92c1bd85-5f81-4bb6-b6af-6cda85b91b9e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92c1bd85-5f81-4bb6-b6af-6cda85b91b9e?source=api-prod","cve":"CVE-2025-3488","affectedVersions":">=3.6.0,<=4.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/acc0cb26-1199-4e71-91a5-340d80fafc24/sitepress-multilingual-cms","title":"WPML  <= 4.5.13 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"acc0cb26-1199-4e71-91a5-340d80fafc24"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/acc0cb26-1199-4e71-91a5-340d80fafc24?source=api-prod","cve":"CVE-2022-45072","affectedVersions":"<=4.5.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/bbdca292-89b6-4e62-bc68-4fdcd57fd504/sitepress-multilingual-cms","title":"WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-10-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"bbdca292-89b6-4e62-bc68-4fdcd57fd504"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bbdca292-89b6-4e62-bc68-4fdcd57fd504?source=api-prod","cve":"CVE-2018-18069","affectedVersions":"<=3.6.3","severity":"high"},{"advisoryId":"WPSECADV/WF/da0c91e5-d9dc-413a-95f6-9e2fc6746ec0/sitepress-multilingual-cms","title":"WPML <= 3.1.9 - Arbitrary Deletion of Content\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"da0c91e5-d9dc-413a-95f6-9e2fc6746ec0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da0c91e5-d9dc-413a-95f6-9e2fc6746ec0?source=api-prod","cve":"CVE-2015-2791","affectedVersions":"<=3.1.9","severity":"high"},{"advisoryId":"WPSECADV/WF/de62020b-5803-4ea7-89a1-24e5a512f2f3/sitepress-multilingual-cms","title":"WPML <= 4.5.10 - Missing Authorization to Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"de62020b-5803-4ea7-89a1-24e5a512f2f3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/de62020b-5803-4ea7-89a1-24e5a512f2f3?source=api-prod","cve":"CVE-2022-38461","affectedVersions":"<=4.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/eb0b9c2b-c536-4697-be4c-7557ba66c2c4/sitepress-multilingual-cms","title":"WPML <= 4.5.10 - Unprotected AJAX Actions\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb0b9c2b-c536-4697-be4c-7557ba66c2c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb0b9c2b-c536-4697-be4c-7557ba66c2c4?source=api-prod","affectedVersions":"<=4.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/f7fc91cc-e529-4362-8269-bf7ee0766e1e/sitepress-multilingual-cms","title":"WPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-21 08:00:14","sources":[{"name":"Wordfence","remoteId":"f7fc91cc-e529-4362-8269-bf7ee0766e1e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7fc91cc-e529-4362-8269-bf7ee0766e1e?source=api-prod","cve":"CVE-2024-6386","affectedVersions":"<=4.6.12","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/066b3b77-7888-4037-b443-a3c6fb540cf7/sitepress-multilingual-cms","title":"WPML 2.9.3-3.2.6 - Cross-Site Scripting in Accept-Language Header\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"066b3b77-7888-4037-b443-a3c6fb540cf7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/066b3b77-7888-4037-b443-a3c6fb540cf7?source=api-prod","cve":"CVE-2015-9416","affectedVersions":">=2.9.3,<=3.2.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/086b51b5-c9f6-4b30-8fa1-4bcc005c66ab/sitepress-multilingual-cms","title":"WPML <= 3.1.9 - SQL Injection via lang Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"086b51b5-c9f6-4b30-8fa1-4bcc005c66ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/086b51b5-c9f6-4b30-8fa1-4bcc005c66ab?source=api-prod","cve":"CVE-2015-2314","affectedVersions":"<=3.1.9","severity":"critical"},{"advisoryId":"WPSECADV/WF/0db3f234-111f-4c79-bb54-1a21e4fedb8c/sitepress-multilingual-cms","title":"WPML < 4.3.7 - Cross-Site Request Forgery Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-03-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"0db3f234-111f-4c79-bb54-1a21e4fedb8c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0db3f234-111f-4c79-bb54-1a21e4fedb8c?source=api-prod","cve":"CVE-2020-10568","affectedVersions":"<4.3.7","severity":"high"},{"advisoryId":"WPSECADV/WF/2b2302d9-426c-415b-a7d3-3a9de95d87d1/sitepress-multilingual-cms","title":"WPML <= 4.6.0 - Reflected Cross-Site Scripting via wp_lang\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-04-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"2b2302d9-426c-415b-a7d3-3a9de95d87d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2b2302d9-426c-415b-a7d3-3a9de95d87d1?source=api-prod","cve":"CVE-2023-54413","affectedVersions":"<=4.6.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/490f5939-a990-4fb7-9515-f8dcee53d75a/sitepress-multilingual-cms","title":"WPML < 3.1.8 - Authorization Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"490f5939-a990-4fb7-9515-f8dcee53d75a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/490f5939-a990-4fb7-9515-f8dcee53d75a?source=api-prod","cve":"CVE-2015-2792","affectedVersions":"<3.1.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/4ef3d4d1-95ce-4180-bb83-afd402094f04/sitepress-multilingual-cms","title":"WPML <= 4.5.10 - Missing Authorization to Translation Job Status Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"4ef3d4d1-95ce-4180-bb83-afd402094f04"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ef3d4d1-95ce-4180-bb83-afd402094f04?source=api-prod","cve":"CVE-2022-38974","affectedVersions":"<=4.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/69bd850d-79bf-429e-b133-6caefeba7377/sitepress-multilingual-cms","title":"WPML <= 4.5.13 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"69bd850d-79bf-429e-b133-6caefeba7377"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69bd850d-79bf-429e-b133-6caefeba7377?source=api-prod","cve":"CVE-2022-45071","affectedVersions":"<=4.5.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/781b00cd-3af9-432a-876b-bff482106ab0/sitepress-multilingual-cms","title":"WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"781b00cd-3af9-432a-876b-bff482106ab0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/781b00cd-3af9-432a-876b-bff482106ab0?source=api-prod","cve":"CVE-2026-12248","affectedVersions":"<=4.9.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/8e7e7d78-de2f-4bdf-b04a-373463bd4d9c/sitepress-multilingual-cms","title":"WPML Multilingual CMS <= 4.9.5 -  Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e7e7d78-de2f-4bdf-b04a-373463bd4d9c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e7e7d78-de2f-4bdf-b04a-373463bd4d9c?source=api-prod","cve":"CVE-2026-17509","affectedVersions":"<=4.9.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/92c1bd85-5f81-4bb6-b6af-6cda85b91b9e/sitepress-multilingual-cms","title":"WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-01 17:11:30","sources":[{"name":"Wordfence","remoteId":"92c1bd85-5f81-4bb6-b6af-6cda85b91b9e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/92c1bd85-5f81-4bb6-b6af-6cda85b91b9e?source=api-prod","cve":"CVE-2025-3488","affectedVersions":">=3.6.0,<=4.7.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/acc0cb26-1199-4e71-91a5-340d80fafc24/sitepress-multilingual-cms","title":"WPML  <= 4.5.13 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"acc0cb26-1199-4e71-91a5-340d80fafc24"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/acc0cb26-1199-4e71-91a5-340d80fafc24?source=api-prod","cve":"CVE-2022-45072","affectedVersions":"<=4.5.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/bbdca292-89b6-4e62-bc68-4fdcd57fd504/sitepress-multilingual-cms","title":"WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2018-10-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"bbdca292-89b6-4e62-bc68-4fdcd57fd504"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bbdca292-89b6-4e62-bc68-4fdcd57fd504?source=api-prod","cve":"CVE-2018-18069","affectedVersions":"<=3.6.3","severity":"high"},{"advisoryId":"WPSECADV/WF/da0c91e5-d9dc-413a-95f6-9e2fc6746ec0/sitepress-multilingual-cms","title":"WPML <= 3.1.9 - Arbitrary Deletion of Content\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-03-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"da0c91e5-d9dc-413a-95f6-9e2fc6746ec0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da0c91e5-d9dc-413a-95f6-9e2fc6746ec0?source=api-prod","cve":"CVE-2015-2791","affectedVersions":"<=3.1.9","severity":"high"},{"advisoryId":"WPSECADV/WF/de62020b-5803-4ea7-89a1-24e5a512f2f3/sitepress-multilingual-cms","title":"WPML <= 4.5.10 - Missing Authorization to Settings Change\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"de62020b-5803-4ea7-89a1-24e5a512f2f3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/de62020b-5803-4ea7-89a1-24e5a512f2f3?source=api-prod","cve":"CVE-2022-38461","affectedVersions":"<=4.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/eb0b9c2b-c536-4697-be4c-7557ba66c2c4/sitepress-multilingual-cms","title":"WPML <= 4.5.10 - Unprotected AJAX Actions\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"eb0b9c2b-c536-4697-be4c-7557ba66c2c4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb0b9c2b-c536-4697-be4c-7557ba66c2c4?source=api-prod","affectedVersions":"<=4.5.10","severity":"medium"},{"advisoryId":"WPSECADV/WF/f7fc91cc-e529-4362-8269-bf7ee0766e1e/sitepress-multilingual-cms","title":"WPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-21 08:00:14","sources":[{"name":"Wordfence","remoteId":"f7fc91cc-e529-4362-8269-bf7ee0766e1e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f7fc91cc-e529-4362-8269-bf7ee0766e1e?source=api-prod","cve":"CVE-2024-6386","affectedVersions":"<=4.6.12","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_736e61702d66696e616e63652d636865636b6f7574811c9dc5_gen.json b/internal/data/assets/plugin_736e61702d66696e616e63652d636865636b6f7574811c9dc5_gen.json
index 322d0cd1..dec1a4da 100644
--- a/internal/data/assets/plugin_736e61702d66696e616e63652d636865636b6f7574811c9dc5_gen.json
+++ b/internal/data/assets/plugin_736e61702d66696e616e63652d636865636b6f7574811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/3d7a4c57-0f3e-4120-a30d-5a2ddb1ec476/snap-finance-checkout","title":"Snap Finance 1.0.8 - 3.11.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d7a4c57-0f3e-4120-a30d-5a2ddb1ec476"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d7a4c57-0f3e-4120-a30d-5a2ddb1ec476?source=api-prod","cve":"CVE-2026-94272","affectedVersions":">=1.0.8,<=3.11.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/54ac57d8-847f-44a7-a21d-4bb35d74996e/snap-finance-checkout","title":"Snap Finance <= 3.11.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"54ac57d8-847f-44a7-a21d-4bb35d74996e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54ac57d8-847f-44a7-a21d-4bb35d74996e?source=api-prod","cve":"CVE-2026-94273","affectedVersions":"<=3.11.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/3d7a4c57-0f3e-4120-a30d-5a2ddb1ec476/snap-finance-checkout","title":"Snap Finance 1.0.8 - 3.11.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d7a4c57-0f3e-4120-a30d-5a2ddb1ec476"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d7a4c57-0f3e-4120-a30d-5a2ddb1ec476?source=api-prod","cve":"CVE-2026-94272","affectedVersions":">=1.0.8,<=3.11.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/54ac57d8-847f-44a7-a21d-4bb35d74996e/snap-finance-checkout","title":"Snap Finance <= 3.11.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"54ac57d8-847f-44a7-a21d-4bb35d74996e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54ac57d8-847f-44a7-a21d-4bb35d74996e?source=api-prod","cve":"CVE-2026-94273","affectedVersions":"<=3.11.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/ef29b7b4-ba21-4ea7-8427-0f843c32d92a/snap-finance-checkout","title":"Snap Finance <= 3.12.0 - Unauthenticated Payment Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"ef29b7b4-ba21-4ea7-8427-0f843c32d92a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ef29b7b4-ba21-4ea7-8427-0f843c32d92a?source=api-prod","cve":"CVE-2026-94273","affectedVersions":"<=3.12.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_736e617073686f74696679811c9dc5_gen.json b/internal/data/assets/plugin_736e617073686f74696679811c9dc5_gen.json
index 195dcfdc..5f64490d 100644
--- a/internal/data/assets/plugin_736e617073686f74696679811c9dc5_gen.json
+++ b/internal/data/assets/plugin_736e617073686f74696679811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2eece6bd-e167-4e09-ab42-f768f2af8677/snapshotify","title":"Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 15:27:44","sources":[{"name":"Wordfence","remoteId":"2eece6bd-e167-4e09-ab42-f768f2af8677"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2eece6bd-e167-4e09-ab42-f768f2af8677?source=api-prod","cve":"CVE-2026-42413","affectedVersions":"<=1.3.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2eece6bd-e167-4e09-ab42-f768f2af8677/snapshotify","title":"Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.6 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-05 15:27:44","sources":[{"name":"Wordfence","remoteId":"2eece6bd-e167-4e09-ab42-f768f2af8677"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2eece6bd-e167-4e09-ab42-f768f2af8677?source=api-prod","cve":"CVE-2026-42413","affectedVersions":"<=1.3.6","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_736f6369616c2d7765622d7375697465811c9dc5_gen.json b/internal/data/assets/plugin_736f6369616c2d7765622d7375697465811c9dc5_gen.json
index 72f52782..46f6f55f 100644
--- a/internal/data/assets/plugin_736f6369616c2d7765622d7375697465811c9dc5_gen.json
+++ b/internal/data/assets/plugin_736f6369616c2d7765622d7375697465811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0ba32415-cd57-4927-a405-27f3960d542d/social-web-suite","title":"Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ba32415-cd57-4927-a405-27f3960d542d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ba32415-cd57-4927-a405-27f3960d542d?source=api-prod","cve":"CVE-2026-88930","affectedVersions":"<=4.1.12","severity":"high"},{"advisoryId":"WPSECADV/WF/78ba132c-b5b4-4999-a0ec-67d17ae2857f/social-web-suite","title":"Social Web Suite – Social Media Auto Post, Social Media Auto Publish <= 4.1.11 - Directory Traversal to Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-02 15:30:20","sources":[{"name":"Wordfence","remoteId":"78ba132c-b5b4-4999-a0ec-67d17ae2857f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78ba132c-b5b4-4999-a0ec-67d17ae2857f?source=api-prod","cve":"CVE-2024-8352","affectedVersions":"<=4.1.11","severity":"high"},{"advisoryId":"WPSECADV/WF/944ba5a2-50fd-4b7c-8044-eec0aff2e20d/social-web-suite","title":"Social Web Suite <= 4.1.12 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"944ba5a2-50fd-4b7c-8044-eec0aff2e20d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/944ba5a2-50fd-4b7c-8044-eec0aff2e20d?source=api-prod","cve":"CVE-2026-88931","affectedVersions":"<=4.1.12","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0ba32415-cd57-4927-a405-27f3960d542d/social-web-suite","title":"Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"0ba32415-cd57-4927-a405-27f3960d542d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ba32415-cd57-4927-a405-27f3960d542d?source=api-prod","cve":"CVE-2026-88930","affectedVersions":"<=4.1.12","severity":"high"},{"advisoryId":"WPSECADV/WF/78ba132c-b5b4-4999-a0ec-67d17ae2857f/social-web-suite","title":"Social Web Suite – Social Media Auto Post, Social Media Auto Publish <= 4.1.11 - Directory Traversal to Arbitrary File Download\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-02 15:30:20","sources":[{"name":"Wordfence","remoteId":"78ba132c-b5b4-4999-a0ec-67d17ae2857f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78ba132c-b5b4-4999-a0ec-67d17ae2857f?source=api-prod","cve":"CVE-2024-8352","affectedVersions":"<=4.1.11","severity":"high"},{"advisoryId":"WPSECADV/WF/7d338b15-ec26-4239-b90a-1ea8d5ba5ce0/social-web-suite","title":"Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection via 'exclude_posts' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 14:44:46","sources":[{"name":"Wordfence","remoteId":"7d338b15-ec26-4239-b90a-1ea8d5ba5ce0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d338b15-ec26-4239-b90a-1ea8d5ba5ce0?source=api-prod","cve":"CVE-2026-93904","affectedVersions":"<=4.1.12","severity":"high"},{"advisoryId":"WPSECADV/WF/944ba5a2-50fd-4b7c-8044-eec0aff2e20d/social-web-suite","title":"Social Web Suite <= 4.1.12 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"944ba5a2-50fd-4b7c-8044-eec0aff2e20d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/944ba5a2-50fd-4b7c-8044-eec0aff2e20d?source=api-prod","cve":"CVE-2026-88931","affectedVersions":"<=4.1.12","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_736f6369616c666974811c9dc5_gen.json b/internal/data/assets/plugin_736f6369616c666974811c9dc5_gen.json
new file mode 100644
index 00000000..4bf4e4de
--- /dev/null
+++ b/internal/data/assets/plugin_736f6369616c666974811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/809fe65f-219c-4d4e-961b-8cd00cab9a13/socialfit","title":"SocialFit <= 1.2.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-07-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"809fe65f-219c-4d4e-961b-8cd00cab9a13"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/809fe65f-219c-4d4e-961b-8cd00cab9a13?source=api-prod","cve":"CVE-2012-20005","affectedVersions":"<=1.2.2","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_73736c2d776972656c6573732d736d732d6e6f74696669636174696f6e811c9dc5_gen.json b/internal/data/assets/plugin_73736c2d776972656c6573732d736d732d6e6f74696669636174696f6e811c9dc5_gen.json
index 8d432a74..3152a6e0 100644
--- a/internal/data/assets/plugin_73736c2d776972656c6573732d736d732d6e6f74696669636174696f6e811c9dc5_gen.json
+++ b/internal/data/assets/plugin_73736c2d776972656c6573732d736d732d6e6f74696669636174696f6e811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/4b800842-f757-4e1c-8c93-ef21f90a11c7/ssl-wireless-sms-notification","title":"SSL Wireless SMS Notification <= 3.5.0 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b800842-f757-4e1c-8c93-ef21f90a11c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b800842-f757-4e1c-8c93-ef21f90a11c7?source=api-prod","cve":"CVE-2024-56284","affectedVersions":"<=3.5.0","severity":"high"},{"advisoryId":"WPSECADV/WF/dd7f3a48-d851-4533-967c-f0aa98bb85d1/ssl-wireless-sms-notification","title":"SSL Wireless SMS Notification <= 3.6.0 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"dd7f3a48-d851-4533-967c-f0aa98bb85d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dd7f3a48-d851-4533-967c-f0aa98bb85d1?source=api-prod","cve":"CVE-2024-56220","affectedVersions":"<=3.6.0","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/4b800842-f757-4e1c-8c93-ef21f90a11c7/ssl-wireless-sms-notification","title":"SSL Wireless SMS Notification <= 3.5.0 - Unauthenticated SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-01-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"4b800842-f757-4e1c-8c93-ef21f90a11c7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4b800842-f757-4e1c-8c93-ef21f90a11c7?source=api-prod","cve":"CVE-2024-56284","affectedVersions":"<=3.5.0","severity":"high"},{"advisoryId":"WPSECADV/WF/8e4947d5-91f3-4b36-b309-7c52c483be3d/ssl-wireless-sms-notification","title":"SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 14:44:31","sources":[{"name":"Wordfence","remoteId":"8e4947d5-91f3-4b36-b309-7c52c483be3d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e4947d5-91f3-4b36-b309-7c52c483be3d?source=api-prod","cve":"CVE-2026-96228","affectedVersions":"<=3.8.1","severity":"high"},{"advisoryId":"WPSECADV/WF/dd7f3a48-d851-4533-967c-f0aa98bb85d1/ssl-wireless-sms-notification","title":"SSL Wireless SMS Notification <= 3.6.0 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-12-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"dd7f3a48-d851-4533-967c-f0aa98bb85d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dd7f3a48-d851-4533-967c-f0aa98bb85d1?source=api-prod","cve":"CVE-2024-56220","affectedVersions":"<=3.6.0","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_73747265616d63617374811c9dc5_gen.json b/internal/data/assets/plugin_73747265616d63617374811c9dc5_gen.json
index e4971151..6814779e 100644
--- a/internal/data/assets/plugin_73747265616d63617374811c9dc5_gen.json
+++ b/internal/data/assets/plugin_73747265616d63617374811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/streamcast","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<2.1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e7b29aa-9dff-420b-8f3e-2beca0b19593/streamcast","title":"StreamCast – Radio Player for WordPress <= 2.1.0 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"5e7b29aa-9dff-420b-8f3e-2beca0b19593"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e7b29aa-9dff-420b-8f3e-2beca0b19593?source=api-prod","cve":"CVE-2021-24416","affectedVersions":"<2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6608148c-421e-497c-a06c-6e2003362ceb/streamcast","title":"StreamCast – bring live radio to your site with a sleek player <= 2.4.5 - Unauthenticated Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 12:54:00","sources":[{"name":"Wordfence","remoteId":"6608148c-421e-497c-a06c-6e2003362ceb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6608148c-421e-497c-a06c-6e2003362ceb?source=api-prod","cve":"CVE-2026-62030","affectedVersions":"<=2.4.5","severity":"high"},{"advisoryId":"WPSECADV/WF/ac1fb279-df40-467e-a336-fa67468c2b78/streamcast","title":"StreamCast <= 2.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac1fb279-df40-467e-a336-fa67468c2b78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac1fb279-df40-467e-a336-fa67468c2b78?source=api-prod","cve":"CVE-2024-43148","affectedVersions":"<=2.2.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/streamcast","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<2.1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/5e7b29aa-9dff-420b-8f3e-2beca0b19593/streamcast","title":"StreamCast – Radio Player for WordPress <= 2.1.0 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"5e7b29aa-9dff-420b-8f3e-2beca0b19593"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e7b29aa-9dff-420b-8f3e-2beca0b19593?source=api-prod","cve":"CVE-2021-24416","affectedVersions":"<2.1.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/6608148c-421e-497c-a06c-6e2003362ceb/streamcast","title":"StreamCast – bring live radio to your site with a sleek player <= 2.4.6 - Unauthenticated Server-Side Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 12:54:00","sources":[{"name":"Wordfence","remoteId":"6608148c-421e-497c-a06c-6e2003362ceb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6608148c-421e-497c-a06c-6e2003362ceb?source=api-prod","cve":"CVE-2026-62030","affectedVersions":"<=2.4.6","severity":"high"},{"advisoryId":"WPSECADV/WF/ac1fb279-df40-467e-a336-fa67468c2b78/streamcast","title":"StreamCast <= 2.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"ac1fb279-df40-467e-a336-fa67468c2b78"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac1fb279-df40-467e-a336-fa67468c2b78?source=api-prod","cve":"CVE-2024-43148","affectedVersions":"<=2.2.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7375726563617274811c9dc5_gen.json b/internal/data/assets/plugin_7375726563617274811c9dc5_gen.json
index dc4e585e..1861792c 100644
--- a/internal/data/assets/plugin_7375726563617274811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7375726563617274811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/1420e4e0-e163-4b64-9b54-26e274530e2f/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 13:32:05","sources":[{"name":"Wordfence","remoteId":"1420e4e0-e163-4b64-9b54-26e274530e2f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1420e4e0-e163-4b64-9b54-26e274530e2f?source=api-prod","cve":"CVE-2026-112221","affectedVersions":"<=4.9.5","severity":"high"},{"advisoryId":"WPSECADV/WF/185c755a-8b57-4943-b7fc-c520f5dd0348/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 15:10:00","sources":[{"name":"Wordfence","remoteId":"185c755a-8b57-4943-b7fc-c520f5dd0348"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/185c755a-8b57-4943-b7fc-c520f5dd0348?source=api-prod","cve":"CVE-2026-112840","affectedVersions":"<=4.9.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/1bdccdaa-7770-4f3c-abdc-9e8e96ef8a03/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"1bdccdaa-7770-4f3c-abdc-9e8e96ef8a03"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1bdccdaa-7770-4f3c-abdc-9e8e96ef8a03?source=api-prod","cve":"CVE-2026-109697","affectedVersions":"<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/1c3a29ec-16f0-4fad-b188-7a683d123bb8/surecart","title":"SureCart <= 4.0.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"1c3a29ec-16f0-4fad-b188-7a683d123bb8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1c3a29ec-16f0-4fad-b188-7a683d123bb8?source=api-prod","cve":"CVE-2026-39488","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a2b2a74-30d9-4e62-ab08-bbb2166e9a6b/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.3.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a2b2a74-30d9-4e62-ab08-bbb2166e9a6b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a2b2a74-30d9-4e62-ab08-bbb2166e9a6b?source=api-prod","cve":"CVE-2026-57314","affectedVersions":"<=4.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d10d7b5-1995-483a-8502-74bc912f6b0e/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.6.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d10d7b5-1995-483a-8502-74bc912f6b0e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d10d7b5-1995-483a-8502-74bc912f6b0e?source=api-prod","cve":"CVE-2026-32548","affectedVersions":"<=4.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/416c13ff-15ae-4ba4-8a95-7c07bec75c22/surecart","title":"SureCart <= 2.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"416c13ff-15ae-4ba4-8a95-7c07bec75c22"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/416c13ff-15ae-4ba4-8a95-7c07bec75c22?source=api-prod","cve":"CVE-2023-41241","affectedVersions":"<=2.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/4aa247ff-fbc3-48e3-8e90-e3f8cdf5d97f/surecart","title":"SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 20:08:30","sources":[{"name":"Wordfence","remoteId":"4aa247ff-fbc3-48e3-8e90-e3f8cdf5d97f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4aa247ff-fbc3-48e3-8e90-e3f8cdf5d97f?source=api-prod","cve":"CVE-2026-109224","affectedVersions":"<=4.9.4","severity":"high"},{"advisoryId":"WPSECADV/WF/4f2fdc9d-891e-49c6-9427-620772336854/surecart","title":"SureCart <= 2.29.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"4f2fdc9d-891e-49c6-9427-620772336854"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4f2fdc9d-891e-49c6-9427-620772336854?source=api-prod","cve":"CVE-2024-43970","affectedVersions":"<=2.29.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/57e6a355-9bde-4a85-9556-6885530306dc/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.7.0 - Unauthorized WordPress Account Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"57e6a355-9bde-4a85-9556-6885530306dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57e6a355-9bde-4a85-9556-6885530306dc?source=api-prod","cve":"CVE-2026-75793","affectedVersions":"<4.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/75e5c379-02a2-4f1e-b62f-e02087c8446b/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.6.3 - Authenticated (Subscriber+) Arbitrary Account Email Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"75e5c379-02a2-4f1e-b62f-e02087c8446b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/75e5c379-02a2-4f1e-b62f-e02087c8446b?source=api-prod","cve":"CVE-2026-18480","affectedVersions":"<4.6.3","severity":"high"},{"advisoryId":"WPSECADV/WF/8e47a612-4921-4227-be86-54711bf61c43/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e47a612-4921-4227-be86-54711bf61c43"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e47a612-4921-4227-be86-54711bf61c43?source=api-prod","cve":"CVE-2026-57313","affectedVersions":"<=4.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ee528d1-b69c-499a-b289-3c2c05c59a16/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.3 - Authenticated (Custom Role+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ee528d1-b69c-499a-b289-3c2c05c59a16"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ee528d1-b69c-499a-b289-3c2c05c59a16?source=api-prod","cve":"CVE-2026-106599","affectedVersions":"<=4.9.3","severity":"high"},{"advisoryId":"WPSECADV/WF/b7690157-53de-40da-a161-5b6ebe3e4e64/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7690157-53de-40da-a161-5b6ebe3e4e64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7690157-53de-40da-a161-5b6ebe3e4e64?source=api-prod","cve":"CVE-2026-105874","affectedVersions":"<=4.9.3","severity":"high"},{"advisoryId":"WPSECADV/WF/d57af81e-ef63-44ec-a1f6-dd1b5b627ec4/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.7.2 - Authenticated (Shop Worker+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"d57af81e-ef63-44ec-a1f6-dd1b5b627ec4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d57af81e-ef63-44ec-a1f6-dd1b5b627ec4?source=api-prod","cve":"CVE-2026-97245","affectedVersions":"<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e19f5f7b-6698-4275-a362-15e5441e0fa9/surecart","title":"SureCart <= 4.2.3 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated Webhook\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 16:08:06","sources":[{"name":"Wordfence","remoteId":"e19f5f7b-6698-4275-a362-15e5441e0fa9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e19f5f7b-6698-4275-a362-15e5441e0fa9?source=api-prod","cve":"CVE-2026-7655","affectedVersions":"<=4.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/e58afab1-90fc-4969-9812-83265a7cf46a/surecart","title":"SureCart <= 4.9.4 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"e58afab1-90fc-4969-9812-83265a7cf46a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e58afab1-90fc-4969-9812-83265a7cf46a?source=api-prod","cve":"CVE-2026-108073","affectedVersions":"<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/ecc7ac81-46cd-49ff-a01d-8679ccbc18a1/surecart","title":"SureCart <= 4.2.0 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"ecc7ac81-46cd-49ff-a01d-8679ccbc18a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ecc7ac81-46cd-49ff-a01d-8679ccbc18a1?source=api-prod","cve":"CVE-2026-9065","affectedVersions":"<=4.2.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/1420e4e0-e163-4b64-9b54-26e274530e2f/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 13:32:05","sources":[{"name":"Wordfence","remoteId":"1420e4e0-e163-4b64-9b54-26e274530e2f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1420e4e0-e163-4b64-9b54-26e274530e2f?source=api-prod","cve":"CVE-2026-112221","affectedVersions":"<=4.9.5","severity":"high"},{"advisoryId":"WPSECADV/WF/185c755a-8b57-4943-b7fc-c520f5dd0348/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 15:10:00","sources":[{"name":"Wordfence","remoteId":"185c755a-8b57-4943-b7fc-c520f5dd0348"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/185c755a-8b57-4943-b7fc-c520f5dd0348?source=api-prod","cve":"CVE-2026-112840","affectedVersions":"<=4.9.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/1bdccdaa-7770-4f3c-abdc-9e8e96ef8a03/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"1bdccdaa-7770-4f3c-abdc-9e8e96ef8a03"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1bdccdaa-7770-4f3c-abdc-9e8e96ef8a03?source=api-prod","cve":"CVE-2026-109697","affectedVersions":"<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/1c3a29ec-16f0-4fad-b188-7a683d123bb8/surecart","title":"SureCart <= 4.0.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"1c3a29ec-16f0-4fad-b188-7a683d123bb8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1c3a29ec-16f0-4fad-b188-7a683d123bb8?source=api-prod","cve":"CVE-2026-39488","affectedVersions":"<=4.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2a2b2a74-30d9-4e62-ab08-bbb2166e9a6b/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.3.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"2a2b2a74-30d9-4e62-ab08-bbb2166e9a6b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a2b2a74-30d9-4e62-ab08-bbb2166e9a6b?source=api-prod","cve":"CVE-2026-57314","affectedVersions":"<=4.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/3d10d7b5-1995-483a-8502-74bc912f6b0e/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.6.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"3d10d7b5-1995-483a-8502-74bc912f6b0e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d10d7b5-1995-483a-8502-74bc912f6b0e?source=api-prod","cve":"CVE-2026-32548","affectedVersions":"<=4.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/416c13ff-15ae-4ba4-8a95-7c07bec75c22/surecart","title":"SureCart <= 2.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"416c13ff-15ae-4ba4-8a95-7c07bec75c22"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/416c13ff-15ae-4ba4-8a95-7c07bec75c22?source=api-prod","cve":"CVE-2023-41241","affectedVersions":"<=2.5.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/4aa247ff-fbc3-48e3-8e90-e3f8cdf5d97f/surecart","title":"SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-15 20:08:30","sources":[{"name":"Wordfence","remoteId":"4aa247ff-fbc3-48e3-8e90-e3f8cdf5d97f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4aa247ff-fbc3-48e3-8e90-e3f8cdf5d97f?source=api-prod","cve":"CVE-2026-109224","affectedVersions":"<=4.9.4","severity":"high"},{"advisoryId":"WPSECADV/WF/4f2fdc9d-891e-49c6-9427-620772336854/surecart","title":"SureCart <= 2.29.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-08-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"4f2fdc9d-891e-49c6-9427-620772336854"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4f2fdc9d-891e-49c6-9427-620772336854?source=api-prod","cve":"CVE-2024-43970","affectedVersions":"<=2.29.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/57e6a355-9bde-4a85-9556-6885530306dc/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.7.0 - Unauthorized WordPress Account Creation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"57e6a355-9bde-4a85-9556-6885530306dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/57e6a355-9bde-4a85-9556-6885530306dc?source=api-prod","cve":"CVE-2026-75793","affectedVersions":"<4.7.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/75e5c379-02a2-4f1e-b62f-e02087c8446b/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.6.3 - Authenticated (Subscriber+) Arbitrary Account Email Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"75e5c379-02a2-4f1e-b62f-e02087c8446b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/75e5c379-02a2-4f1e-b62f-e02087c8446b?source=api-prod","cve":"CVE-2026-18480","affectedVersions":"<4.6.3","severity":"high"},{"advisoryId":"WPSECADV/WF/8e47a612-4921-4227-be86-54711bf61c43/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e47a612-4921-4227-be86-54711bf61c43"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e47a612-4921-4227-be86-54711bf61c43?source=api-prod","cve":"CVE-2026-57313","affectedVersions":"<=4.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/8ee528d1-b69c-499a-b289-3c2c05c59a16/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.3 - Authenticated (Custom Role+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"8ee528d1-b69c-499a-b289-3c2c05c59a16"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ee528d1-b69c-499a-b289-3c2c05c59a16?source=api-prod","cve":"CVE-2026-106599","affectedVersions":"<=4.9.3","severity":"high"},{"advisoryId":"WPSECADV/WF/b7690157-53de-40da-a161-5b6ebe3e4e64/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"b7690157-53de-40da-a161-5b6ebe3e4e64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b7690157-53de-40da-a161-5b6ebe3e4e64?source=api-prod","cve":"CVE-2026-105874","affectedVersions":"<=4.9.3","severity":"high"},{"advisoryId":"WPSECADV/WF/d57af81e-ef63-44ec-a1f6-dd1b5b627ec4/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.7.2 - Authenticated (Shop Worker+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"d57af81e-ef63-44ec-a1f6-dd1b5b627ec4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d57af81e-ef63-44ec-a1f6-dd1b5b627ec4?source=api-prod","cve":"CVE-2026-97245","affectedVersions":"<=4.7.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e19f5f7b-6698-4275-a362-15e5441e0fa9/surecart","title":"SureCart <= 4.2.3 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated Webhook\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-10 16:08:06","sources":[{"name":"Wordfence","remoteId":"e19f5f7b-6698-4275-a362-15e5441e0fa9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e19f5f7b-6698-4275-a362-15e5441e0fa9?source=api-prod","cve":"CVE-2026-7655","affectedVersions":"<=4.2.3","severity":"high"},{"advisoryId":"WPSECADV/WF/e2e8c6b7-14fb-4016-b6c3-dd61da584811/surecart","title":"SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"e2e8c6b7-14fb-4016-b6c3-dd61da584811"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e2e8c6b7-14fb-4016-b6c3-dd61da584811?source=api-prod","cve":"CVE-2026-112241","affectedVersions":"<=4.9.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/e58afab1-90fc-4969-9812-83265a7cf46a/surecart","title":"SureCart <= 4.9.4 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"e58afab1-90fc-4969-9812-83265a7cf46a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e58afab1-90fc-4969-9812-83265a7cf46a?source=api-prod","cve":"CVE-2026-108073","affectedVersions":"<=4.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/ecc7ac81-46cd-49ff-a01d-8679ccbc18a1/surecart","title":"SureCart <= 4.2.0 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-05-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"ecc7ac81-46cd-49ff-a01d-8679ccbc18a1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ecc7ac81-46cd-49ff-a01d-8679ccbc18a1?source=api-prod","cve":"CVE-2026-9065","affectedVersions":"<=4.2.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_746162617061792d67617465776179811c9dc5_gen.json b/internal/data/assets/plugin_746162617061792d67617465776179811c9dc5_gen.json
index 60781edb..f1a6dbf9 100644
--- a/internal/data/assets/plugin_746162617061792d67617465776179811c9dc5_gen.json
+++ b/internal/data/assets/plugin_746162617061792d67617465776179811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/51d0ab38-fa5b-4c96-a849-06d6ab3caf2b/tabapay-gateway","title":"TabaPay Gateway <= 1.4.0 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"51d0ab38-fa5b-4c96-a849-06d6ab3caf2b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51d0ab38-fa5b-4c96-a849-06d6ab3caf2b?source=api-prod","cve":"CVE-2026-18031","affectedVersions":"<=1.4.0","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/51d0ab38-fa5b-4c96-a849-06d6ab3caf2b/tabapay-gateway","title":"TabaPay Gateway < 1.4.1 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"51d0ab38-fa5b-4c96-a849-06d6ab3caf2b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51d0ab38-fa5b-4c96-a849-06d6ab3caf2b?source=api-prod","cve":"CVE-2026-18031","affectedVersions":"<1.4.1","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7468726976652d6175746f6d61746f72811c9dc5_gen.json b/internal/data/assets/plugin_7468726976652d6175746f6d61746f72811c9dc5_gen.json
index cbccbce3..51b0f99c 100644
--- a/internal/data/assets/plugin_7468726976652d6175746f6d61746f72811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7468726976652d6175746f6d61746f72811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/4d5b1a3d-ce7f-4d5d-b72b-61024d5c5378/thrive-automator","title":"Thrive Automator <= 1.17 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"4d5b1a3d-ce7f-4d5d-b72b-61024d5c5378"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d5b1a3d-ce7f-4d5d-b72b-61024d5c5378?source=api-prod","cve":"CVE-2023-51531","affectedVersions":"<=1.17","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2bd9e63b-2a73-4fb7-9ff6-fc75f6763cc9/thrive-automator","title":"Thrive Automator < 11.2 - Authenticated (Editor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"2bd9e63b-2a73-4fb7-9ff6-fc75f6763cc9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2bd9e63b-2a73-4fb7-9ff6-fc75f6763cc9?source=api-prod","cve":"CVE-2026-104694","affectedVersions":"<11.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/4d5b1a3d-ce7f-4d5d-b72b-61024d5c5378/thrive-automator","title":"Thrive Automator <= 1.17 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"4d5b1a3d-ce7f-4d5d-b72b-61024d5c5378"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d5b1a3d-ce7f-4d5d-b72b-61024d5c5378?source=api-prod","cve":"CVE-2023-51531","affectedVersions":"<=1.17","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7469656e64612d63727970746f2d776f6f811c9dc5_gen.json b/internal/data/assets/plugin_7469656e64612d63727970746f2d776f6f811c9dc5_gen.json
new file mode 100644
index 00000000..2a6a1bcd
--- /dev/null
+++ b/internal/data/assets/plugin_7469656e64612d63727970746f2d776f6f811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/9aa92b37-9b79-4b8f-931c-3f462c77ae2a/tienda-crypto-woo","title":"TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"9aa92b37-9b79-4b8f-931c-3f462c77ae2a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9aa92b37-9b79-4b8f-931c-3f462c77ae2a?source=api-prod","cve":"CVE-2026-103325","affectedVersions":">=1.0.1,<=1.2.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_74696e796d63652d7468756d626e61696c2d67616c6c657279811c9dc5_gen.json b/internal/data/assets/plugin_74696e796d63652d7468756d626e61696c2d67616c6c657279811c9dc5_gen.json
index 0aeea783..603a45f1 100644
--- a/internal/data/assets/plugin_74696e796d63652d7468756d626e61696c2d67616c6c657279811c9dc5_gen.json
+++ b/internal/data/assets/plugin_74696e796d63652d7468756d626e61696c2d67616c6c657279811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/78914fef-6ab4-49b8-8c67-3a634759194c/tinymce-thumbnail-gallery","title":"Tinymce Thumbnail Gallery <= 1.0.7 - Local File Inclusion\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"78914fef-6ab4-49b8-8c67-3a634759194c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78914fef-6ab4-49b8-8c67-3a634759194c?source=api-prod","affectedVersions":"<=1.0.7","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/78914fef-6ab4-49b8-8c67-3a634759194c/tinymce-thumbnail-gallery","title":"Tinymce Thumbnail Gallery <= 1.0.7 - Local File Inclusion\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"78914fef-6ab4-49b8-8c67-3a634759194c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/78914fef-6ab4-49b8-8c67-3a634759194c?source=api-prod","affectedVersions":"<=1.0.7","severity":"high"},{"advisoryId":"WPSECADV/WF/e70d88ba-7613-4cef-b758-d8d63489a3d4/tinymce-thumbnail-gallery","title":"Tinymce Thumbnail Gallery <= 1.0.0 - Unauthenticated Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-08-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"e70d88ba-7613-4cef-b758-d8d63489a3d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e70d88ba-7613-4cef-b758-d8d63489a3d4?source=api-prod","cve":"CVE-2012-20002","affectedVersions":"<=1.0.0","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7472616e736c69742d6974811c9dc5_gen.json b/internal/data/assets/plugin_7472616e736c69742d6974811c9dc5_gen.json
index 6cb92126..c0fd74c2 100644
--- a/internal/data/assets/plugin_7472616e736c69742d6974811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7472616e736c69742d6974811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/3199e007-2710-4eb7-acd0-e1645130f0a5/translit-it","title":"translit it! <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"3199e007-2710-4eb7-acd0-e1645130f0a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3199e007-2710-4eb7-acd0-e1645130f0a5?source=api-prod","cve":"CVE-2025-39416","affectedVersions":"<=1.6","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/3199e007-2710-4eb7-acd0-e1645130f0a5/translit-it","title":"translit it! <= 1.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"3199e007-2710-4eb7-acd0-e1645130f0a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3199e007-2710-4eb7-acd0-e1645130f0a5?source=api-prod","cve":"CVE-2025-39416","affectedVersions":"<=1.8.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_756c7472616164646f6e732d656c656d656e746f722d6c697465811c9dc5_gen.json b/internal/data/assets/plugin_756c7472616164646f6e732d656c656d656e746f722d6c697465811c9dc5_gen.json
index bbe49a50..e57ad0e0 100644
--- a/internal/data/assets/plugin_756c7472616164646f6e732d656c656d656e746f722d6c697465811c9dc5_gen.json
+++ b/internal/data/assets/plugin_756c7472616164646f6e732d656c656d656e746f722d6c697465811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/16cd88cc-b459-43a9-ae0e-08c01957a111/ultraaddons-elementor-lite","title":"UltraAddons Elementor Lite <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"16cd88cc-b459-43a9-ae0e-08c01957a111"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16cd88cc-b459-43a9-ae0e-08c01957a111?source=api-prod","cve":"CVE-2025-48131","affectedVersions":"<=2.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/ultraaddons-elementor-lite","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=1.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/544d7572-651f-45bb-b2ce-d768553c251a/ultraaddons-elementor-lite","title":"UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-09 13:23:50","sources":[{"name":"Wordfence","remoteId":"544d7572-651f-45bb-b2ce-d768553c251a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/544d7572-651f-45bb-b2ce-d768553c251a?source=api-prod","cve":"CVE-2024-4866","affectedVersions":"<=1.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/719de6e5-29c5-4303-981d-81840939a0b1/ultraaddons-elementor-lite","title":"UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.8 - Insecure Direct Object Reference to Sensitive Information Exposure via UA_Template Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-20 13:40:21","sources":[{"name":"Wordfence","remoteId":"719de6e5-29c5-4303-981d-81840939a0b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/719de6e5-29c5-4303-981d-81840939a0b1?source=api-prod","cve":"CVE-2024-10696","affectedVersions":"<=1.1.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/9b0737b6-c30b-4244-bf17-4ade1991af6a/ultraaddons-elementor-lite","title":"UltraAddons <= 2.0.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b0737b6-c30b-4244-bf17-4ade1991af6a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b0737b6-c30b-4244-bf17-4ade1991af6a?source=api-prod","cve":"CVE-2025-32264","affectedVersions":"<=2.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/b847f463-2837-4f91-bae6-a8058f36a7db/ultraaddons-elementor-lite","title":"UltraAddons Elementor Lite <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"b847f463-2837-4f91-bae6-a8058f36a7db"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b847f463-2837-4f91-bae6-a8058f36a7db?source=api-prod","cve":"CVE-2024-49277","affectedVersions":"<=2.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d82dd179-a63e-4a83-9b94-c4f3c7ded390/ultraaddons-elementor-lite","title":"UltraAddons Elementor Lite <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"d82dd179-a63e-4a83-9b94-c4f3c7ded390"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d82dd179-a63e-4a83-9b94-c4f3c7ded390?source=api-prod","cve":"CVE-2024-37554","affectedVersions":"<=2.0.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/16cd88cc-b459-43a9-ae0e-08c01957a111/ultraaddons-elementor-lite","title":"UltraAddons Elementor Lite <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"16cd88cc-b459-43a9-ae0e-08c01957a111"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16cd88cc-b459-43a9-ae0e-08c01957a111?source=api-prod","cve":"CVE-2025-48131","affectedVersions":"<=2.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/ultraaddons-elementor-lite","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=1.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/544d7572-651f-45bb-b2ce-d768553c251a/ultraaddons-elementor-lite","title":"UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-09 13:23:50","sources":[{"name":"Wordfence","remoteId":"544d7572-651f-45bb-b2ce-d768553c251a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/544d7572-651f-45bb-b2ce-d768553c251a?source=api-prod","cve":"CVE-2024-4866","affectedVersions":"<=1.1.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/719de6e5-29c5-4303-981d-81840939a0b1/ultraaddons-elementor-lite","title":"UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.8 - Insecure Direct Object Reference to Sensitive Information Exposure via UA_Template Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-20 13:40:21","sources":[{"name":"Wordfence","remoteId":"719de6e5-29c5-4303-981d-81840939a0b1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/719de6e5-29c5-4303-981d-81840939a0b1?source=api-prod","cve":"CVE-2024-10696","affectedVersions":"<=1.1.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/9b0737b6-c30b-4244-bf17-4ade1991af6a/ultraaddons-elementor-lite","title":"UltraAddons <= 2.0.3 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"9b0737b6-c30b-4244-bf17-4ade1991af6a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9b0737b6-c30b-4244-bf17-4ade1991af6a?source=api-prod","cve":"CVE-2025-32264","affectedVersions":"<=2.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/b847f463-2837-4f91-bae6-a8058f36a7db/ultraaddons-elementor-lite","title":"UltraAddons Elementor Lite <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-10-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"b847f463-2837-4f91-bae6-a8058f36a7db"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b847f463-2837-4f91-bae6-a8058f36a7db?source=api-prod","cve":"CVE-2024-49277","affectedVersions":"<=2.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d82dd179-a63e-4a83-9b94-c4f3c7ded390/ultraaddons-elementor-lite","title":"UltraAddons Elementor Lite <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"d82dd179-a63e-4a83-9b94-c4f3c7ded390"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d82dd179-a63e-4a83-9b94-c4f3c7ded390?source=api-prod","cve":"CVE-2024-37554","affectedVersions":"<=2.0.2","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_756e63616e6e792d6c6561726e646173682d746f6f6c6b6974811c9dc5_gen.json b/internal/data/assets/plugin_756e63616e6e792d6c6561726e646173682d746f6f6c6b6974811c9dc5_gen.json
index c9d4428e..b4cbcb4d 100644
--- a/internal/data/assets/plugin_756e63616e6e792d6c6561726e646173682d746f6f6c6b6974811c9dc5_gen.json
+++ b/internal/data/assets/plugin_756e63616e6e792d6c6561726e646173682d746f6f6c6b6974811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2561ad0f-26b9-4581-8a52-76b69db80d6f/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.7.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"2561ad0f-26b9-4581-8a52-76b69db80d6f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2561ad0f-26b9-4581-8a52-76b69db80d6f?source=api-prod","cve":"CVE-2025-22268","affectedVersions":"<=3.7.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/61992821-a053-4bc6-853a-1a826d096746/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.6.3 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"61992821-a053-4bc6-853a-1a826d096746"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61992821-a053-4bc6-853a-1a826d096746?source=api-prod","affectedVersions":"<=3.6.3","severity":"high"},{"advisoryId":"WPSECADV/WF/66e5a569-1dd5-40e9-8356-d7c82c8e30ed/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.6.4.3 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"66e5a569-1dd5-40e9-8356-d7c82c8e30ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/66e5a569-1dd5-40e9-8356-d7c82c8e30ed?source=api-prod","cve":"CVE-2023-34020","affectedVersions":"<3.6.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ea4ca2d-6a67-43ad-817d-960cad3030b8/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.6.4.1 - Cross-Site Request Forgery to Arbitrary Plugin Install and Activation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ea4ca2d-6a67-43ad-817d-960cad3030b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ea4ca2d-6a67-43ad-817d-960cad3030b8?source=api-prod","cve":"CVE-2023-23714","affectedVersions":"<=3.6.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/8e65e06f-f907-4f42-a454-4da63a11136d/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e65e06f-f907-4f42-a454-4da63a11136d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e65e06f-f907-4f42-a454-4da63a11136d?source=api-prod","cve":"CVE-2025-48080","affectedVersions":"<=3.7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/93c1033e-aaa6-4ddc-a3f0-a41e09069e3e/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"93c1033e-aaa6-4ddc-a3f0-a41e09069e3e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/93c1033e-aaa6-4ddc-a3f0-a41e09069e3e?source=api-prod","cve":"CVE-2025-57988","affectedVersions":"<=3.7.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae9f4ca2-f138-452f-8311-a949177a9614/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.8.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae9f4ca2-f138-452f-8311-a949177a9614"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae9f4ca2-f138-452f-8311-a949177a9614?source=api-prod","cve":"CVE-2026-107128","affectedVersions":"<=3.8.1","severity":"low"},{"advisoryId":"WPSECADV/WF/cdaa7450-3b51-470d-8903-52fd1d4215a2/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.6.4.3 - Missing Authorization via review-banner-visibility REST route\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdaa7450-3b51-470d-8903-52fd1d4215a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdaa7450-3b51-470d-8903-52fd1d4215a2?source=api-prod","cve":"CVE-2023-34019","affectedVersions":"<=3.6.4.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2561ad0f-26b9-4581-8a52-76b69db80d6f/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.7.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-04-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"2561ad0f-26b9-4581-8a52-76b69db80d6f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2561ad0f-26b9-4581-8a52-76b69db80d6f?source=api-prod","cve":"CVE-2025-22268","affectedVersions":"<=3.7.0.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/35bfa8dc-fbe4-4c02-90d0-c43728b153d1/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash < 3.8.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"35bfa8dc-fbe4-4c02-90d0-c43728b153d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/35bfa8dc-fbe4-4c02-90d0-c43728b153d1?source=api-prod","cve":"CVE-2026-107127","affectedVersions":"<3.8.2","severity":"high"},{"advisoryId":"WPSECADV/WF/61992821-a053-4bc6-853a-1a826d096746/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.6.3 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"61992821-a053-4bc6-853a-1a826d096746"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61992821-a053-4bc6-853a-1a826d096746?source=api-prod","affectedVersions":"<=3.6.3","severity":"high"},{"advisoryId":"WPSECADV/WF/66e5a569-1dd5-40e9-8356-d7c82c8e30ed/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.6.4.3 - Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"66e5a569-1dd5-40e9-8356-d7c82c8e30ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/66e5a569-1dd5-40e9-8356-d7c82c8e30ed?source=api-prod","cve":"CVE-2023-34020","affectedVersions":"<3.6.4.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/7ea4ca2d-6a67-43ad-817d-960cad3030b8/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.6.4.1 - Cross-Site Request Forgery to Arbitrary Plugin Install and Activation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"7ea4ca2d-6a67-43ad-817d-960cad3030b8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7ea4ca2d-6a67-43ad-817d-960cad3030b8?source=api-prod","cve":"CVE-2023-23714","affectedVersions":"<=3.6.4.1","severity":"high"},{"advisoryId":"WPSECADV/WF/8e65e06f-f907-4f42-a454-4da63a11136d/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"8e65e06f-f907-4f42-a454-4da63a11136d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e65e06f-f907-4f42-a454-4da63a11136d?source=api-prod","cve":"CVE-2025-48080","affectedVersions":"<=3.7.0.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/93c1033e-aaa6-4ddc-a3f0-a41e09069e3e/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"93c1033e-aaa6-4ddc-a3f0-a41e09069e3e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/93c1033e-aaa6-4ddc-a3f0-a41e09069e3e?source=api-prod","cve":"CVE-2025-57988","affectedVersions":"<=3.7.0.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/ae9f4ca2-f138-452f-8311-a949177a9614/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.8.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"ae9f4ca2-f138-452f-8311-a949177a9614"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae9f4ca2-f138-452f-8311-a949177a9614?source=api-prod","cve":"CVE-2026-107128","affectedVersions":"<=3.8.1","severity":"low"},{"advisoryId":"WPSECADV/WF/cdaa7450-3b51-470d-8903-52fd1d4215a2/uncanny-learndash-toolkit","title":"Uncanny Toolkit for LearnDash <= 3.6.4.3 - Missing Authorization via review-banner-visibility REST route\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-06-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"cdaa7450-3b51-470d-8903-52fd1d4215a2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cdaa7450-3b51-470d-8903-52fd1d4215a2?source=api-prod","cve":"CVE-2023-34019","affectedVersions":"<=3.6.4.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_756e697061792d7061796d656e742d676174657761792d666f722d776f6f636f6d6d65726365811c9dc5_gen.json b/internal/data/assets/plugin_756e697061792d7061796d656e742d676174657761792d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
new file mode 100644
index 00000000..d7298e5f
--- /dev/null
+++ b/internal/data/assets/plugin_756e697061792d7061796d656e742d676174657761792d666f722d776f6f636f6d6d65726365811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/0953c534-e5fb-4d6d-9a67-5b3503dde77d/unipay-payment-gateway-for-woocommerce","title":"UniPAY Payment Gateway For WooCommerce <= 2.3 - Unauthenticated Arbitrary Order Status Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"0953c534-e5fb-4d6d-9a67-5b3503dde77d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0953c534-e5fb-4d6d-9a67-5b3503dde77d?source=api-prod","cve":"CVE-2026-103331","affectedVersions":"<=2.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7570692d71722d636f64652d7061796d656e742d67617465776179811c9dc5_gen.json b/internal/data/assets/plugin_7570692d71722d636f64652d7061796d656e742d67617465776179811c9dc5_gen.json
index 6c1a733c..a9c14ab3 100644
--- a/internal/data/assets/plugin_7570692d71722d636f64652d7061796d656e742d67617465776179811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7570692d71722d636f64652d7061796d656e742d67617465776179811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/7742ba13-062a-4b22-9396-07de4c3db62c/upi-qr-code-payment-gateway","title":"UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"7742ba13-062a-4b22-9396-07de4c3db62c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7742ba13-062a-4b22-9396-07de4c3db62c?source=api-prod","cve":"CVE-2026-84169","affectedVersions":"<=1.4.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/7742ba13-062a-4b22-9396-07de4c3db62c/upi-qr-code-payment-gateway","title":"UPI QR Code Payment Gateway < 1.4.4 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"7742ba13-062a-4b22-9396-07de4c3db62c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7742ba13-062a-4b22-9396-07de4c3db62c?source=api-prod","cve":"CVE-2026-84169","affectedVersions":"<1.4.4","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7573632d652d73686f70811c9dc5_gen.json b/internal/data/assets/plugin_7573632d652d73686f70811c9dc5_gen.json
index 00b8860c..7d1a1396 100644
--- a/internal/data/assets/plugin_7573632d652d73686f70811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7573632d652d73686f70811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/09a16956-5dab-4ef1-9037-fdd28bcc2e26/usc-e-shop","title":"Welcart e-Commerce < 2.12.1 - Unauthenticated Session Fixation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"09a16956-5dab-4ef1-9037-fdd28bcc2e26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09a16956-5dab-4ef1-9037-fdd28bcc2e26?source=api-prod","cve":"CVE-2025-15671","affectedVersions":"<2.12.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0e78b5db-3f38-4ed7-9bec-6dd55d44f04f/usc-e-shop","title":"Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 14:35:00","sources":[{"name":"Wordfence","remoteId":"0e78b5db-3f38-4ed7-9bec-6dd55d44f04f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0e78b5db-3f38-4ed7-9bec-6dd55d44f04f?source=api-prod","cve":"CVE-2026-107752","affectedVersions":"<=2.12.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/0f23aa0e-eb1f-4310-9615-d67eb39389fe/usc-e-shop","title":"Welcart e-Commerce <=  2.9.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"0f23aa0e-eb1f-4310-9615-d67eb39389fe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0f23aa0e-eb1f-4310-9615-d67eb39389fe?source=api-prod","cve":"CVE-2014-10017","affectedVersions":"<=2.9.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/103ce24e-1c21-4c25-b3d0-6f595bf58979/usc-e-shop","title":"Welcart e-Commerce <= 1.8.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"103ce24e-1c21-4c25-b3d0-6f595bf58979"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/103ce24e-1c21-4c25-b3d0-6f595bf58979?source=api-prod","cve":"CVE-2016-4827","affectedVersions":"<=1.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/162afd58-3534-401b-9119-c1c26e15cd0f/usc-e-shop","title":"Welcart e-Commerce <= 2.9.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"162afd58-3534-401b-9119-c1c26e15cd0f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/162afd58-3534-401b-9119-c1c26e15cd0f?source=api-prod","cve":"CVE-2023-5951","affectedVersions":"<=2.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/16a4ebde-7c92-4ad2-9c8d-3bef0a8c600b/usc-e-shop","title":"Welcart e-Commerce < 1.2.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-12-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"16a4ebde-7c92-4ad2-9c8d-3bef0a8c600b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16a4ebde-7c92-4ad2-9c8d-3bef0a8c600b?source=api-prod","cve":"CVE-2012-5177","affectedVersions":"<1.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2022fa8b-2b2a-43a3-9447-90eed326f187/usc-e-shop","title":"Welcart e-Commerce < 1.2.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-12-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"2022fa8b-2b2a-43a3-9447-90eed326f187"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2022fa8b-2b2a-43a3-9447-90eed326f187?source=api-prod","cve":"CVE-2012-5178","affectedVersions":"<1.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/23399606-20b6-4d0b-b613-06dc838dc1e7/usc-e-shop","title":"Welcart e-Commerce <= 2.9.4 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"23399606-20b6-4d0b-b613-06dc838dc1e7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23399606-20b6-4d0b-b613-06dc838dc1e7?source=api-prod","cve":"CVE-2023-5952","affectedVersions":"<=2.9.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/26255cd9-2361-4d17-8d1b-9bdadcc69043/usc-e-shop","title":"Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"26255cd9-2361-4d17-8d1b-9bdadcc69043"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26255cd9-2361-4d17-8d1b-9bdadcc69043?source=api-prod","cve":"CVE-2025-12979","affectedVersions":"<=2.11.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/2677cea6-d60d-4e10-afd7-e088a5592b19/usc-e-shop","title":"Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2677cea6-d60d-4e10-afd7-e088a5592b19"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2677cea6-d60d-4e10-afd7-e088a5592b19?source=api-prod","cve":"CVE-2023-6120","affectedVersions":"<=2.9.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2be23829-cbee-4e44-945d-14835dbba104/usc-e-shop","title":"Welcart e-Commerce <= 2.11.31 - Authenticated (Editor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"2be23829-cbee-4e44-945d-14835dbba104"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2be23829-cbee-4e44-945d-14835dbba104?source=api-prod","cve":"CVE-2026-16065","affectedVersions":"<=2.11.31","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d9d3588-9c71-485a-9183-3d1d4a936e03/usc-e-shop","title":"Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"2d9d3588-9c71-485a-9183-3d1d4a936e03"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d9d3588-9c71-485a-9183-3d1d4a936e03?source=api-prod","cve":"CVE-2026-15213","affectedVersions":"<2.11.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/2f8f6ade-84a2-4a42-9208-a74f5ebe19b3/usc-e-shop","title":"Welcart e-Commerce <= 1.8.2 - Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"2f8f6ade-84a2-4a42-9208-a74f5ebe19b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f8f6ade-84a2-4a42-9208-a74f5ebe19b3?source=api-prod","cve":"CVE-2016-4828","affectedVersions":"<=1.8.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/321d0121-5cc9-4736-89b0-228e45b48b48/usc-e-shop","title":"Welcart e-Commerce < 1.8.3 - Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"321d0121-5cc9-4736-89b0-228e45b48b48"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/321d0121-5cc9-4736-89b0-228e45b48b48?source=api-prod","cve":"CVE-2016-4825","affectedVersions":"<1.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/35dadb9c-f0c6-4b74-bb31-5e9d504b3db5/usc-e-shop","title":"Welcart e-Commerce <= 2.8.21 - Authenticated(level_5+) SQL Injection via get_logs\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"35dadb9c-f0c6-4b74-bb31-5e9d504b3db5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/35dadb9c-f0c6-4b74-bb31-5e9d504b3db5?source=api-prod","cve":"CVE-2023-43493","affectedVersions":"<2.8.22","severity":"high"},{"advisoryId":"WPSECADV/WF/3b71805c-15bb-4cde-b91f-4f3e9b7ab520/usc-e-shop","title":"Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"3b71805c-15bb-4cde-b91f-4f3e9b7ab520"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3b71805c-15bb-4cde-b91f-4f3e9b7ab520?source=api-prod","affectedVersions":"<=2.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/3f8f8319-d75f-4e71-90d4-1c60b5a8df90/usc-e-shop","title":"Welcart e-Commerce <= 2.11.13 - Authenticated (Editor+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f8f8319-d75f-4e71-90d4-1c60b5a8df90"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f8f8319-d75f-4e71-90d4-1c60b5a8df90?source=api-prod","cve":"CVE-2025-47511","affectedVersions":"<=2.11.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/4d59eedb-550f-44c1-a0cd-609c5661134d/usc-e-shop","title":"Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"4d59eedb-550f-44c1-a0cd-609c5661134d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d59eedb-550f-44c1-a0cd-609c5661134d?source=api-prod","cve":"CVE-2025-10649","affectedVersions":"<=2.11.21","severity":"medium"},{"advisoryId":"WPSECADV/WF/513f4a39-afba-4819-abf2-6ed168d11dfe/usc-e-shop","title":"Welcart e-Commerce <= 2.2.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-06-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"513f4a39-afba-4819-abf2-6ed168d11dfe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/513f4a39-afba-4819-abf2-6ed168d11dfe?source=api-prod","cve":"CVE-2021-20734","affectedVersions":"<=2.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/518be2c6-36ca-4015-8b7f-451a806c7b1d/usc-e-shop","title":"Welcart e-Commerce <= 2.8.5 - Authenticated (Subscriber+) Information Disclosure and PHAR deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"518be2c6-36ca-4015-8b7f-451a806c7b1d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/518be2c6-36ca-4015-8b7f-451a806c7b1d?source=api-prod","cve":"CVE-2022-4237","affectedVersions":"<=2.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/527630bf-d034-4fcd-8fbe-01b388701049/usc-e-shop","title":"Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 20:54:53","sources":[{"name":"Wordfence","remoteId":"527630bf-d034-4fcd-8fbe-01b388701049"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/527630bf-d034-4fcd-8fbe-01b388701049?source=api-prod","cve":"CVE-2026-19914","affectedVersions":"<=2.12.1","severity":"high"},{"advisoryId":"WPSECADV/WF/5a1391b1-b0c3-4cf4-8850-d9367d90ec9e/usc-e-shop","title":"Welcart e-Commerce <= 2.11.28 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"5a1391b1-b0c3-4cf4-8850-d9367d90ec9e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5a1391b1-b0c3-4cf4-8850-d9367d90ec9e?source=api-prod","cve":"CVE-2026-49775","affectedVersions":"<=2.11.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/5f7b15ba-5d7b-448d-ae95-b7d3ae7ff1c0/usc-e-shop","title":"Welcart e-Commerce <= 2.11.1 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f7b15ba-5d7b-448d-ae95-b7d3ae7ff1c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f7b15ba-5d7b-448d-ae95-b7d3ae7ff1c0?source=api-prod","cve":"CVE-2024-42404","affectedVersions":"<=2.11.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/61799fbc-05dc-4de9-90f9-8712ba554607/usc-e-shop","title":"Welcart e-Commerce <= 2.9.14 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"61799fbc-05dc-4de9-90f9-8712ba554607"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61799fbc-05dc-4de9-90f9-8712ba554607?source=api-prod","cve":"CVE-2024-32144","affectedVersions":"<=2.9.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/6573ebcd-5cf6-4d40-8768-911304744d11/usc-e-shop","title":"Welcart e-Commerce <= 2.12.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"6573ebcd-5cf6-4d40-8768-911304744d11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6573ebcd-5cf6-4d40-8768-911304744d11?source=api-prod","cve":"CVE-2026-96761","affectedVersions":"<=2.12.3","severity":"high"},{"advisoryId":"WPSECADV/WF/671f5ba5-1f18-49fa-aa97-eaebdb3417bb/usc-e-shop","title":"Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"671f5ba5-1f18-49fa-aa97-eaebdb3417bb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/671f5ba5-1f18-49fa-aa97-eaebdb3417bb?source=api-prod","cve":"CVE-2021-4355","affectedVersions":"<2.2.8","severity":"high"},{"advisoryId":"WPSECADV/WF/6b2f6506-1a45-4967-9972-283505df25af/usc-e-shop","title":"Welcart e-Commerce <= 2.11.33 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b2f6506-1a45-4967-9972-283505df25af"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b2f6506-1a45-4967-9972-283505df25af?source=api-prod","cve":"CVE-2026-16066","affectedVersions":"<=2.11.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/6c26270b-a0a7-4877-aa66-bffe260003df/usc-e-shop","title":"Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-11 21:55:58","sources":[{"name":"Wordfence","remoteId":"6c26270b-a0a7-4877-aa66-bffe260003df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6c26270b-a0a7-4877-aa66-bffe260003df?source=api-prod","cve":"CVE-2025-0511","affectedVersions":"<=2.11.9","severity":"high"},{"advisoryId":"WPSECADV/WF/6c694bce-e389-492a-827d-ae5293730612/usc-e-shop","title":"Welcart e-Commerce <= 1.9.35 - PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-11-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"6c694bce-e389-492a-827d-ae5293730612"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6c694bce-e389-492a-827d-ae5293730612?source=api-prod","cve":"CVE-2020-28339","affectedVersions":"<1.9.36","severity":"high"},{"advisoryId":"WPSECADV/WF/716a7c3c-2e26-4da9-a299-7dcbaa7e4895/usc-e-shop","title":"Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 17:58:58","sources":[{"name":"Wordfence","remoteId":"716a7c3c-2e26-4da9-a299-7dcbaa7e4895"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/716a7c3c-2e26-4da9-a299-7dcbaa7e4895?source=api-prod","cve":"CVE-2026-19887","affectedVersions":"<=2.12.1","severity":"high"},{"advisoryId":"WPSECADV/WF/772c9330-97d5-42d5-a49c-d9a86a14b235/usc-e-shop","title":"Welcart e-Commerce <= 2.8.10 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"772c9330-97d5-42d5-a49c-d9a86a14b235"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/772c9330-97d5-42d5-a49c-d9a86a14b235?source=api-prod","cve":"CVE-2023-22705","affectedVersions":"<=2.8.10","severity":"high"},{"advisoryId":"WPSECADV/WF/7b86a774-a420-41a8-85ad-44fe8b32d4c2/usc-e-shop","title":"Welcart e-Commerce < 1.8.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b86a774-a420-41a8-85ad-44fe8b32d4c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b86a774-a420-41a8-85ad-44fe8b32d4c2?source=api-prod","cve":"CVE-2016-4826","affectedVersions":"<1.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/7e8ab165-57b8-4509-86b8-6e5226812264/usc-e-shop","title":"Welcart e-Commerce 2.6.0-2.7.7 - Information Disclosure via Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"7e8ab165-57b8-4509-86b8-6e5226812264"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e8ab165-57b8-4509-86b8-6e5226812264?source=api-prod","cve":"CVE-2022-41840","affectedVersions":">=2.6.0,<=2.7.7","severity":"high"},{"advisoryId":"WPSECADV/WF/7f4c9a5b-93ec-4979-921a-91134cb09566/usc-e-shop","title":"Welcart e-Commerce <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"7f4c9a5b-93ec-4979-921a-91134cb09566"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f4c9a5b-93ec-4979-921a-91134cb09566?source=api-prod","cve":"CVE-2022-4655","affectedVersions":"<=2.8.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/829facc1-443d-481f-b23f-7a93938dd866/usc-e-shop","title":"Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-09 18:30:04","sources":[{"name":"Wordfence","remoteId":"829facc1-443d-481f-b23f-7a93938dd866"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/829facc1-443d-481f-b23f-7a93938dd866?source=api-prod","cve":"CVE-2025-9367","affectedVersions":"<=2.11.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/91f86c22-94db-4c43-985a-2f3dd96ece21/usc-e-shop","title":"Welcart e-Commerce <= 2.9.5 - Authenticated (Administrator+) PHP Object Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"91f86c22-94db-4c43-985a-2f3dd96ece21"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91f86c22-94db-4c43-985a-2f3dd96ece21?source=api-prod","affectedVersions":"<2.9.6","severity":"high"},{"advisoryId":"WPSECADV/WF/9ed23152-30bd-40ab-947b-f773eb2a6b4f/usc-e-shop","title":"Welcart e-Commerce <= 2.11.31 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"9ed23152-30bd-40ab-947b-f773eb2a6b4f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ed23152-30bd-40ab-947b-f773eb2a6b4f?source=api-prod","cve":"CVE-2026-27539","affectedVersions":"<=2.11.31","severity":"high"},{"advisoryId":"WPSECADV/WF/a328643a-ab12-427e-9bcd-2d40738afb61/usc-e-shop","title":"Welcart e-Commerce <= 2.9.3 - Authenticated(Editor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"a328643a-ab12-427e-9bcd-2d40738afb61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a328643a-ab12-427e-9bcd-2d40738afb61?source=api-prod","cve":"CVE-2023-50847","affectedVersions":"<2.9.4","severity":"high"},{"advisoryId":"WPSECADV/WF/a908ac17-666f-4725-86f4-c9af4589fb69/usc-e-shop","title":"Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"a908ac17-666f-4725-86f4-c9af4589fb69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a908ac17-666f-4725-86f4-c9af4589fb69?source=api-prod","cve":"CVE-2023-43610","affectedVersions":"<2.8.22","severity":"high"},{"advisoryId":"WPSECADV/WF/ad0ed141-3d17-4fff-b788-7ff43f79d04c/usc-e-shop","title":"Welcart e-Commerce <= 2.8.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"ad0ed141-3d17-4fff-b788-7ff43f79d04c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ad0ed141-3d17-4fff-b788-7ff43f79d04c?source=api-prod","cve":"CVE-2022-3935","affectedVersions":"<=2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/b27b2e40-c703-4fa0-bff0-788e7a0351c6/usc-e-shop","title":"Welcart e-Commerce <= 2.8.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b27b2e40-c703-4fa0-bff0-788e7a0351c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b27b2e40-c703-4fa0-bff0-788e7a0351c6?source=api-prod","cve":"CVE-2022-3946","affectedVersions":"<=2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4f8c1a4-a309-4852-a066-0644ce175abc/usc-e-shop","title":"Welcart e-Commerce <= 2.11.16 - Authenticated (Editor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4f8c1a4-a309-4852-a066-0644ce175abc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4f8c1a4-a309-4852-a066-0644ce175abc?source=api-prod","cve":"CVE-2025-54012","affectedVersions":"<=2.11.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/bdfabd43-0ffa-4c25-aa72-0572e7007a01/usc-e-shop","title":"Welcart e-Commerce 2.6.10-2.8.4 - Information Disclosure via Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"bdfabd43-0ffa-4c25-aa72-0572e7007a01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdfabd43-0ffa-4c25-aa72-0572e7007a01?source=api-prod","cve":"CVE-2022-4140","affectedVersions":">=2.6.10,<=2.8.4","severity":"high"},{"advisoryId":"WPSECADV/WF/be6c08b9-bba7-4780-99b9-4b80e6b4872a/usc-e-shop","title":"Welcart e-Commerce < 1.5.3 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"be6c08b9-bba7-4780-99b9-4b80e6b4872a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be6c08b9-bba7-4780-99b9-4b80e6b4872a?source=api-prod","cve":"CVE-2015-7791","affectedVersions":"<1.5.3","severity":"high"},{"advisoryId":"WPSECADV/WF/c5eb9b1f-39d5-4c5d-8fb3-71d4bbe5f43a/usc-e-shop","title":"Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5eb9b1f-39d5-4c5d-8fb3-71d4bbe5f43a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5eb9b1f-39d5-4c5d-8fb3-71d4bbe5f43a?source=api-prod","cve":"CVE-2023-40219","affectedVersions":"<=2.8.21","severity":"high"},{"advisoryId":"WPSECADV/WF/d6046c06-9a77-450f-9cdf-c5239e73cb6b/usc-e-shop","title":"Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 17:10:52","sources":[{"name":"Wordfence","remoteId":"d6046c06-9a77-450f-9cdf-c5239e73cb6b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6046c06-9a77-450f-9cdf-c5239e73cb6b?source=api-prod","cve":"CVE-2026-87091","affectedVersions":"<=2.12.2","severity":"high"},{"advisoryId":"WPSECADV/WF/d6572568-5586-4ed9-b0e2-32509b42ed31/usc-e-shop","title":"Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6572568-5586-4ed9-b0e2-32509b42ed31"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6572568-5586-4ed9-b0e2-32509b42ed31?source=api-prod","affectedVersions":"<=2.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/d681fcaf-c7b3-496f-b0d8-a8ed48901cec/usc-e-shop","title":"Welcart e-Commerce <= 2.11.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-03-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"d681fcaf-c7b3-496f-b0d8-a8ed48901cec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d681fcaf-c7b3-496f-b0d8-a8ed48901cec?source=api-prod","cve":"CVE-2014-10016","affectedVersions":"<=2.11.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d82e856b-c8c9-4139-ad54-89368e3b7125/usc-e-shop","title":"Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"d82e856b-c8c9-4139-ad54-89368e3b7125"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d82e856b-c8c9-4139-ad54-89368e3b7125?source=api-prod","cve":"CVE-2021-4375","affectedVersions":"<2.2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/e5343bc9-5dcd-410b-a7b7-27734910ad3c/usc-e-shop","title":"Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5343bc9-5dcd-410b-a7b7-27734910ad3c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5343bc9-5dcd-410b-a7b7-27734910ad3c?source=api-prod","cve":"CVE-2025-58984","affectedVersions":"<=2.11.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/e7ecd712-a7b3-40e2-b982-be8b58e9b8c3/usc-e-shop","title":"Welcart e-Commerce <= 2.1.0 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-02-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"e7ecd712-a7b3-40e2-b982-be8b58e9b8c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e7ecd712-a7b3-40e2-b982-be8b58e9b8c3?source=api-prod","affectedVersions":"<=2.1.0","severity":"high"},{"advisoryId":"WPSECADV/WF/ec2edcdf-3a0c-40bc-8b33-1ad15cad5acb/usc-e-shop","title":"Welcart e-Commerce < 1.4.18 - Multiple Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec2edcdf-3a0c-40bc-8b33-1ad15cad5acb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec2edcdf-3a0c-40bc-8b33-1ad15cad5acb?source=api-prod","cve":"CVE-2015-2973","affectedVersions":"<1.4.18","severity":"high"},{"advisoryId":"WPSECADV/WF/f59004bb-b026-4137-a332-f46a09237e7b/usc-e-shop","title":"Welcart e-Commerce <= 2.9.4 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f59004bb-b026-4137-a332-f46a09237e7b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f59004bb-b026-4137-a332-f46a09237e7b?source=api-prod","affectedVersions":"<=2.9.4","severity":"high"},{"advisoryId":"WPSECADV/WF/f690e67c-119f-4ea6-9505-101e7f7a3dea/usc-e-shop","title":"Welcart e-Commerce <= 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f690e67c-119f-4ea6-9505-101e7f7a3dea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f690e67c-119f-4ea6-9505-101e7f7a3dea?source=api-prod","cve":"CVE-2023-5953","affectedVersions":"<=2.9.4","severity":"high"},{"advisoryId":"WPSECADV/WF/f87df7cc-54bb-454c-94be-c8c4768cbe44/usc-e-shop","title":"Welcart e-Commerce <= 2.8.4 - Authenticated (Subscriber+) Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f87df7cc-54bb-454c-94be-c8c4768cbe44"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f87df7cc-54bb-454c-94be-c8c4768cbe44?source=api-prod","cve":"CVE-2022-4236","affectedVersions":"<=2.8.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fe29d7bf-3cf8-429c-91d7-2a8038749c42/usc-e-shop","title":"Welcart e-Commerce <= 2.11.24 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"fe29d7bf-3cf8-429c-91d7-2a8038749c42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe29d7bf-3cf8-429c-91d7-2a8038749c42?source=api-prod","cve":"CVE-2025-62953","affectedVersions":"<=2.11.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/fe31346e-a06e-4b4d-b13c-7a98dca53274/usc-e-shop","title":"Welcart e-Commerce <= 2.11.16 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"fe31346e-a06e-4b4d-b13c-7a98dca53274"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe31346e-a06e-4b4d-b13c-7a98dca53274?source=api-prod","cve":"CVE-2025-54013","affectedVersions":"<=2.11.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/ff1f81e8-64ed-4330-9c76-1a8d2e2d307d/usc-e-shop","title":"Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-21 17:22:23","sources":[{"name":"Wordfence","remoteId":"ff1f81e8-64ed-4330-9c76-1a8d2e2d307d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ff1f81e8-64ed-4330-9c76-1a8d2e2d307d?source=api-prod","cve":"CVE-2025-10651","affectedVersions":"<=2.11.22","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/09a16956-5dab-4ef1-9037-fdd28bcc2e26/usc-e-shop","title":"Welcart e-Commerce < 2.12.1 - Unauthenticated Session Fixation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"09a16956-5dab-4ef1-9037-fdd28bcc2e26"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/09a16956-5dab-4ef1-9037-fdd28bcc2e26?source=api-prod","cve":"CVE-2025-15671","affectedVersions":"<2.12.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/0e78b5db-3f38-4ed7-9bec-6dd55d44f04f/usc-e-shop","title":"Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 14:35:00","sources":[{"name":"Wordfence","remoteId":"0e78b5db-3f38-4ed7-9bec-6dd55d44f04f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0e78b5db-3f38-4ed7-9bec-6dd55d44f04f?source=api-prod","cve":"CVE-2026-107752","affectedVersions":"<=2.12.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/0f23aa0e-eb1f-4310-9615-d67eb39389fe/usc-e-shop","title":"Welcart e-Commerce <=  2.9.1 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"0f23aa0e-eb1f-4310-9615-d67eb39389fe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0f23aa0e-eb1f-4310-9615-d67eb39389fe?source=api-prod","cve":"CVE-2014-10017","affectedVersions":"<=2.9.1","severity":"critical"},{"advisoryId":"WPSECADV/WF/103ce24e-1c21-4c25-b3d0-6f595bf58979/usc-e-shop","title":"Welcart e-Commerce <= 1.8.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"103ce24e-1c21-4c25-b3d0-6f595bf58979"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/103ce24e-1c21-4c25-b3d0-6f595bf58979?source=api-prod","cve":"CVE-2016-4827","affectedVersions":"<=1.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/162afd58-3534-401b-9119-c1c26e15cd0f/usc-e-shop","title":"Welcart e-Commerce <= 2.9.4 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"162afd58-3534-401b-9119-c1c26e15cd0f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/162afd58-3534-401b-9119-c1c26e15cd0f?source=api-prod","cve":"CVE-2023-5951","affectedVersions":"<=2.9.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/16a4ebde-7c92-4ad2-9c8d-3bef0a8c600b/usc-e-shop","title":"Welcart e-Commerce < 1.2.2 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-12-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"16a4ebde-7c92-4ad2-9c8d-3bef0a8c600b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16a4ebde-7c92-4ad2-9c8d-3bef0a8c600b?source=api-prod","cve":"CVE-2012-5177","affectedVersions":"<1.2.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2022fa8b-2b2a-43a3-9447-90eed326f187/usc-e-shop","title":"Welcart e-Commerce < 1.2.2 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2012-12-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"2022fa8b-2b2a-43a3-9447-90eed326f187"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2022fa8b-2b2a-43a3-9447-90eed326f187?source=api-prod","cve":"CVE-2012-5178","affectedVersions":"<1.2.2","severity":"high"},{"advisoryId":"WPSECADV/WF/23399606-20b6-4d0b-b613-06dc838dc1e7/usc-e-shop","title":"Welcart e-Commerce <= 2.9.4 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"23399606-20b6-4d0b-b613-06dc838dc1e7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23399606-20b6-4d0b-b613-06dc838dc1e7?source=api-prod","cve":"CVE-2023-5952","affectedVersions":"<=2.9.4","severity":"critical"},{"advisoryId":"WPSECADV/WF/251d4eb6-d87d-4d1e-9dac-30f24b4e65ef/usc-e-shop","title":"Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"251d4eb6-d87d-4d1e-9dac-30f24b4e65ef"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/251d4eb6-d87d-4d1e-9dac-30f24b4e65ef?source=api-prod","cve":"CVE-2026-111031","affectedVersions":"<2.12.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/26255cd9-2361-4d17-8d1b-9bdadcc69043/usc-e-shop","title":"Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"26255cd9-2361-4d17-8d1b-9bdadcc69043"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/26255cd9-2361-4d17-8d1b-9bdadcc69043?source=api-prod","cve":"CVE-2025-12979","affectedVersions":"<=2.11.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/2677cea6-d60d-4e10-afd7-e088a5592b19/usc-e-shop","title":"Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"2677cea6-d60d-4e10-afd7-e088a5592b19"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2677cea6-d60d-4e10-afd7-e088a5592b19?source=api-prod","cve":"CVE-2023-6120","affectedVersions":"<=2.9.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/2be23829-cbee-4e44-945d-14835dbba104/usc-e-shop","title":"Welcart e-Commerce <= 2.11.31 - Authenticated (Editor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-31 00:00:00","sources":[{"name":"Wordfence","remoteId":"2be23829-cbee-4e44-945d-14835dbba104"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2be23829-cbee-4e44-945d-14835dbba104?source=api-prod","cve":"CVE-2026-16065","affectedVersions":"<=2.11.31","severity":"medium"},{"advisoryId":"WPSECADV/WF/2d9d3588-9c71-485a-9183-3d1d4a936e03/usc-e-shop","title":"Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"2d9d3588-9c71-485a-9183-3d1d4a936e03"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d9d3588-9c71-485a-9183-3d1d4a936e03?source=api-prod","cve":"CVE-2026-15213","affectedVersions":"<2.11.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/2f8f6ade-84a2-4a42-9208-a74f5ebe19b3/usc-e-shop","title":"Welcart e-Commerce <= 1.8.2 - Authentication Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"2f8f6ade-84a2-4a42-9208-a74f5ebe19b3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f8f6ade-84a2-4a42-9208-a74f5ebe19b3?source=api-prod","cve":"CVE-2016-4828","affectedVersions":"<=1.8.2","severity":"critical"},{"advisoryId":"WPSECADV/WF/321d0121-5cc9-4736-89b0-228e45b48b48/usc-e-shop","title":"Welcart e-Commerce < 1.8.3 - Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"321d0121-5cc9-4736-89b0-228e45b48b48"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/321d0121-5cc9-4736-89b0-228e45b48b48?source=api-prod","cve":"CVE-2016-4825","affectedVersions":"<1.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/35dadb9c-f0c6-4b74-bb31-5e9d504b3db5/usc-e-shop","title":"Welcart e-Commerce <= 2.8.21 - Authenticated(level_5+) SQL Injection via get_logs\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"35dadb9c-f0c6-4b74-bb31-5e9d504b3db5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/35dadb9c-f0c6-4b74-bb31-5e9d504b3db5?source=api-prod","cve":"CVE-2023-43493","affectedVersions":"<2.8.22","severity":"high"},{"advisoryId":"WPSECADV/WF/3b71805c-15bb-4cde-b91f-4f3e9b7ab520/usc-e-shop","title":"Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"3b71805c-15bb-4cde-b91f-4f3e9b7ab520"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3b71805c-15bb-4cde-b91f-4f3e9b7ab520?source=api-prod","affectedVersions":"<=2.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/3f8f8319-d75f-4e71-90d4-1c60b5a8df90/usc-e-shop","title":"Welcart e-Commerce <= 2.11.13 - Authenticated (Editor+) Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-06-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"3f8f8319-d75f-4e71-90d4-1c60b5a8df90"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f8f8319-d75f-4e71-90d4-1c60b5a8df90?source=api-prod","cve":"CVE-2025-47511","affectedVersions":"<=2.11.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/4d59eedb-550f-44c1-a0cd-609c5661134d/usc-e-shop","title":"Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"4d59eedb-550f-44c1-a0cd-609c5661134d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d59eedb-550f-44c1-a0cd-609c5661134d?source=api-prod","cve":"CVE-2025-10649","affectedVersions":"<=2.11.21","severity":"medium"},{"advisoryId":"WPSECADV/WF/513f4a39-afba-4819-abf2-6ed168d11dfe/usc-e-shop","title":"Welcart e-Commerce <= 2.2.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-06-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"513f4a39-afba-4819-abf2-6ed168d11dfe"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/513f4a39-afba-4819-abf2-6ed168d11dfe?source=api-prod","cve":"CVE-2021-20734","affectedVersions":"<=2.2.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/518be2c6-36ca-4015-8b7f-451a806c7b1d/usc-e-shop","title":"Welcart e-Commerce <= 2.8.5 - Authenticated (Subscriber+) Information Disclosure and PHAR deserialization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"518be2c6-36ca-4015-8b7f-451a806c7b1d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/518be2c6-36ca-4015-8b7f-451a806c7b1d?source=api-prod","cve":"CVE-2022-4237","affectedVersions":"<=2.8.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/527630bf-d034-4fcd-8fbe-01b388701049/usc-e-shop","title":"Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-31 20:54:53","sources":[{"name":"Wordfence","remoteId":"527630bf-d034-4fcd-8fbe-01b388701049"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/527630bf-d034-4fcd-8fbe-01b388701049?source=api-prod","cve":"CVE-2026-19914","affectedVersions":"<=2.12.1","severity":"high"},{"advisoryId":"WPSECADV/WF/5a1391b1-b0c3-4cf4-8850-d9367d90ec9e/usc-e-shop","title":"Welcart e-Commerce <= 2.11.28 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"5a1391b1-b0c3-4cf4-8850-d9367d90ec9e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5a1391b1-b0c3-4cf4-8850-d9367d90ec9e?source=api-prod","cve":"CVE-2026-49775","affectedVersions":"<=2.11.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/5f7b15ba-5d7b-448d-ae95-b7d3ae7ff1c0/usc-e-shop","title":"Welcart e-Commerce <= 2.11.1 - Authenticated (Admin+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-09-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5f7b15ba-5d7b-448d-ae95-b7d3ae7ff1c0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5f7b15ba-5d7b-448d-ae95-b7d3ae7ff1c0?source=api-prod","cve":"CVE-2024-42404","affectedVersions":"<=2.11.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/61799fbc-05dc-4de9-90f9-8712ba554607/usc-e-shop","title":"Welcart e-Commerce <= 2.9.14 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"61799fbc-05dc-4de9-90f9-8712ba554607"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61799fbc-05dc-4de9-90f9-8712ba554607?source=api-prod","cve":"CVE-2024-32144","affectedVersions":"<=2.9.14","severity":"medium"},{"advisoryId":"WPSECADV/WF/618838c1-4fdf-4cf2-b00d-82b50e595692/usc-e-shop","title":"Welcart e-Commerce < 2.12.6 - Authenticated (Editor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"618838c1-4fdf-4cf2-b00d-82b50e595692"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/618838c1-4fdf-4cf2-b00d-82b50e595692?source=api-prod","cve":"CVE-2026-111027","affectedVersions":"<2.12.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/6573ebcd-5cf6-4d40-8768-911304744d11/usc-e-shop","title":"Welcart e-Commerce <= 2.12.3 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"6573ebcd-5cf6-4d40-8768-911304744d11"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6573ebcd-5cf6-4d40-8768-911304744d11?source=api-prod","cve":"CVE-2026-96761","affectedVersions":"<=2.12.3","severity":"high"},{"advisoryId":"WPSECADV/WF/671f5ba5-1f18-49fa-aa97-eaebdb3417bb/usc-e-shop","title":"Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"671f5ba5-1f18-49fa-aa97-eaebdb3417bb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/671f5ba5-1f18-49fa-aa97-eaebdb3417bb?source=api-prod","cve":"CVE-2021-4355","affectedVersions":"<2.2.8","severity":"high"},{"advisoryId":"WPSECADV/WF/6b2f6506-1a45-4967-9972-283505df25af/usc-e-shop","title":"Welcart e-Commerce <= 2.11.33 - Authenticated (Author+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b2f6506-1a45-4967-9972-283505df25af"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b2f6506-1a45-4967-9972-283505df25af?source=api-prod","cve":"CVE-2026-16066","affectedVersions":"<=2.11.33","severity":"medium"},{"advisoryId":"WPSECADV/WF/6c26270b-a0a7-4877-aa66-bffe260003df/usc-e-shop","title":"Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-02-11 21:55:58","sources":[{"name":"Wordfence","remoteId":"6c26270b-a0a7-4877-aa66-bffe260003df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6c26270b-a0a7-4877-aa66-bffe260003df?source=api-prod","cve":"CVE-2025-0511","affectedVersions":"<=2.11.9","severity":"high"},{"advisoryId":"WPSECADV/WF/6c694bce-e389-492a-827d-ae5293730612/usc-e-shop","title":"Welcart e-Commerce <= 1.9.35 - PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-11-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"6c694bce-e389-492a-827d-ae5293730612"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6c694bce-e389-492a-827d-ae5293730612?source=api-prod","cve":"CVE-2020-28339","affectedVersions":"<1.9.36","severity":"high"},{"advisoryId":"WPSECADV/WF/716a7c3c-2e26-4da9-a299-7dcbaa7e4895/usc-e-shop","title":"Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 17:58:58","sources":[{"name":"Wordfence","remoteId":"716a7c3c-2e26-4da9-a299-7dcbaa7e4895"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/716a7c3c-2e26-4da9-a299-7dcbaa7e4895?source=api-prod","cve":"CVE-2026-19887","affectedVersions":"<=2.12.1","severity":"high"},{"advisoryId":"WPSECADV/WF/772c9330-97d5-42d5-a49c-d9a86a14b235/usc-e-shop","title":"Welcart e-Commerce <= 2.8.10 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"772c9330-97d5-42d5-a49c-d9a86a14b235"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/772c9330-97d5-42d5-a49c-d9a86a14b235?source=api-prod","cve":"CVE-2023-22705","affectedVersions":"<=2.8.10","severity":"high"},{"advisoryId":"WPSECADV/WF/7b86a774-a420-41a8-85ad-44fe8b32d4c2/usc-e-shop","title":"Welcart e-Commerce < 1.8.3 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2016-06-24 00:00:00","sources":[{"name":"Wordfence","remoteId":"7b86a774-a420-41a8-85ad-44fe8b32d4c2"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7b86a774-a420-41a8-85ad-44fe8b32d4c2?source=api-prod","cve":"CVE-2016-4826","affectedVersions":"<1.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/7e8ab165-57b8-4509-86b8-6e5226812264/usc-e-shop","title":"Welcart e-Commerce 2.6.0-2.7.7 - Information Disclosure via Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"7e8ab165-57b8-4509-86b8-6e5226812264"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7e8ab165-57b8-4509-86b8-6e5226812264?source=api-prod","cve":"CVE-2022-41840","affectedVersions":">=2.6.0,<=2.7.7","severity":"high"},{"advisoryId":"WPSECADV/WF/7f4c9a5b-93ec-4979-921a-91134cb09566/usc-e-shop","title":"Welcart e-Commerce <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"7f4c9a5b-93ec-4979-921a-91134cb09566"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7f4c9a5b-93ec-4979-921a-91134cb09566?source=api-prod","cve":"CVE-2022-4655","affectedVersions":"<=2.8.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/829facc1-443d-481f-b23f-7a93938dd866/usc-e-shop","title":"Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-09 18:30:04","sources":[{"name":"Wordfence","remoteId":"829facc1-443d-481f-b23f-7a93938dd866"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/829facc1-443d-481f-b23f-7a93938dd866?source=api-prod","cve":"CVE-2025-9367","affectedVersions":"<=2.11.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/91f86c22-94db-4c43-985a-2f3dd96ece21/usc-e-shop","title":"Welcart e-Commerce <= 2.9.5 - Authenticated (Administrator+) PHP Object Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"91f86c22-94db-4c43-985a-2f3dd96ece21"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/91f86c22-94db-4c43-985a-2f3dd96ece21?source=api-prod","affectedVersions":"<2.9.6","severity":"high"},{"advisoryId":"WPSECADV/WF/9ed23152-30bd-40ab-947b-f773eb2a6b4f/usc-e-shop","title":"Welcart e-Commerce <= 2.11.31 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"9ed23152-30bd-40ab-947b-f773eb2a6b4f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9ed23152-30bd-40ab-947b-f773eb2a6b4f?source=api-prod","cve":"CVE-2026-27539","affectedVersions":"<=2.11.31","severity":"high"},{"advisoryId":"WPSECADV/WF/a328643a-ab12-427e-9bcd-2d40738afb61/usc-e-shop","title":"Welcart e-Commerce <= 2.9.3 - Authenticated(Editor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"a328643a-ab12-427e-9bcd-2d40738afb61"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a328643a-ab12-427e-9bcd-2d40738afb61?source=api-prod","cve":"CVE-2023-50847","affectedVersions":"<2.9.4","severity":"high"},{"advisoryId":"WPSECADV/WF/a908ac17-666f-4725-86f4-c9af4589fb69/usc-e-shop","title":"Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"a908ac17-666f-4725-86f4-c9af4589fb69"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a908ac17-666f-4725-86f4-c9af4589fb69?source=api-prod","cve":"CVE-2023-43610","affectedVersions":"<2.8.22","severity":"high"},{"advisoryId":"WPSECADV/WF/ad0ed141-3d17-4fff-b788-7ff43f79d04c/usc-e-shop","title":"Welcart e-Commerce <= 2.8.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"ad0ed141-3d17-4fff-b788-7ff43f79d04c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ad0ed141-3d17-4fff-b788-7ff43f79d04c?source=api-prod","cve":"CVE-2022-3935","affectedVersions":"<=2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/b27b2e40-c703-4fa0-bff0-788e7a0351c6/usc-e-shop","title":"Welcart e-Commerce <= 2.8.3 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"b27b2e40-c703-4fa0-bff0-788e7a0351c6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b27b2e40-c703-4fa0-bff0-788e7a0351c6?source=api-prod","cve":"CVE-2022-3946","affectedVersions":"<=2.8.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/b4f8c1a4-a309-4852-a066-0644ce175abc/usc-e-shop","title":"Welcart e-Commerce <= 2.11.16 - Authenticated (Editor+) PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"b4f8c1a4-a309-4852-a066-0644ce175abc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4f8c1a4-a309-4852-a066-0644ce175abc?source=api-prod","cve":"CVE-2025-54012","affectedVersions":"<=2.11.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/bdfabd43-0ffa-4c25-aa72-0572e7007a01/usc-e-shop","title":"Welcart e-Commerce 2.6.10-2.8.4 - Information Disclosure via Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"bdfabd43-0ffa-4c25-aa72-0572e7007a01"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdfabd43-0ffa-4c25-aa72-0572e7007a01?source=api-prod","cve":"CVE-2022-4140","affectedVersions":">=2.6.10,<=2.8.4","severity":"high"},{"advisoryId":"WPSECADV/WF/be6c08b9-bba7-4780-99b9-4b80e6b4872a/usc-e-shop","title":"Welcart e-Commerce < 1.5.3 - SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-12-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"be6c08b9-bba7-4780-99b9-4b80e6b4872a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/be6c08b9-bba7-4780-99b9-4b80e6b4872a?source=api-prod","cve":"CVE-2015-7791","affectedVersions":"<1.5.3","severity":"high"},{"advisoryId":"WPSECADV/WF/c5eb9b1f-39d5-4c5d-8fb3-71d4bbe5f43a/usc-e-shop","title":"Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-09-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"c5eb9b1f-39d5-4c5d-8fb3-71d4bbe5f43a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5eb9b1f-39d5-4c5d-8fb3-71d4bbe5f43a?source=api-prod","cve":"CVE-2023-40219","affectedVersions":"<=2.8.21","severity":"high"},{"advisoryId":"WPSECADV/WF/d6046c06-9a77-450f-9cdf-c5239e73cb6b/usc-e-shop","title":"Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-02 17:10:52","sources":[{"name":"Wordfence","remoteId":"d6046c06-9a77-450f-9cdf-c5239e73cb6b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6046c06-9a77-450f-9cdf-c5239e73cb6b?source=api-prod","cve":"CVE-2026-87091","affectedVersions":"<=2.12.2","severity":"high"},{"advisoryId":"WPSECADV/WF/d6572568-5586-4ed9-b0e2-32509b42ed31/usc-e-shop","title":"Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-11-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"d6572568-5586-4ed9-b0e2-32509b42ed31"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d6572568-5586-4ed9-b0e2-32509b42ed31?source=api-prod","affectedVersions":"<=2.8.3","severity":"high"},{"advisoryId":"WPSECADV/WF/d681fcaf-c7b3-496f-b0d8-a8ed48901cec/usc-e-shop","title":"Welcart e-Commerce <= 2.11.1 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-03-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"d681fcaf-c7b3-496f-b0d8-a8ed48901cec"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d681fcaf-c7b3-496f-b0d8-a8ed48901cec?source=api-prod","cve":"CVE-2014-10016","affectedVersions":"<=2.11.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d82e856b-c8c9-4139-ad54-89368e3b7125/usc-e-shop","title":"Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-08-06 00:00:00","sources":[{"name":"Wordfence","remoteId":"d82e856b-c8c9-4139-ad54-89368e3b7125"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d82e856b-c8c9-4139-ad54-89368e3b7125?source=api-prod","cve":"CVE-2021-4375","affectedVersions":"<2.2.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/e5343bc9-5dcd-410b-a7b7-27734910ad3c/usc-e-shop","title":"Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"e5343bc9-5dcd-410b-a7b7-27734910ad3c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5343bc9-5dcd-410b-a7b7-27734910ad3c?source=api-prod","cve":"CVE-2025-58984","affectedVersions":"<=2.11.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/e7ecd712-a7b3-40e2-b982-be8b58e9b8c3/usc-e-shop","title":"Welcart e-Commerce <= 2.1.0 - SQL Injection\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-02-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"e7ecd712-a7b3-40e2-b982-be8b58e9b8c3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e7ecd712-a7b3-40e2-b982-be8b58e9b8c3?source=api-prod","affectedVersions":"<=2.1.0","severity":"high"},{"advisoryId":"WPSECADV/WF/ec2edcdf-3a0c-40bc-8b33-1ad15cad5acb/usc-e-shop","title":"Welcart e-Commerce < 1.4.18 - Multiple Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"ec2edcdf-3a0c-40bc-8b33-1ad15cad5acb"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec2edcdf-3a0c-40bc-8b33-1ad15cad5acb?source=api-prod","cve":"CVE-2015-2973","affectedVersions":"<1.4.18","severity":"high"},{"advisoryId":"WPSECADV/WF/ed505037-b91c-42af-9316-1eed341ebef8/usc-e-shop","title":"Welcart e-Commerce < 2.12.6 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"ed505037-b91c-42af-9316-1eed341ebef8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed505037-b91c-42af-9316-1eed341ebef8?source=api-prod","cve":"CVE-2026-111032","affectedVersions":"<2.12.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/f59004bb-b026-4137-a332-f46a09237e7b/usc-e-shop","title":"Welcart e-Commerce <= 2.9.4 - Cross-Site Request Forgery\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f59004bb-b026-4137-a332-f46a09237e7b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f59004bb-b026-4137-a332-f46a09237e7b?source=api-prod","affectedVersions":"<=2.9.4","severity":"high"},{"advisoryId":"WPSECADV/WF/f690e67c-119f-4ea6-9505-101e7f7a3dea/usc-e-shop","title":"Welcart e-Commerce <= 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"f690e67c-119f-4ea6-9505-101e7f7a3dea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f690e67c-119f-4ea6-9505-101e7f7a3dea?source=api-prod","cve":"CVE-2023-5953","affectedVersions":"<=2.9.4","severity":"high"},{"advisoryId":"WPSECADV/WF/f87df7cc-54bb-454c-94be-c8c4768cbe44/usc-e-shop","title":"Welcart e-Commerce <= 2.8.4 - Authenticated (Subscriber+) Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"f87df7cc-54bb-454c-94be-c8c4768cbe44"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f87df7cc-54bb-454c-94be-c8c4768cbe44?source=api-prod","cve":"CVE-2022-4236","affectedVersions":"<=2.8.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/fe29d7bf-3cf8-429c-91d7-2a8038749c42/usc-e-shop","title":"Welcart e-Commerce <= 2.11.24 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"fe29d7bf-3cf8-429c-91d7-2a8038749c42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe29d7bf-3cf8-429c-91d7-2a8038749c42?source=api-prod","cve":"CVE-2025-62953","affectedVersions":"<=2.11.24","severity":"medium"},{"advisoryId":"WPSECADV/WF/fe31346e-a06e-4b4d-b13c-7a98dca53274/usc-e-shop","title":"Welcart e-Commerce <= 2.11.16 - Authenticated (Editor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"fe31346e-a06e-4b4d-b13c-7a98dca53274"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe31346e-a06e-4b4d-b13c-7a98dca53274?source=api-prod","cve":"CVE-2025-54013","affectedVersions":"<=2.11.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/ff1f81e8-64ed-4330-9c76-1a8d2e2d307d/usc-e-shop","title":"Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-10-21 17:22:23","sources":[{"name":"Wordfence","remoteId":"ff1f81e8-64ed-4330-9c76-1a8d2e2d307d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ff1f81e8-64ed-4330-9c76-1a8d2e2d307d?source=api-prod","cve":"CVE-2025-10651","affectedVersions":"<=2.11.22","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_77632d706179636f6e6971811c9dc5_gen.json b/internal/data/assets/plugin_77632d706179636f6e6971811c9dc5_gen.json
new file mode 100644
index 00000000..4d9bfad4
--- /dev/null
+++ b/internal/data/assets/plugin_77632d706179636f6e6971811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/b9d54437-8766-478f-8ab1-282ca8ca4dc4/wc-payconiq","title":"Payconiq <= 1.0.4 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"b9d54437-8766-478f-8ab1-282ca8ca4dc4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9d54437-8766-478f-8ab1-282ca8ca4dc4?source=api-prod","cve":"CVE-2026-103372","affectedVersions":"<=1.0.4","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_7765666f726d73811c9dc5_gen.json b/internal/data/assets/plugin_7765666f726d73811c9dc5_gen.json
index f935a61d..be2a8786 100644
--- a/internal/data/assets/plugin_7765666f726d73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_7765666f726d73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0b85fc9c-f98d-44c5-8c5e-b9541c6c83b0/weforms","title":"weForms <= 1.6.25 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b85fc9c-f98d-44c5-8c5e-b9541c6c83b0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b85fc9c-f98d-44c5-8c5e-b9541c6c83b0?source=api-prod","cve":"CVE-2025-69028","affectedVersions":"<=1.6.25","severity":"medium"},{"advisoryId":"WPSECADV/WF/379a5016-3968-4b28-8d6e-0f517e419016/weforms","title":"Various Plugins <= Various Version - Use of Polyfill.io\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"379a5016-3968-4b28-8d6e-0f517e419016"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/379a5016-3968-4b28-8d6e-0f517e419016?source=api-prod","affectedVersions":"<=1.6.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/4bc15539-d816-4873-9684-862c7c9fcda7/weforms","title":"weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.26 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"4bc15539-d816-4873-9684-862c7c9fcda7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc15539-d816-4873-9684-862c7c9fcda7?source=api-prod","cve":"CVE-2026-32484","affectedVersions":"<=1.6.26","severity":"high"},{"advisoryId":"WPSECADV/WF/53bffb82-b9df-40a0-947b-ecae512f363a/weforms","title":"WeForms <= 1.4.7 - CSV injection via form entry\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-08-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"53bffb82-b9df-40a0-947b-ecae512f363a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53bffb82-b9df-40a0-947b-ecae512f363a?source=api-prod","cve":"CVE-2020-22276","affectedVersions":"<=1.4.7","severity":"high"},{"advisoryId":"WPSECADV/WF/5c71dc22-0b1b-4628-bbab-4154714e8804/weforms","title":"weForms <= 1.6.20 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5c71dc22-0b1b-4628-bbab-4154714e8804"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5c71dc22-0b1b-4628-bbab-4154714e8804?source=api-prod","cve":"CVE-2024-30512","affectedVersions":"<=1.6.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/7c44efe0-bdc0-42e0-9bdd-cf25bff1d2d5/weforms","title":"weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.17 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"7c44efe0-bdc0-42e0-9bdd-cf25bff1d2d5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7c44efe0-bdc0-42e0-9bdd-cf25bff1d2d5?source=api-prod","cve":"CVE-2023-50896","affectedVersions":"<=1.6.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9e67057-7086-4108-a629-87610a12ec19/weforms","title":"weForms <= 1.6.13 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9e67057-7086-4108-a629-87610a12ec19"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9e67057-7086-4108-a629-87610a12ec19?source=api-prod","cve":"CVE-2022-2395","affectedVersions":"<=1.6.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb7478fa-418d-43ce-8db7-b7ede06574df/weforms","title":"weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 19:37:37","sources":[{"name":"Wordfence","remoteId":"cb7478fa-418d-43ce-8db7-b7ede06574df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb7478fa-418d-43ce-8db7-b7ede06574df?source=api-prod","cve":"CVE-2026-110253","affectedVersions":"<=1.6.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/e97854ca-b24f-4893-862d-f8e975752175/weforms","title":"weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 17:12:51","sources":[{"name":"Wordfence","remoteId":"e97854ca-b24f-4893-862d-f8e975752175"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e97854ca-b24f-4893-862d-f8e975752175?source=api-prod","cve":"CVE-2026-2707","affectedVersions":"<=1.6.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2b7258e-c594-415a-a872-d5b28397e40d/weforms","title":"weForms <= 1.6.18 - Missing Authorization via export_form_entries\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2b7258e-c594-415a-a872-d5b28397e40d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2b7258e-c594-415a-a872-d5b28397e40d?source=api-prod","cve":"CVE-2023-51524","affectedVersions":"<=1.6.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/f436ab65-a59c-4b2a-abc8-a7fc038678dd/weforms","title":"weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f436ab65-a59c-4b2a-abc8-a7fc038678dd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f436ab65-a59c-4b2a-abc8-a7fc038678dd?source=api-prod","cve":"CVE-2024-0386","affectedVersions":"<=1.6.21","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0b85fc9c-f98d-44c5-8c5e-b9541c6c83b0/weforms","title":"weForms <= 1.6.25 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-12-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0b85fc9c-f98d-44c5-8c5e-b9541c6c83b0"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0b85fc9c-f98d-44c5-8c5e-b9541c6c83b0?source=api-prod","cve":"CVE-2025-69028","affectedVersions":"<=1.6.25","severity":"medium"},{"advisoryId":"WPSECADV/WF/379a5016-3968-4b28-8d6e-0f517e419016/weforms","title":"Various Plugins <= Various Version - Use of Polyfill.io\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-06-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"379a5016-3968-4b28-8d6e-0f517e419016"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/379a5016-3968-4b28-8d6e-0f517e419016?source=api-prod","affectedVersions":"<=1.6.23","severity":"medium"},{"advisoryId":"WPSECADV/WF/4bc15539-d816-4873-9684-862c7c9fcda7/weforms","title":"weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.26 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"4bc15539-d816-4873-9684-862c7c9fcda7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc15539-d816-4873-9684-862c7c9fcda7?source=api-prod","cve":"CVE-2026-32484","affectedVersions":"<=1.6.26","severity":"high"},{"advisoryId":"WPSECADV/WF/53bffb82-b9df-40a0-947b-ecae512f363a/weforms","title":"WeForms <= 1.4.7 - CSV injection via form entry\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2020-08-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"53bffb82-b9df-40a0-947b-ecae512f363a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53bffb82-b9df-40a0-947b-ecae512f363a?source=api-prod","cve":"CVE-2020-22276","affectedVersions":"<=1.4.7","severity":"high"},{"advisoryId":"WPSECADV/WF/5c71dc22-0b1b-4628-bbab-4154714e8804/weforms","title":"weForms <= 1.6.20 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"5c71dc22-0b1b-4628-bbab-4154714e8804"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5c71dc22-0b1b-4628-bbab-4154714e8804?source=api-prod","cve":"CVE-2024-30512","affectedVersions":"<=1.6.20","severity":"medium"},{"advisoryId":"WPSECADV/WF/7c44efe0-bdc0-42e0-9bdd-cf25bff1d2d5/weforms","title":"weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.17 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"7c44efe0-bdc0-42e0-9bdd-cf25bff1d2d5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7c44efe0-bdc0-42e0-9bdd-cf25bff1d2d5?source=api-prod","cve":"CVE-2023-50896","affectedVersions":"<=1.6.17","severity":"medium"},{"advisoryId":"WPSECADV/WF/a9e67057-7086-4108-a629-87610a12ec19/weforms","title":"weForms <= 1.6.13 - Authenticated (Admin+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-07-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"a9e67057-7086-4108-a629-87610a12ec19"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a9e67057-7086-4108-a629-87610a12ec19?source=api-prod","cve":"CVE-2022-2395","affectedVersions":"<=1.6.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/cb7478fa-418d-43ce-8db7-b7ede06574df/weforms","title":"weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-16 19:37:37","sources":[{"name":"Wordfence","remoteId":"cb7478fa-418d-43ce-8db7-b7ede06574df"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb7478fa-418d-43ce-8db7-b7ede06574df?source=api-prod","cve":"CVE-2026-110253","affectedVersions":"<=1.6.28","severity":"medium"},{"advisoryId":"WPSECADV/WF/d83b06f5-b9e3-4fe9-b738-e718c79c00a6/weforms","title":"weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.28 - Unauthenticated Arbitrary File Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"d83b06f5-b9e3-4fe9-b738-e718c79c00a6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d83b06f5-b9e3-4fe9-b738-e718c79c00a6?source=api-prod","cve":"CVE-2026-111833","affectedVersions":"<=1.6.28","severity":"critical"},{"advisoryId":"WPSECADV/WF/e97854ca-b24f-4893-862d-f8e975752175/weforms","title":"weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-03-10 17:12:51","sources":[{"name":"Wordfence","remoteId":"e97854ca-b24f-4893-862d-f8e975752175"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e97854ca-b24f-4893-862d-f8e975752175?source=api-prod","cve":"CVE-2026-2707","affectedVersions":"<=1.6.27","severity":"medium"},{"advisoryId":"WPSECADV/WF/f2b7258e-c594-415a-a872-d5b28397e40d/weforms","title":"weForms <= 1.6.18 - Missing Authorization via export_form_entries\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-12-27 00:00:00","sources":[{"name":"Wordfence","remoteId":"f2b7258e-c594-415a-a872-d5b28397e40d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2b7258e-c594-415a-a872-d5b28397e40d?source=api-prod","cve":"CVE-2023-51524","affectedVersions":"<=1.6.18","severity":"medium"},{"advisoryId":"WPSECADV/WF/f436ab65-a59c-4b2a-abc8-a7fc038678dd/weforms","title":"weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"f436ab65-a59c-4b2a-abc8-a7fc038678dd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f436ab65-a59c-4b2a-abc8-a7fc038678dd?source=api-prod","cve":"CVE-2024-0386","affectedVersions":"<=1.6.21","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_77686f6c6573616c6578811c9dc5_gen.json b/internal/data/assets/plugin_77686f6c6573616c6578811c9dc5_gen.json
index ccee6d06..587835d3 100644
--- a/internal/data/assets/plugin_77686f6c6573616c6578811c9dc5_gen.json
+++ b/internal/data/assets/plugin_77686f6c6573616c6578811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0cf7ec81-625b-4abf-9304-256701e933ee/wholesalex","title":"WholesaleX <= 1.3.2 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0cf7ec81-625b-4abf-9304-256701e933ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0cf7ec81-625b-4abf-9304-256701e933ee?source=api-prod","cve":"CVE-2024-30542","affectedVersions":"<=1.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2294bec1-c469-4190-bb50-2f64be0539c5/wholesalex","title":"WholesaleX <= 3.0.8 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"2294bec1-c469-4190-bb50-2f64be0539c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2294bec1-c469-4190-bb50-2f64be0539c5?source=api-prod","cve":"CVE-2026-111956","affectedVersions":"<=3.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/64df8260-603b-48ba-b88b-f89994dd8329/wholesalex","title":"WholesaleX <= 1.3.1 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"64df8260-603b-48ba-b88b-f89994dd8329"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64df8260-603b-48ba-b88b-f89994dd8329?source=api-prod","cve":"CVE-2024-30234","affectedVersions":"<=1.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/710f663a-c8ff-457b-8b3f-4f6601ba321f/wholesalex","title":"WholesaleX <= 1.3.1 - Sensitive Information Exposure via export_users\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"710f663a-c8ff-457b-8b3f-4f6601ba321f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/710f663a-c8ff-457b-8b3f-4f6601ba321f?source=api-prod","cve":"CVE-2024-30233","affectedVersions":"<=1.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3b9464c-dcc4-4ae8-816f-1572f84dfe08/wholesalex","title":"WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3b9464c-dcc4-4ae8-816f-1572f84dfe08"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3b9464c-dcc4-4ae8-816f-1572f84dfe08?source=api-prod","cve":"CVE-2026-8145","affectedVersions":"<=3.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/d4bce9d1-38b9-4c25-b5dc-fd9dedfc3ede/wholesalex","title":"WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"d4bce9d1-38b9-4c25-b5dc-fd9dedfc3ede"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d4bce9d1-38b9-4c25-b5dc-fd9dedfc3ede?source=api-prod","cve":"CVE-2024-30224","affectedVersions":"<=1.3.2","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0cf7ec81-625b-4abf-9304-256701e933ee/wholesalex","title":"WholesaleX <= 1.3.2 - Unauthenticated Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-29 00:00:00","sources":[{"name":"Wordfence","remoteId":"0cf7ec81-625b-4abf-9304-256701e933ee"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0cf7ec81-625b-4abf-9304-256701e933ee?source=api-prod","cve":"CVE-2024-30542","affectedVersions":"<=1.3.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/2294bec1-c469-4190-bb50-2f64be0539c5/wholesalex","title":"WholesaleX <= 3.0.8 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"2294bec1-c469-4190-bb50-2f64be0539c5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2294bec1-c469-4190-bb50-2f64be0539c5?source=api-prod","cve":"CVE-2026-111956","affectedVersions":"<=3.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/64df8260-603b-48ba-b88b-f89994dd8329/wholesalex","title":"WholesaleX <= 1.3.1 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX actions\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"64df8260-603b-48ba-b88b-f89994dd8329"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/64df8260-603b-48ba-b88b-f89994dd8329?source=api-prod","cve":"CVE-2024-30234","affectedVersions":"<=1.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/710f663a-c8ff-457b-8b3f-4f6601ba321f/wholesalex","title":"WholesaleX <= 1.3.1 - Sensitive Information Exposure via export_users\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"710f663a-c8ff-457b-8b3f-4f6601ba321f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/710f663a-c8ff-457b-8b3f-4f6601ba321f?source=api-prod","cve":"CVE-2024-30233","affectedVersions":"<=1.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/b75c9f57-d08e-4dd8-a541-92d5ed5de19b/wholesalex","title":"WholesaleX – All-in-One B2B Solution with Wholesale Pricing < 3.0.9 - Unauthenticated Account Activation Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"b75c9f57-d08e-4dd8-a541-92d5ed5de19b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b75c9f57-d08e-4dd8-a541-92d5ed5de19b?source=api-prod","cve":"CVE-2026-111955","affectedVersions":"<3.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/d3b9464c-dcc4-4ae8-816f-1572f84dfe08/wholesalex","title":"WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"d3b9464c-dcc4-4ae8-816f-1572f84dfe08"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3b9464c-dcc4-4ae8-816f-1572f84dfe08?source=api-prod","cve":"CVE-2026-8145","affectedVersions":"<=3.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/d4bce9d1-38b9-4c25-b5dc-fd9dedfc3ede/wholesalex","title":"WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"d4bce9d1-38b9-4c25-b5dc-fd9dedfc3ede"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d4bce9d1-38b9-4c25-b5dc-fd9dedfc3ede?source=api-prod","cve":"CVE-2024-30224","affectedVersions":"<=1.3.2","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_77696c642d61707269636f742d6c6f67696e811c9dc5_gen.json b/internal/data/assets/plugin_77696c642d61707269636f742d6c6f67696e811c9dc5_gen.json
new file mode 100644
index 00000000..526fe342
--- /dev/null
+++ b/internal/data/assets/plugin_77696c642d61707269636f742d6c6f67696e811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/9adbe55e-f1a1-4fa8-b28d-539d90d81c68/wild-apricot-login","title":"Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 14:44:24","sources":[{"name":"Wordfence","remoteId":"9adbe55e-f1a1-4fa8-b28d-539d90d81c68"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9adbe55e-f1a1-4fa8-b28d-539d90d81c68?source=api-prod","cve":"CVE-2026-93757","affectedVersions":"<=1.0.18","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_776f6f2d63617264636f6d2d7061796d656e742d67617465776179811c9dc5_gen.json b/internal/data/assets/plugin_776f6f2d63617264636f6d2d7061796d656e742d67617465776179811c9dc5_gen.json
index b0500b1b..6177a49c 100644
--- a/internal/data/assets/plugin_776f6f2d63617264636f6d2d7061796d656e742d67617465776179811c9dc5_gen.json
+++ b/internal/data/assets/plugin_776f6f2d63617264636f6d2d7061796d656e742d67617465776179811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0cf614a2-d5fe-4881-9a88-c993da58ca2a/woo-cardcom-payment-gateway","title":"CardCom Payment Gateway <= 3.5.0.4 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"0cf614a2-d5fe-4881-9a88-c993da58ca2a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0cf614a2-d5fe-4881-9a88-c993da58ca2a?source=api-prod","cve":"CVE-2025-57976","affectedVersions":"<=3.5.0.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0cf614a2-d5fe-4881-9a88-c993da58ca2a/woo-cardcom-payment-gateway","title":"CardCom Payment Gateway <= 3.5.1.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"0cf614a2-d5fe-4881-9a88-c993da58ca2a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0cf614a2-d5fe-4881-9a88-c993da58ca2a?source=api-prod","cve":"CVE-2025-57976","affectedVersions":"<=3.5.1.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_776f6f2d636172742d6162616e646f6e6d656e742d7265636f76657279811c9dc5_gen.json b/internal/data/assets/plugin_776f6f2d636172742d6162616e646f6e6d656e742d7265636f76657279811c9dc5_gen.json
index a59a1d3d..615a5666 100644
--- a/internal/data/assets/plugin_776f6f2d636172742d6162616e646f6e6d656e742d7265636f76657279811c9dc5_gen.json
+++ b/internal/data/assets/plugin_776f6f2d636172742d6162616e646f6e6d656e742d7265636f76657279811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/51aec830-1ef7-43e6-af85-ef5b7d3efd31/woo-cart-abandonment-recovery","title":"Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails < 2.1.4 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"51aec830-1ef7-43e6-af85-ef5b7d3efd31"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51aec830-1ef7-43e6-af85-ef5b7d3efd31?source=api-prod","cve":"CVE-2026-96900","affectedVersions":"<2.1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/6a466c8f-835d-4d37-a273-7b5689dfbcea/woo-cart-abandonment-recovery","title":"WooCommerce Cart Abandonment Recovery <= 1.2.26 - Cross-Site Request Forgery to Templates/Abandoned Orders Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"6a466c8f-835d-4d37-a273-7b5689dfbcea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6a466c8f-835d-4d37-a273-7b5689dfbcea?source=api-prod","cve":"CVE-2024-2322","affectedVersions":"<=1.2.26","severity":"medium"},{"advisoryId":"WPSECADV/WF/868c178f-9389-4da0-8ebb-ee94f025039f/woo-cart-abandonment-recovery","title":"Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails < 2.1.0 - Authenticated (Shop Manager+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"868c178f-9389-4da0-8ebb-ee94f025039f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/868c178f-9389-4da0-8ebb-ee94f025039f?source=api-prod","cve":"CVE-2026-39470","affectedVersions":"<2.1.0","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/51aec830-1ef7-43e6-af85-ef5b7d3efd31/woo-cart-abandonment-recovery","title":"Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails < 2.1.4 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"51aec830-1ef7-43e6-af85-ef5b7d3efd31"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/51aec830-1ef7-43e6-af85-ef5b7d3efd31?source=api-prod","cve":"CVE-2026-96900","affectedVersions":"<2.1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/6a466c8f-835d-4d37-a273-7b5689dfbcea/woo-cart-abandonment-recovery","title":"WooCommerce Cart Abandonment Recovery <= 1.2.26 - Cross-Site Request Forgery to Templates/Abandoned Orders Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"6a466c8f-835d-4d37-a273-7b5689dfbcea"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6a466c8f-835d-4d37-a273-7b5689dfbcea?source=api-prod","cve":"CVE-2024-2322","affectedVersions":"<=1.2.26","severity":"medium"},{"advisoryId":"WPSECADV/WF/868c178f-9389-4da0-8ebb-ee94f025039f/woo-cart-abandonment-recovery","title":"Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails < 2.1.0 - Authenticated (Shop Manager+) Privilege Escalation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"868c178f-9389-4da0-8ebb-ee94f025039f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/868c178f-9389-4da0-8ebb-ee94f025039f?source=api-prod","cve":"CVE-2026-39470","affectedVersions":"<2.1.0","severity":"high"},{"advisoryId":"WPSECADV/WF/f1fbac6d-a91b-410f-ad3c-7fab3627a7d1/woo-cart-abandonment-recovery","title":"Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails < 2.2.0 - Unauthenticated Abandoned Cart Takeover\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"f1fbac6d-a91b-410f-ad3c-7fab3627a7d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f1fbac6d-a91b-410f-ad3c-7fab3627a7d1?source=api-prod","cve":"CVE-2026-96901","affectedVersions":"<2.2.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_776f6f2d7061796d656e742d676174657761792d666f722d6575726f62616e6b811c9dc5_gen.json b/internal/data/assets/plugin_776f6f2d7061796d656e742d676174657761792d666f722d6575726f62616e6b811c9dc5_gen.json
new file mode 100644
index 00000000..f5055b93
--- /dev/null
+++ b/internal/data/assets/plugin_776f6f2d7061796d656e742d676174657761792d666f722d6575726f62616e6b811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/1b3faa60-b341-4550-b41a-79d41a15e802/woo-payment-gateway-for-eurobank","title":"Eurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-23 00:00:00","sources":[{"name":"Wordfence","remoteId":"1b3faa60-b341-4550-b41a-79d41a15e802"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1b3faa60-b341-4550-b41a-79d41a15e802?source=api-prod","cve":"CVE-2026-103300","affectedVersions":"<=2.1.1","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_776f6f2d7061796d656e742d676174657761792d6f6666696365677579811c9dc5_gen.json b/internal/data/assets/plugin_776f6f2d7061796d656e742d676174657761792d6f6666696365677579811c9dc5_gen.json
index 7933d596..564496f2 100644
--- a/internal/data/assets/plugin_776f6f2d7061796d656e742d676174657761792d6f6666696365677579811c9dc5_gen.json
+++ b/internal/data/assets/plugin_776f6f2d7061796d656e742d676174657761792d6f6666696365677579811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/02e0b218-c3a4-4310-a13c-7fdb334594ab/woo-payment-gateway-officeguy","title":"SUMIT Payment Gateway for WooCommerce <= 3.0.0 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"02e0b218-c3a4-4310-a13c-7fdb334594ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/02e0b218-c3a4-4310-a13c-7fdb334594ab?source=api-prod","cve":"CVE-2026-84091","affectedVersions":"<=3.0.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/02e0b218-c3a4-4310-a13c-7fdb334594ab/woo-payment-gateway-officeguy","title":"SUMIT Payment Gateway for WooCommerce <= 3.0.0 - Unauthenticated Payment Bypass\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-17 00:00:00","sources":[{"name":"Wordfence","remoteId":"02e0b218-c3a4-4310-a13c-7fdb334594ab"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/02e0b218-c3a4-4310-a13c-7fdb334594ab?source=api-prod","cve":"CVE-2026-84091","affectedVersions":"<=3.0.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/44de1ca1-c443-4dc2-be14-6a27711d97f5/woo-payment-gateway-officeguy","title":"SUMIT Payment Gateway for WooCommerce < 4.0.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-19 00:00:00","sources":[{"name":"Wordfence","remoteId":"44de1ca1-c443-4dc2-be14-6a27711d97f5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/44de1ca1-c443-4dc2-be14-6a27711d97f5?source=api-prod","cve":"CVE-2026-111957","affectedVersions":"<4.0.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_776f6f2d70726f647563742d6174746163686d656e74811c9dc5_gen.json b/internal/data/assets/plugin_776f6f2d70726f647563742d6174746163686d656e74811c9dc5_gen.json
index 5787dd71..ebe7ea27 100644
--- a/internal/data/assets/plugin_776f6f2d70726f647563742d6174746163686d656e74811c9dc5_gen.json
+++ b/internal/data/assets/plugin_776f6f2d70726f647563742d6174746163686d656e74811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2660e516-1b4b-42b9-91fa-46f3de5e6648/woo-product-attachment","title":"Product Attachment for WooCommerce <= 2.3.3 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2660e516-1b4b-42b9-91fa-46f3de5e6648"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2660e516-1b4b-42b9-91fa-46f3de5e6648?source=api-prod","cve":"CVE-2026-81774","affectedVersions":"<=2.3.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/woo-product-attachment","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<2.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a8be9c76-08aa-4d41-8599-cc3494be7e58/woo-product-attachment","title":"WooCommerce Product Attachment <= 2.1.8 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a8be9c76-08aa-4d41-8599-cc3494be7e58"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a8be9c76-08aa-4d41-8599-cc3494be7e58?source=api-prod","cve":"CVE-2023-40212","affectedVersions":"<=2.1.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/f5dc2350-0dd3-4233-983f-3c7d294d18d1/woo-product-attachment","title":"Product Attachment for WooCommerce < 2.3.3 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"f5dc2350-0dd3-4233-983f-3c7d294d18d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f5dc2350-0dd3-4233-983f-3c7d294d18d1?source=api-prod","cve":"CVE-2026-16285","affectedVersions":"<2.3.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2660e516-1b4b-42b9-91fa-46f3de5e6648/woo-product-attachment","title":"Product Attachment for WooCommerce <= 2.3.4 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2660e516-1b4b-42b9-91fa-46f3de5e6648"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2660e516-1b4b-42b9-91fa-46f3de5e6648?source=api-prod","cve":"CVE-2026-81774","affectedVersions":"<=2.3.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/woo-product-attachment","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<2.1.3","severity":"medium"},{"advisoryId":"WPSECADV/WF/a8be9c76-08aa-4d41-8599-cc3494be7e58/woo-product-attachment","title":"WooCommerce Product Attachment <= 2.1.8 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-08-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"a8be9c76-08aa-4d41-8599-cc3494be7e58"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a8be9c76-08aa-4d41-8599-cc3494be7e58?source=api-prod","cve":"CVE-2023-40212","affectedVersions":"<=2.1.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/f5dc2350-0dd3-4233-983f-3c7d294d18d1/woo-product-attachment","title":"Product Attachment for WooCommerce < 2.3.3 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-08-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"f5dc2350-0dd3-4233-983f-3c7d294d18d1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f5dc2350-0dd3-4233-983f-3c7d294d18d1?source=api-prod","cve":"CVE-2026-16285","affectedVersions":"<2.3.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_776f6f636f6d6d657263652d6d656e752d6261722d63617274811c9dc5_gen.json b/internal/data/assets/plugin_776f6f636f6d6d657263652d6d656e752d6261722d63617274811c9dc5_gen.json
index e58a9b8a..b5f8cca7 100644
--- a/internal/data/assets/plugin_776f6f636f6d6d657263652d6d656e752d6261722d63617274811c9dc5_gen.json
+++ b/internal/data/assets/plugin_776f6f636f6d6d657263652d6d656e752d6261722d63617274811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/b0b223e8-7659-4220-acb6-70dfd4c101f4/woocommerce-menu-bar-cart","title":"WooCommerce Menu Cart <= 2.11.0 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0b223e8-7659-4220-acb6-70dfd4c101f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0b223e8-7659-4220-acb6-70dfd4c101f4?source=api-prod","affectedVersions":"<=2.11.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/16934359-4824-47b3-a83d-d7e536ed384e/woocommerce-menu-bar-cart","title":"Menu Cart for WooCommerce < 3.2.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"16934359-4824-47b3-a83d-d7e536ed384e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16934359-4824-47b3-a83d-d7e536ed384e?source=api-prod","cve":"CVE-2026-105972","affectedVersions":"<3.2.1","severity":"high"},{"advisoryId":"WPSECADV/WF/b0b223e8-7659-4220-acb6-70dfd4c101f4/woocommerce-menu-bar-cart","title":"WooCommerce Menu Cart <= 2.11.0 - Reflected Cross-Site Scripting\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-06-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"b0b223e8-7659-4220-acb6-70dfd4c101f4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0b223e8-7659-4220-acb6-70dfd4c101f4?source=api-prod","affectedVersions":"<=2.11.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_77702d726f73746572811c9dc5_gen.json b/internal/data/assets/plugin_77702d726f73746572811c9dc5_gen.json
new file mode 100644
index 00000000..018d13e5
--- /dev/null
+++ b/internal/data/assets/plugin_77702d726f73746572811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/e28c945f-09a2-45de-83af-33bc98e332ed/wp-roster","title":"WP Roster < 2.35 - Missing Authorization to Unauthenticated Roster Member Deletion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"e28c945f-09a2-45de-83af-33bc98e332ed"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e28c945f-09a2-45de-83af-33bc98e332ed?source=api-prod","cve":"CVE-2026-115255","affectedVersions":"<2.35","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_77702d7363686564756c65642d706f737473811c9dc5_gen.json b/internal/data/assets/plugin_77702d7363686564756c65642d706f737473811c9dc5_gen.json
index 565a21ea..c08a76f3 100644
--- a/internal/data/assets/plugin_77702d7363686564756c65642d706f737473811c9dc5_gen.json
+++ b/internal/data/assets/plugin_77702d7363686564756c65642d706f737473811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/72be8df6-7489-4214-af6e-d1d95f79fd8f/wp-scheduled-posts","title":"SchedulePress <= 5.0.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"72be8df6-7489-4214-af6e-d1d95f79fd8f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72be8df6-7489-4214-af6e-d1d95f79fd8f?source=api-prod","cve":"CVE-2024-32717","affectedVersions":"<=5.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/cd2c9b28-d5b5-4930-a441-f889ee2778cd/wp-scheduled-posts","title":"SchedulePress <= 5.0.4 - Insufficient Authorization to Authenticated (Contributor+) Arbitrary Post Modifications\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"cd2c9b28-d5b5-4930-a441-f889ee2778cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cd2c9b28-d5b5-4930-a441-f889ee2778cd?source=api-prod","affectedVersions":"<=5.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f80fa8b3-f345-4b3f-8a16-ee9f19b07a0b/wp-scheduled-posts","title":"SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-15 16:16:47","sources":[{"name":"Wordfence","remoteId":"f80fa8b3-f345-4b3f-8a16-ee9f19b07a0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f80fa8b3-f345-4b3f-8a16-ee9f19b07a0b?source=api-prod","cve":"CVE-2024-6557","affectedVersions":"<=5.1.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/6ce17e3d-97c1-468a-a590-0f2455e2b25f/wp-scheduled-posts","title":"SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher < 5.3.5 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"6ce17e3d-97c1-468a-a590-0f2455e2b25f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ce17e3d-97c1-468a-a590-0f2455e2b25f?source=api-prod","cve":"CVE-2026-114120","affectedVersions":"<5.3.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/72be8df6-7489-4214-af6e-d1d95f79fd8f/wp-scheduled-posts","title":"SchedulePress <= 5.0.8 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-04-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"72be8df6-7489-4214-af6e-d1d95f79fd8f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72be8df6-7489-4214-af6e-d1d95f79fd8f?source=api-prod","cve":"CVE-2024-32717","affectedVersions":"<=5.0.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/cd2c9b28-d5b5-4930-a441-f889ee2778cd/wp-scheduled-posts","title":"SchedulePress <= 5.0.4 - Insufficient Authorization to Authenticated (Contributor+) Arbitrary Post Modifications\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-11-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"cd2c9b28-d5b5-4930-a441-f889ee2778cd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cd2c9b28-d5b5-4930-a441-f889ee2778cd?source=api-prod","affectedVersions":"<=5.0.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f80fa8b3-f345-4b3f-8a16-ee9f19b07a0b/wp-scheduled-posts","title":"SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-15 16:16:47","sources":[{"name":"Wordfence","remoteId":"f80fa8b3-f345-4b3f-8a16-ee9f19b07a0b"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f80fa8b3-f345-4b3f-8a16-ee9f19b07a0b?source=api-prod","cve":"CVE-2024-6557","affectedVersions":"<=5.1.3","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_77702d73746f72796d6170811c9dc5_gen.json b/internal/data/assets/plugin_77702d73746f72796d6170811c9dc5_gen.json
index 601f2b20..1ddcf2cf 100644
--- a/internal/data/assets/plugin_77702d73746f72796d6170811c9dc5_gen.json
+++ b/internal/data/assets/plugin_77702d73746f72796d6170811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/31189328-3dba-4bc4-a541-ef53bbf9794f/wp-storymap","title":"StoryMap <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"31189328-3dba-4bc4-a541-ef53bbf9794f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/31189328-3dba-4bc4-a541-ef53bbf9794f?source=api-prod","cve":"CVE-2025-58874","affectedVersions":"<=2.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9596cae1-37d8-4618-a701-34e8461c3d73/wp-storymap","title":"StoryMap <= 2.1 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"9596cae1-37d8-4618-a701-34e8461c3d73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9596cae1-37d8-4618-a701-34e8461c3d73?source=api-prod","cve":"CVE-2025-52797","affectedVersions":"<=2.1","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/31189328-3dba-4bc4-a541-ef53bbf9794f/wp-storymap","title":"StoryMap <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"31189328-3dba-4bc4-a541-ef53bbf9794f"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/31189328-3dba-4bc4-a541-ef53bbf9794f?source=api-prod","cve":"CVE-2025-58874","affectedVersions":"<=3.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/9596cae1-37d8-4618-a701-34e8461c3d73/wp-storymap","title":"StoryMap <= 3.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-08-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"9596cae1-37d8-4618-a701-34e8461c3d73"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9596cae1-37d8-4618-a701-34e8461c3d73?source=api-prod","cve":"CVE-2025-52797","affectedVersions":"<=3.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_777066756e6e656c73811c9dc5_gen.json b/internal/data/assets/plugin_777066756e6e656c73811c9dc5_gen.json
index a507f635..2f8d65a7 100644
--- a/internal/data/assets/plugin_777066756e6e656c73811c9dc5_gen.json
+++ b/internal/data/assets/plugin_777066756e6e656c73811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/01b1ebc8-e489-4053-9dbf-511cd83270d6/wpfunnels","title":"WPFunnels <= 3.5.26 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"01b1ebc8-e489-4053-9dbf-511cd83270d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01b1ebc8-e489-4053-9dbf-511cd83270d6?source=api-prod","cve":"CVE-2025-54696","affectedVersions":"<=3.5.26","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d29880e-fdca-4e13-96a4-8be34d4b6325/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d29880e-fdca-4e13-96a4-8be34d4b6325"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d29880e-fdca-4e13-96a4-8be34d4b6325?source=api-prod","cve":"CVE-2025-15691","affectedVersions":"<3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/2130847a-b6c5-412e-8d90-ba42d3fb21f6/wpfunnels","title":"WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-03 22:13:01","sources":[{"name":"Wordfence","remoteId":"2130847a-b6c5-412e-8d90-ba42d3fb21f6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2130847a-b6c5-412e-8d90-ba42d3fb21f6?source=api-prod","cve":"CVE-2026-0626","affectedVersions":"<=3.7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ff43e5d-bffd-4e2b-a6de-938559cd6f02/wpfunnels","title":"WPFunnels <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ff43e5d-bffd-4e2b-a6de-938559cd6f02"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ff43e5d-bffd-4e2b-a6de-938559cd6f02?source=api-prod","cve":"CVE-2023-0173","affectedVersions":"<=2.6.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/40716c58-1075-492b-9323-13e7b831e206/wpfunnels","title":"WPFunnels <= 3.5.18 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"40716c58-1075-492b-9323-13e7b831e206"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40716c58-1075-492b-9323-13e7b831e206?source=api-prod","cve":"CVE-2025-47530","affectedVersions":"<=3.5.18","severity":"critical"},{"advisoryId":"WPSECADV/WF/4c402590-46de-45f3-add7-7e7932b037d4/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.12.13 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"4c402590-46de-45f3-add7-7e7932b037d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c402590-46de-45f3-add7-7e7932b037d4?source=api-prod","cve":"CVE-2026-84754","affectedVersions":"<=3.12.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e376c96-47a8-419f-ab45-f7c46510c767/wpfunnels","title":"WPFunnels <= 3.6.2 - Unauthorized User Registration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-07 15:06:12","sources":[{"name":"Wordfence","remoteId":"4e376c96-47a8-419f-ab45-f7c46510c767"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e376c96-47a8-419f-ab45-f7c46510c767?source=api-prod","cve":"CVE-2025-12353","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/50b26952-bf59-4236-93b4-6b4928609c15/wpfunnels","title":"WPFunnels <= 2.7.15 - Insecure Direct Object Reference\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"50b26952-bf59-4236-93b4-6b4928609c15"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50b26952-bf59-4236-93b4-6b4928609c15?source=api-prod","affectedVersions":"<2.7.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/5a24d442-56f9-4f6d-bff6-0eb354249895/wpfunnels","title":"WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 17:13:51","sources":[{"name":"Wordfence","remoteId":"5a24d442-56f9-4f6d-bff6-0eb354249895"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5a24d442-56f9-4f6d-bff6-0eb354249895?source=api-prod","cve":"CVE-2026-84908","affectedVersions":"<=3.12.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/5c1464ab-217e-4c66-94f8-49376755dba7/wpfunnels","title":"WPFunnels <= 2.7.16 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"5c1464ab-217e-4c66-94f8-49376755dba7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5c1464ab-217e-4c66-94f8-49376755dba7?source=api-prod","cve":"CVE-2023-37977","affectedVersions":"<=2.7.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d84d749-0ab5-49dd-8e4f-45681f197742/wpfunnels","title":"WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-06 16:35:34","sources":[{"name":"Wordfence","remoteId":"5d84d749-0ab5-49dd-8e4f-45681f197742"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d84d749-0ab5-49dd-8e4f-45681f197742?source=api-prod","cve":"CVE-2026-14345","affectedVersions":"<=3.12.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/6b028923-82fe-4dd6-af77-69d7744f2812/wpfunnels","title":"WPFunnels <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b028923-82fe-4dd6-af77-69d7744f2812"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b028923-82fe-4dd6-af77-69d7744f2812?source=api-prod","cve":"CVE-2024-27965","affectedVersions":"<=3.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/76ad6d21-f277-496f-aa6b-f9d5cb8a3801/wpfunnels","title":"WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-15 20:13:20","sources":[{"name":"Wordfence","remoteId":"76ad6d21-f277-496f-aa6b-f9d5cb8a3801"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76ad6d21-f277-496f-aa6b-f9d5cb8a3801?source=api-prod","cve":"CVE-2026-15103","affectedVersions":"<=3.12.8","severity":"high"},{"advisoryId":"WPSECADV/WF/84003388-c47c-41db-8d2d-4643aa375a89/wpfunnels","title":"Appsero <= 1.2.1 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"84003388-c47c-41db-8d2d-4643aa375a89"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84003388-c47c-41db-8d2d-4643aa375a89?source=api-prod","affectedVersions":"<=2.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/88c8b359-fad3-4bd9-8388-b1f7dea64ffc/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"88c8b359-fad3-4bd9-8388-b1f7dea64ffc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88c8b359-fad3-4bd9-8388-b1f7dea64ffc?source=api-prod","cve":"CVE-2026-79631","affectedVersions":"<3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/924d8186-63bd-4604-8262-a6481425bc7a/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 12:02:44","sources":[{"name":"Wordfence","remoteId":"924d8186-63bd-4604-8262-a6481425bc7a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/924d8186-63bd-4604-8262-a6481425bc7a?source=api-prod","cve":"CVE-2026-97269","affectedVersions":"<=3.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9592e315-8489-4e49-83ac-00491e1b0bba/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"9592e315-8489-4e49-83ac-00491e1b0bba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9592e315-8489-4e49-83ac-00491e1b0bba?source=api-prod","cve":"CVE-2026-27371","affectedVersions":"<=3.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9846cb0e-fc68-4a1b-a5a5-63116289c369/wpfunnels","title":"Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"9846cb0e-fc68-4a1b-a5a5-63116289c369"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9846cb0e-fc68-4a1b-a5a5-63116289c369?source=api-prod","cve":"CVE-2024-10792","affectedVersions":"<=3.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3df87b0-5ee2-475a-bf55-5594a47b47dc/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Unauthenticated Product Price Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3df87b0-5ee2-475a-bf55-5594a47b47dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3df87b0-5ee2-475a-bf55-5594a47b47dc?source=api-prod","cve":"CVE-2026-79630","affectedVersions":"<3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/bed9355d-1592-4eb3-8342-df6ec6d67bba/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"bed9355d-1592-4eb3-8342-df6ec6d67bba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bed9355d-1592-4eb3-8342-df6ec6d67bba?source=api-prod","cve":"CVE-2026-79632","affectedVersions":"<3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2d040d5-ffcb-4ab9-8606-c18a3d2ccad9/wpfunnels","title":"WPFunnels <= 3.6.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2d040d5-ffcb-4ab9-8606-c18a3d2ccad9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2d040d5-ffcb-4ab9-8606-c18a3d2ccad9?source=api-prod","cve":"CVE-2025-67571","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d969eb46-b12a-4a36-9321-bf1479906a5d/wpfunnels","title":"WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-07 15:07:46","sources":[{"name":"Wordfence","remoteId":"d969eb46-b12a-4a36-9321-bf1479906a5d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d969eb46-b12a-4a36-9321-bf1479906a5d?source=api-prod","cve":"CVE-2025-12000","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e275278f-6cde-43ef-b7c2-b6b7ab8b8e51/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 11:23:32","sources":[{"name":"Wordfence","remoteId":"e275278f-6cde-43ef-b7c2-b6b7ab8b8e51"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e275278f-6cde-43ef-b7c2-b6b7ab8b8e51?source=api-prod","cve":"CVE-2026-97271","affectedVersions":"<=3.13.1","severity":"high"},{"advisoryId":"WPSECADV/WF/e48ce7d2-0c57-499a-81b6-2d9488de704c/wpfunnels","title":"WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"e48ce7d2-0c57-499a-81b6-2d9488de704c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e48ce7d2-0c57-499a-81b6-2d9488de704c?source=api-prod","cve":"CVE-2026-13080","affectedVersions":"<=3.12.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e869800a-6fbc-4a1a-97fd-92ecbf3305ff/wpfunnels","title":"Appsero <= 1.2.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"e869800a-6fbc-4a1a-97fd-92ecbf3305ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e869800a-6fbc-4a1a-97fd-92ecbf3305ff?source=api-prod","cve":"CVE-2022-47150","affectedVersions":"=2.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3ff1bb7-bb90-45a9-8ed1-1497aed14b4d/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3ff1bb7-bb90-45a9-8ed1-1497aed14b4d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3ff1bb7-bb90-45a9-8ed1-1497aed14b4d?source=api-prod","cve":"CVE-2026-62029","affectedVersions":"<=3.13.3","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/01b1ebc8-e489-4053-9dbf-511cd83270d6/wpfunnels","title":"WPFunnels <= 3.5.26 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-07-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"01b1ebc8-e489-4053-9dbf-511cd83270d6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/01b1ebc8-e489-4053-9dbf-511cd83270d6?source=api-prod","cve":"CVE-2025-54696","affectedVersions":"<=3.5.26","severity":"medium"},{"advisoryId":"WPSECADV/WF/1d29880e-fdca-4e13-96a4-8be34d4b6325/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"1d29880e-fdca-4e13-96a4-8be34d4b6325"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1d29880e-fdca-4e13-96a4-8be34d4b6325?source=api-prod","cve":"CVE-2025-15691","affectedVersions":"<3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/2130847a-b6c5-412e-8d90-ba42d3fb21f6/wpfunnels","title":"WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-04-03 22:13:01","sources":[{"name":"Wordfence","remoteId":"2130847a-b6c5-412e-8d90-ba42d3fb21f6"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2130847a-b6c5-412e-8d90-ba42d3fb21f6?source=api-prod","cve":"CVE-2026-0626","affectedVersions":"<=3.7.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/2ff43e5d-bffd-4e2b-a6de-938559cd6f02/wpfunnels","title":"WPFunnels <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-01-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"2ff43e5d-bffd-4e2b-a6de-938559cd6f02"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2ff43e5d-bffd-4e2b-a6de-938559cd6f02?source=api-prod","cve":"CVE-2023-0173","affectedVersions":"<=2.6.8","severity":"medium"},{"advisoryId":"WPSECADV/WF/40716c58-1075-492b-9323-13e7b831e206/wpfunnels","title":"WPFunnels <= 3.5.18 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-05-12 00:00:00","sources":[{"name":"Wordfence","remoteId":"40716c58-1075-492b-9323-13e7b831e206"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/40716c58-1075-492b-9323-13e7b831e206?source=api-prod","cve":"CVE-2025-47530","affectedVersions":"<=3.5.18","severity":"critical"},{"advisoryId":"WPSECADV/WF/4c402590-46de-45f3-add7-7e7932b037d4/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.12.13 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-03 00:00:00","sources":[{"name":"Wordfence","remoteId":"4c402590-46de-45f3-add7-7e7932b037d4"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4c402590-46de-45f3-add7-7e7932b037d4?source=api-prod","cve":"CVE-2026-84754","affectedVersions":"<=3.12.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/4e376c96-47a8-419f-ab45-f7c46510c767/wpfunnels","title":"WPFunnels <= 3.6.2 - Unauthorized User Registration\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-07 15:06:12","sources":[{"name":"Wordfence","remoteId":"4e376c96-47a8-419f-ab45-f7c46510c767"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4e376c96-47a8-419f-ab45-f7c46510c767?source=api-prod","cve":"CVE-2025-12353","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/50b26952-bf59-4236-93b4-6b4928609c15/wpfunnels","title":"WPFunnels <= 2.7.15 - Insecure Direct Object Reference\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-10 00:00:00","sources":[{"name":"Wordfence","remoteId":"50b26952-bf59-4236-93b4-6b4928609c15"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/50b26952-bf59-4236-93b4-6b4928609c15?source=api-prod","affectedVersions":"<2.7.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/5a24d442-56f9-4f6d-bff6-0eb354249895/wpfunnels","title":"WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-08 17:13:51","sources":[{"name":"Wordfence","remoteId":"5a24d442-56f9-4f6d-bff6-0eb354249895"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5a24d442-56f9-4f6d-bff6-0eb354249895?source=api-prod","cve":"CVE-2026-84908","affectedVersions":"<=3.12.13","severity":"medium"},{"advisoryId":"WPSECADV/WF/5c1464ab-217e-4c66-94f8-49376755dba7/wpfunnels","title":"WPFunnels <= 2.7.16 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"5c1464ab-217e-4c66-94f8-49376755dba7"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5c1464ab-217e-4c66-94f8-49376755dba7?source=api-prod","cve":"CVE-2023-37977","affectedVersions":"<=2.7.16","severity":"medium"},{"advisoryId":"WPSECADV/WF/5d84d749-0ab5-49dd-8e4f-45681f197742/wpfunnels","title":"WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-06 16:35:34","sources":[{"name":"Wordfence","remoteId":"5d84d749-0ab5-49dd-8e4f-45681f197742"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d84d749-0ab5-49dd-8e4f-45681f197742?source=api-prod","cve":"CVE-2026-14345","affectedVersions":"<=3.12.7","severity":"critical"},{"advisoryId":"WPSECADV/WF/6b028923-82fe-4dd6-af77-69d7744f2812/wpfunnels","title":"WPFunnels <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"6b028923-82fe-4dd6-af77-69d7744f2812"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6b028923-82fe-4dd6-af77-69d7744f2812?source=api-prod","cve":"CVE-2024-27965","affectedVersions":"<=3.0.6","severity":"medium"},{"advisoryId":"WPSECADV/WF/76ad6d21-f277-496f-aa6b-f9d5cb8a3801/wpfunnels","title":"WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-15 20:13:20","sources":[{"name":"Wordfence","remoteId":"76ad6d21-f277-496f-aa6b-f9d5cb8a3801"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/76ad6d21-f277-496f-aa6b-f9d5cb8a3801?source=api-prod","cve":"CVE-2026-15103","affectedVersions":"<=3.12.8","severity":"high"},{"advisoryId":"WPSECADV/WF/84003388-c47c-41db-8d2d-4643aa375a89/wpfunnels","title":"Appsero <= 1.2.1 - Missing Authorization\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-16 00:00:00","sources":[{"name":"Wordfence","remoteId":"84003388-c47c-41db-8d2d-4643aa375a89"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84003388-c47c-41db-8d2d-4643aa375a89?source=api-prod","affectedVersions":"<=2.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/88c8b359-fad3-4bd9-8388-b1f7dea64ffc/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Unauthenticated Information Exposure\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"88c8b359-fad3-4bd9-8388-b1f7dea64ffc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88c8b359-fad3-4bd9-8388-b1f7dea64ffc?source=api-prod","cve":"CVE-2026-79631","affectedVersions":"<3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/924d8186-63bd-4604-8262-a6481425bc7a/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Insecure Direct Object Reference\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-01 12:02:44","sources":[{"name":"Wordfence","remoteId":"924d8186-63bd-4604-8262-a6481425bc7a"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/924d8186-63bd-4604-8262-a6481425bc7a?source=api-prod","cve":"CVE-2026-97269","affectedVersions":"<=3.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9592e315-8489-4e49-83ac-00491e1b0bba/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"9592e315-8489-4e49-83ac-00491e1b0bba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9592e315-8489-4e49-83ac-00491e1b0bba?source=api-prod","cve":"CVE-2026-27371","affectedVersions":"<=3.13.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/9846cb0e-fc68-4a1b-a5a5-63116289c369/wpfunnels","title":"Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-11-20 00:00:00","sources":[{"name":"Wordfence","remoteId":"9846cb0e-fc68-4a1b-a5a5-63116289c369"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9846cb0e-fc68-4a1b-a5a5-63116289c369?source=api-prod","cve":"CVE-2024-10792","affectedVersions":"<=3.5.5","severity":"medium"},{"advisoryId":"WPSECADV/WF/a3df87b0-5ee2-475a-bf55-5594a47b47dc/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Unauthenticated Product Price Manipulation\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-02 00:00:00","sources":[{"name":"Wordfence","remoteId":"a3df87b0-5ee2-475a-bf55-5594a47b47dc"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a3df87b0-5ee2-475a-bf55-5594a47b47dc?source=api-prod","cve":"CVE-2026-79630","affectedVersions":"<3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/bed9355d-1592-4eb3-8342-df6ec6d67bba/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"bed9355d-1592-4eb3-8342-df6ec6d67bba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bed9355d-1592-4eb3-8342-df6ec6d67bba?source=api-prod","cve":"CVE-2026-79632","affectedVersions":"<3.13.0","severity":"medium"},{"advisoryId":"WPSECADV/WF/d2d040d5-ffcb-4ab9-8606-c18a3d2ccad9/wpfunnels","title":"WPFunnels <= 3.6.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-15 00:00:00","sources":[{"name":"Wordfence","remoteId":"d2d040d5-ffcb-4ab9-8606-c18a3d2ccad9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2d040d5-ffcb-4ab9-8606-c18a3d2ccad9?source=api-prod","cve":"CVE-2025-67571","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/d969eb46-b12a-4a36-9321-bf1479906a5d/wpfunnels","title":"WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2025-11-07 15:07:46","sources":[{"name":"Wordfence","remoteId":"d969eb46-b12a-4a36-9321-bf1479906a5d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d969eb46-b12a-4a36-9321-bf1479906a5d?source=api-prod","cve":"CVE-2025-12000","affectedVersions":"<=3.6.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/e275278f-6cde-43ef-b7c2-b6b7ab8b8e51/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-30 11:23:32","sources":[{"name":"Wordfence","remoteId":"e275278f-6cde-43ef-b7c2-b6b7ab8b8e51"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e275278f-6cde-43ef-b7c2-b6b7ab8b8e51?source=api-prod","cve":"CVE-2026-97271","affectedVersions":"<=3.13.1","severity":"high"},{"advisoryId":"WPSECADV/WF/e48ce7d2-0c57-499a-81b6-2d9488de704c/wpfunnels","title":"WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-08 00:00:00","sources":[{"name":"Wordfence","remoteId":"e48ce7d2-0c57-499a-81b6-2d9488de704c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e48ce7d2-0c57-499a-81b6-2d9488de704c?source=api-prod","cve":"CVE-2026-13080","affectedVersions":"<=3.12.7","severity":"medium"},{"advisoryId":"WPSECADV/WF/e869800a-6fbc-4a1a-97fd-92ecbf3305ff/wpfunnels","title":"Appsero <= 1.2.0 - Cross-Site Request Forgery\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-12-14 00:00:00","sources":[{"name":"Wordfence","remoteId":"e869800a-6fbc-4a1a-97fd-92ecbf3305ff"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e869800a-6fbc-4a1a-97fd-92ecbf3305ff?source=api-prod","cve":"CVE-2022-47150","affectedVersions":"=2.6.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/f3ff1bb7-bb90-45a9-8ed1-1497aed14b4d/wpfunnels","title":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3ff1bb7-bb90-45a9-8ed1-1497aed14b4d"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3ff1bb7-bb90-45a9-8ed1-1497aed14b4d?source=api-prod","cve":"CVE-2026-62029","affectedVersions":"<=3.13.5","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_77706f726c6f67696e811c9dc5_gen.json b/internal/data/assets/plugin_77706f726c6f67696e811c9dc5_gen.json
new file mode 100644
index 00000000..f5ab5091
--- /dev/null
+++ b/internal/data/assets/plugin_77706f726c6f67696e811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/f3f3c30c-65c9-4838-97c4-3bc4eefc8e52/wporlogin","title":"WPOrLogin – Custom Login, Social Login, CAPTCHA & Security < 3.1.0 - Unauthenticated Login URL Settings Modification\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-26 00:00:00","sources":[{"name":"Wordfence","remoteId":"f3f3c30c-65c9-4838-97c4-3bc4eefc8e52"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3f3c30c-65c9-4838-97c4-3bc4eefc8e52?source=api-prod","cve":"CVE-2026-110691","affectedVersions":"<3.1.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/plugin_79742d706c61796572811c9dc5_gen.json b/internal/data/assets/plugin_79742d706c61796572811c9dc5_gen.json
index 92b399af..957bad4a 100644
--- a/internal/data/assets/plugin_79742d706c61796572811c9dc5_gen.json
+++ b/internal/data/assets/plugin_79742d706c61796572811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/0dbed7a2-730d-42f2-9d57-3f07900d33e3/yt-player","title":"Video Player for YouTube <= 1.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"0dbed7a2-730d-42f2-9d57-3f07900d33e3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0dbed7a2-730d-42f2-9d57-3f07900d33e3?source=api-prod","cve":"CVE-2021-24414","affectedVersions":"<1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/yt-player","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/yt-player","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=1.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bfcbd6fb-f599-4a85-aabb-d03d2716ba00/yt-player","title":"YT Player – Embed and Customize Video Players <= 2.0.9 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"bfcbd6fb-f599-4a85-aabb-d03d2716ba00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bfcbd6fb-f599-4a85-aabb-d03d2716ba00?source=api-prod","cve":"CVE-2026-27422","affectedVersions":"<=2.0.9","severity":"medium"},{"advisoryId":"WPSECADV/WF/eedad1b3-a69d-4972-ad5b-031948ec5eca/yt-player","title":"Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch < 2.1.0 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"eedad1b3-a69d-4972-ad5b-031948ec5eca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eedad1b3-a69d-4972-ad5b-031948ec5eca?source=api-prod","cve":"CVE-2026-84937","affectedVersions":"<2.1.0","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/0dbed7a2-730d-42f2-9d57-3f07900d33e3/yt-player","title":"Video Player for YouTube <= 1.3 - Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2021-09-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"0dbed7a2-730d-42f2-9d57-3f07900d33e3"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0dbed7a2-730d-42f2-9d57-3f07900d33e3?source=api-prod","cve":"CVE-2021-24414","affectedVersions":"<1.4","severity":"medium"},{"advisoryId":"WPSECADV/WF/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42/yt-player","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2022-03-04 00:00:00","sources":[{"name":"Wordfence","remoteId":"39fb0499-9ab4-4a2f-b0db-ece86bcf4d42"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod","cve":"CVE-2022-4974","affectedVersions":"<1.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/5253fe2b-040b-417c-b257-0cb59ee5aa6e/yt-player","title":"Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2023-07-18 00:00:00","sources":[{"name":"Wordfence","remoteId":"5253fe2b-040b-417c-b257-0cb59ee5aa6e"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5253fe2b-040b-417c-b257-0cb59ee5aa6e?source=api-prod","cve":"CVE-2023-33999","affectedVersions":"<=1.5.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bfcbd6fb-f599-4a85-aabb-d03d2716ba00/yt-player","title":"YT Player – Embed and Customize Video Players <= 2.1.2 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-07-22 00:00:00","sources":[{"name":"Wordfence","remoteId":"bfcbd6fb-f599-4a85-aabb-d03d2716ba00"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bfcbd6fb-f599-4a85-aabb-d03d2716ba00?source=api-prod","cve":"CVE-2026-27422","affectedVersions":"<=2.1.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/eedad1b3-a69d-4972-ad5b-031948ec5eca/yt-player","title":"Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch < 2.1.0 - Authenticated (Contributor+) SQL Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-09-05 00:00:00","sources":[{"name":"Wordfence","remoteId":"eedad1b3-a69d-4972-ad5b-031948ec5eca"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eedad1b3-a69d-4972-ad5b-031948ec5eca?source=api-prod","cve":"CVE-2026-84937","affectedVersions":"<2.1.0","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/theme_6368757263686f7065811c9dc5_gen.json b/internal/data/assets/theme_6368757263686f7065811c9dc5_gen.json
index b9d08a66..27e4399e 100644
--- a/internal/data/assets/theme_6368757263686f7065811c9dc5_gen.json
+++ b/internal/data/assets/theme_6368757263686f7065811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/d5c0c64c-7105-4bc3-b42d-89cfa44d02b9/churchope","title":"ChurcHope <= 2.1 - Local File Inclusion\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-12-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"d5c0c64c-7105-4bc3-b42d-89cfa44d02b9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d5c0c64c-7105-4bc3-b42d-89cfa44d02b9?source=api-prod","affectedVersions":"<=2.1","severity":"critical"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/d5c0c64c-7105-4bc3-b42d-89cfa44d02b9/churchope","title":"ChurcHope <= 2.1 - Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-12-07 00:00:00","sources":[{"name":"Wordfence","remoteId":"d5c0c64c-7105-4bc3-b42d-89cfa44d02b9"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d5c0c64c-7105-4bc3-b42d-89cfa44d02b9?source=api-prod","cve":"CVE-2014-125134","affectedVersions":"<=2.1","severity":"critical"}]
\ No newline at end of file
diff --git a/internal/data/assets/theme_64696172697365811c9dc5_gen.json b/internal/data/assets/theme_64696172697365811c9dc5_gen.json
new file mode 100644
index 00000000..d55ca197
--- /dev/null
+++ b/internal/data/assets/theme_64696172697365811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/442ea621-3af4-4aae-8cde-6078e01edf43/diarise","title":"Diarise <= 1.5.9 - Unauthenticated Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2019-05-11 00:00:00","sources":[{"name":"Wordfence","remoteId":"442ea621-3af4-4aae-8cde-6078e01edf43"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/442ea621-3af4-4aae-8cde-6078e01edf43?source=api-prod","cve":"CVE-2019-25779","affectedVersions":"<=1.5.9","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/theme_68616c6c656c756a6168811c9dc5_gen.json b/internal/data/assets/theme_68616c6c656c756a6168811c9dc5_gen.json
new file mode 100644
index 00000000..800b0585
--- /dev/null
+++ b/internal/data/assets/theme_68616c6c656c756a6168811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/f1ea9976-cd05-4149-8920-5c647d2cb9e1/hallelujah","title":"Hallelujah <= 1.1.1 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"f1ea9976-cd05-4149-8920-5c647d2cb9e1"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f1ea9976-cd05-4149-8920-5c647d2cb9e1?source=api-prod","cve":"CVE-2026-112853","affectedVersions":"<=1.1.1","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/theme_686f6c69737469632d63656e746572811c9dc5_gen.json b/internal/data/assets/theme_686f6c69737469632d63656e746572811c9dc5_gen.json
new file mode 100644
index 00000000..a0030761
--- /dev/null
+++ b/internal/data/assets/theme_686f6c69737469632d63656e746572811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/af45560e-2e75-42fd-9f34-74ed9d150a3c/holistic-center","title":"Holistic Center <= 1.2.6 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"af45560e-2e75-42fd-9f34-74ed9d150a3c"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af45560e-2e75-42fd-9f34-74ed9d150a3c?source=api-prod","cve":"CVE-2026-112854","affectedVersions":"<=1.2.6","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/theme_6a61766f2d73706f74811c9dc5_gen.json b/internal/data/assets/theme_6a61766f2d73706f74811c9dc5_gen.json
index 8bca2096..e0a97a11 100644
--- a/internal/data/assets/theme_6a61766f2d73706f74811c9dc5_gen.json
+++ b/internal/data/assets/theme_6a61766f2d73706f74811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/db9cd10e-90c1-48b2-8760-d5fc501fb3ba/javo-spot","title":"Javo Spot < 3.0.0 - Directory Traversal\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"db9cd10e-90c1-48b2-8760-d5fc501fb3ba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/db9cd10e-90c1-48b2-8760-d5fc501fb3ba?source=api-prod","affectedVersions":"<3.0.0","severity":"high"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/db9cd10e-90c1-48b2-8760-d5fc501fb3ba/javo-spot","title":"Javo Spot < 3.0.0 - Directory Traversal\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2017-02-09 00:00:00","sources":[{"name":"Wordfence","remoteId":"db9cd10e-90c1-48b2-8760-d5fc501fb3ba"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/db9cd10e-90c1-48b2-8760-d5fc501fb3ba?source=api-prod","cve":"CVE-2017-20287","affectedVersions":"<3.0.0","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/theme_6e6174697665636875726368811c9dc5_gen.json b/internal/data/assets/theme_6e6174697665636875726368811c9dc5_gen.json
index 2a8b8c9d..a32dd7a6 100644
--- a/internal/data/assets/theme_6e6174697665636875726368811c9dc5_gen.json
+++ b/internal/data/assets/theme_6e6174697665636875726368811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/6e6cda1a-e137-4c30-a66b-c10a88070c50/nativechurch","title":"NativeChurch <= 1.6.1 - Arbitrary File Download\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e6cda1a-e137-4c30-a66b-c10a88070c50"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e6cda1a-e137-4c30-a66b-c10a88070c50?source=api-prod","affectedVersions":"<=1.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/eee87b71-713e-4e97-90a4-4ed71d264053/nativechurch","title":"NativeChurch <= 4.8.8.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"eee87b71-713e-4e97-90a4-4ed71d264053"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eee87b71-713e-4e97-90a4-4ed71d264053?source=api-prod","cve":"CVE-2026-27408","affectedVersions":"<=4.8.8.2","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/6e6cda1a-e137-4c30-a66b-c10a88070c50/nativechurch","title":"NativeChurch <= 1.6.1 - Arbitrary File Download\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2015-07-13 00:00:00","sources":[{"name":"Wordfence","remoteId":"6e6cda1a-e137-4c30-a66b-c10a88070c50"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e6cda1a-e137-4c30-a66b-c10a88070c50?source=api-prod","affectedVersions":"<=1.6.1","severity":"high"},{"advisoryId":"WPSECADV/WF/eee87b71-713e-4e97-90a4-4ed71d264053/nativechurch","title":"NativeChurch <= 4.8.8.2 - Reflected Cross-Site Scripting\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-06-30 00:00:00","sources":[{"name":"Wordfence","remoteId":"eee87b71-713e-4e97-90a4-4ed71d264053"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eee87b71-713e-4e97-90a4-4ed71d264053?source=api-prod","cve":"CVE-2026-27408","affectedVersions":"<=4.8.8.2","severity":"medium"},{"advisoryId":"WPSECADV/WF/fa348259-b242-4f29-ac88-c32e546b09a5/nativechurch","title":"NativeChurch <= 1.6.1 - Unauthenticated Arbitrary File Read\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2014-09-28 00:00:00","sources":[{"name":"Wordfence","remoteId":"fa348259-b242-4f29-ac88-c32e546b09a5"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fa348259-b242-4f29-ac88-c32e546b09a5?source=api-prod","cve":"CVE-2014-125133","affectedVersions":"<=1.6.1","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/theme_6e6577736d61746963811c9dc5_gen.json b/internal/data/assets/theme_6e6577736d61746963811c9dc5_gen.json
index 18f71bc2..32b85a81 100644
--- a/internal/data/assets/theme_6e6577736d61746963811c9dc5_gen.json
+++ b/internal/data/assets/theme_6e6577736d61746963811c9dc5_gen.json
@@ -1 +1 @@
-[{"advisoryId":"WPSECADV/WF/2cd92497-25ac-4560-82ed-e21a117d8c64/newsmatic","title":"Newsmatic <= 1.3.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2cd92497-25ac-4560-82ed-e21a117d8c64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2cd92497-25ac-4560-82ed-e21a117d8c64?source=api-prod","cve":"CVE-2024-37468","affectedVersions":"<=1.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/bd2ea430-48ce-43c3-ba3d-8ef5f91460ce/newsmatic","title":"Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd2ea430-48ce-43c3-ba3d-8ef5f91460ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd2ea430-48ce-43c3-ba3d-8ef5f91460ce?source=api-prod","cve":"CVE-2024-1587","affectedVersions":"<=1.3.4","severity":"medium"}]
\ No newline at end of file
+[{"advisoryId":"WPSECADV/WF/2cd92497-25ac-4560-82ed-e21a117d8c64/newsmatic","title":"Newsmatic <= 1.3.1 - Missing Authorization\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-07-01 00:00:00","sources":[{"name":"Wordfence","remoteId":"2cd92497-25ac-4560-82ed-e21a117d8c64"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2cd92497-25ac-4560-82ed-e21a117d8c64?source=api-prod","cve":"CVE-2024-37468","affectedVersions":"<=1.3.1","severity":"medium"},{"advisoryId":"WPSECADV/WF/81a503f9-3bd2-4fb8-8c3e-8d68d41f7918/newsmatic","title":"Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-28 21:31:21","sources":[{"name":"Wordfence","remoteId":"81a503f9-3bd2-4fb8-8c3e-8d68d41f7918"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81a503f9-3bd2-4fb8-8c3e-8d68d41f7918?source=api-prod","cve":"CVE-2026-110184","affectedVersions":"<=1.5.0","severity":"high"},{"advisoryId":"WPSECADV/WF/bd2ea430-48ce-43c3-ba3d-8ef5f91460ce/newsmatic","title":"Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2024-03-25 00:00:00","sources":[{"name":"Wordfence","remoteId":"bd2ea430-48ce-43c3-ba3d-8ef5f91460ce"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd2ea430-48ce-43c3-ba3d-8ef5f91460ce?source=api-prod","cve":"CVE-2024-1587","affectedVersions":"<=1.3.4","severity":"medium"}]
\ No newline at end of file
diff --git a/internal/data/assets/theme_796f75722d6472657373811c9dc5_gen.json b/internal/data/assets/theme_796f75722d6472657373811c9dc5_gen.json
new file mode 100644
index 00000000..6f632bab
--- /dev/null
+++ b/internal/data/assets/theme_796f75722d6472657373811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/faacefad-eb8a-4c8b-967a-6167ab5492fd/your-dress","title":"Your Dress <= 1.4.1 - Unauthenticated Local File Inclusion\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"faacefad-eb8a-4c8b-967a-6167ab5492fd"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/faacefad-eb8a-4c8b-967a-6167ab5492fd?source=api-prod","cve":"CVE-2026-112850","affectedVersions":"<=1.4.1","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets/theme_7a656e736f756c811c9dc5_gen.json b/internal/data/assets/theme_7a656e736f756c811c9dc5_gen.json
new file mode 100644
index 00000000..772c0e64
--- /dev/null
+++ b/internal/data/assets/theme_7a656e736f756c811c9dc5_gen.json
@@ -0,0 +1 @@
+[{"advisoryId":"WPSECADV/WF/a03aef95-dbc8-40c6-aec6-0c7ba289b0e8/zensoul","title":"ZenSoul <= 1.13 - Unauthenticated PHP Object Injection\n### Copyright 1999-2026 The MITRE Corporation\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nhttps://www.cve.org/Legal/TermsOfUse\n### Copyright 2012-2026 Defiant Inc.\nDefiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.\nhttps://www.wordfence.com/wordfence-intelligence-terms-and-conditions/","reportedAt":"2026-10-21 00:00:00","sources":[{"name":"Wordfence","remoteId":"a03aef95-dbc8-40c6-aec6-0c7ba289b0e8"}],"link":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a03aef95-dbc8-40c6-aec6-0c7ba289b0e8?source=api-prod","cve":"CVE-2026-112847","affectedVersions":"<=1.13","severity":"high"}]
\ No newline at end of file
diff --git a/internal/data/assets_gen.go b/internal/data/assets_gen.go
index 4cc92582..8146c061 100644
--- a/internal/data/assets_gen.go
+++ b/internal/data/assets_gen.go
@@ -1080,6 +1080,8 @@ var (
 	theme_64657461696c78811c9dc5 []byte
 	//go:embed assets/theme_6469616d6f6e64811c9dc5_gen.json
 	theme_6469616d6f6e64811c9dc5 []byte
+	//go:embed assets/theme_64696172697365811c9dc5_gen.json
+	theme_64696172697365811c9dc5 []byte
 	//go:embed assets/theme_6469617279811c9dc5_gen.json
 	theme_6469617279811c9dc5 []byte
 	//go:embed assets/theme_646967692d73746f7265811c9dc5_gen.json
@@ -1760,6 +1762,8 @@ var (
 	theme_67796d626173655f636c6173736573811c9dc5 []byte
 	//go:embed assets/theme_6861616b656e811c9dc5_gen.json
 	theme_6861616b656e811c9dc5 []byte
+	//go:embed assets/theme_68616c6c656c756a6168811c9dc5_gen.json
+	theme_68616c6c656c756a6168811c9dc5 []byte
 	//go:embed assets/theme_68616c706573811c9dc5_gen.json
 	theme_68616c706573811c9dc5 []byte
 	//go:embed assets/theme_68616c737465696e811c9dc5_gen.json
@@ -1846,6 +1850,8 @@ var (
 	theme_686f67776f726473811c9dc5 []byte
 	//go:embed assets/theme_686f6c64696e675f7061747465726e811c9dc5_gen.json
 	theme_686f6c64696e675f7061747465726e811c9dc5 []byte
+	//go:embed assets/theme_686f6c69737469632d63656e746572811c9dc5_gen.json
+	theme_686f6c69737469632d63656e746572811c9dc5 []byte
 	//go:embed assets/theme_686f6c6d6573811c9dc5_gen.json
 	theme_686f6c6d6573811c9dc5 []byte
 	//go:embed assets/theme_686f6d652d7365727669636573811c9dc5_gen.json
@@ -4352,6 +4358,8 @@ var (
 	theme_796f6f7468656d65811c9dc5 []byte
 	//go:embed assets/theme_796f74746973811c9dc5_gen.json
 	theme_796f74746973811c9dc5 []byte
+	//go:embed assets/theme_796f75722d6472657373811c9dc5_gen.json
+	theme_796f75722d6472657373811c9dc5 []byte
 	//go:embed assets/theme_796f75726a6f75726e6579811c9dc5_gen.json
 	theme_796f75726a6f75726e6579811c9dc5 []byte
 	//go:embed assets/theme_796f7a69811c9dc5_gen.json
@@ -4382,6 +4390,8 @@ var (
 	theme_7a656e6c697465811c9dc5 []byte
 	//go:embed assets/theme_7a656e6f6e2d6c697465811c9dc5_gen.json
 	theme_7a656e6f6e2d6c697465811c9dc5 []byte
+	//go:embed assets/theme_7a656e736f756c811c9dc5_gen.json
+	theme_7a656e736f756c811c9dc5 []byte
 	//go:embed assets/theme_7a656e7472756d811c9dc5_gen.json
 	theme_7a656e7472756d811c9dc5 []byte
 	//go:embed assets/theme_7a65726d617474811c9dc5_gen.json
@@ -5484,6 +5494,8 @@ func themeAdvisories(slug string) ([]byte, error) {
 		return theme_64657461696c78811c9dc5, nil
 	case "diamond":
 		return theme_6469616d6f6e64811c9dc5, nil
+	case "diarise":
+		return theme_64696172697365811c9dc5, nil
 	case "diary":
 		return theme_6469617279811c9dc5, nil
 	case "digi-store":
@@ -6164,6 +6176,8 @@ func themeAdvisories(slug string) ([]byte, error) {
 		return theme_67796d626173655f636c6173736573811c9dc5, nil
 	case "haaken":
 		return theme_6861616b656e811c9dc5, nil
+	case "hallelujah":
+		return theme_68616c6c656c756a6168811c9dc5, nil
 	case "halpes":
 		return theme_68616c706573811c9dc5, nil
 	case "halstein":
@@ -6250,6 +6264,8 @@ func themeAdvisories(slug string) ([]byte, error) {
 		return theme_686f67776f726473811c9dc5, nil
 	case "holding_pattern":
 		return theme_686f6c64696e675f7061747465726e811c9dc5, nil
+	case "holistic-center":
+		return theme_686f6c69737469632d63656e746572811c9dc5, nil
 	case "holmes":
 		return theme_686f6c6d6573811c9dc5, nil
 	case "home-services":
@@ -8756,6 +8772,8 @@ func themeAdvisories(slug string) ([]byte, error) {
 		return theme_796f6f7468656d65811c9dc5, nil
 	case "yottis":
 		return theme_796f74746973811c9dc5, nil
+	case "your-dress":
+		return theme_796f75722d6472657373811c9dc5, nil
 	case "yourjourney":
 		return theme_796f75726a6f75726e6579811c9dc5, nil
 	case "yozi":
@@ -8786,6 +8804,8 @@ func themeAdvisories(slug string) ([]byte, error) {
 		return theme_7a656e6c697465811c9dc5, nil
 	case "zenon-lite":
 		return theme_7a656e6f6e2d6c697465811c9dc5, nil
+	case "zensoul":
+		return theme_7a656e736f756c811c9dc5, nil
 	case "zentrum":
 		return theme_7a656e7472756d811c9dc5, nil
 	case "zermatt":
diff --git a/internal/data/assets_gen_test.go b/internal/data/assets_gen_test.go
index 9c7778df..105e7a13 100644
--- a/internal/data/assets_gen_test.go
+++ b/internal/data/assets_gen_test.go
@@ -128,6 +128,7 @@ func plugins() []string {
 		"abtest",
 		"abundatrade-plugin",
 		"abwp-simple-counter",
+		"academist-core",
 		"academist-membership",
 		"academy",
 		"academy-pro",
@@ -1095,6 +1096,7 @@ func plugins() []string {
 		"astra-sites",
 		"astra-widgets",
 		"astro-booking-engine",
+		"asvereinbase",
 		"async-javascript",
 		"asynchronous-javascript",
 		"at-internet",
@@ -2271,6 +2273,7 @@ func plugins() []string {
 		"cc-coming-soon",
 		"cc-custom-taxonmy",
 		"cc-img-shortcode",
+		"ccavanue-woocommerce-payment-getway",
 		"cdnvote",
 		"cds-simple-seo",
 		"ce21-suite",
@@ -5780,6 +5783,7 @@ func plugins() []string {
 		"goqsmile",
 		"goracash",
 		"gosign-posts-slider-block",
+		"gosmtp",
 		"gosmtp-pro",
 		"gostats-for-wordpress",
 		"gotcha-gesture-based-captcha",
@@ -6081,6 +6085,7 @@ func plugins() []string {
 		"hiweb-migration-simple",
 		"hk-exif-tags",
 		"hk-filter-and-search",
+		"hk-idram-payment-gateway",
 		"hk-shortcode",
 		"hkdev-maintenance-mode",
 		"hl-twitter",
@@ -11775,6 +11780,7 @@ func plugins() []string {
 		"social2blog",
 		"socialdriver",
 		"socialdriver-framework",
+		"socialfit",
 		"socialgrid",
 		"socialmark",
 		"socialsnap",
@@ -12635,6 +12641,7 @@ func plugins() []string {
 		"tidy-up",
 		"tidyro",
 		"tiempocom",
+		"tienda-crypto-woo",
 		"tier-management-petfinder",
 		"tier-pricing-table",
 		"tiger-form",
@@ -13098,6 +13105,7 @@ func plugins() []string {
 		"unify",
 		"unilevel-mlm-plan",
 		"uninstall",
+		"unipay-payment-gateway-for-woocommerce",
 		"unique-ux",
 		"unite-gallery-lite",
 		"unitechpay-paiements-mobile-money",
@@ -13598,6 +13606,7 @@ func plugins() []string {
 		"wc-order-limit-lite",
 		"wc-pagaleve",
 		"wc-partial-shipment",
+		"wc-payconiq",
 		"wc-payment-gateway-per-category",
 		"wc-paypay-gateway",
 		"wc-payphone-gateway",
@@ -13875,6 +13884,7 @@ func plugins() []string {
 		"wikiloops-track-player",
 		"wikipedia-preview",
 		"wikipop",
+		"wild-apricot-login",
 		"wilmer-core",
 		"window-blinds-solution",
 		"windows-azure-storage",
@@ -14055,6 +14065,7 @@ func plugins() []string {
 		"woo-paylate",
 		"woo-payment-bkash",
 		"woo-payment-gateway",
+		"woo-payment-gateway-for-eurobank",
 		"woo-payment-gateway-for-piraeus-bank",
 		"woo-payment-gateway-officeguy",
 		"woo-payment-gateway-paysera",
@@ -15506,6 +15517,7 @@ func plugins() []string {
 		"wp-rocket",
 		"wp-roles-at-registration",
 		"wp-rollback",
+		"wp-roster",
 		"wp-royal-gallery",
 		"wp-rss-aggregator",
 		"wp-rss-by-publishers",
@@ -16039,6 +16051,7 @@ func plugins() []string {
 		"wpop-elementor-addons",
 		"wpopal-core-features",
 		"wpoptin",
+		"wporlogin",
 		"wpos-lite-version",
 		"wpp-customization",
 		"wppageflip",
@@ -17015,6 +17028,7 @@ func themes() []string {
 		"deston",
 		"detailx",
 		"diamond",
+		"diarise",
 		"diary",
 		"digi-store",
 		"digiqole",
@@ -17355,6 +17369,7 @@ func themes() []string {
 		"gym-express",
 		"gymbase_classes",
 		"haaken",
+		"hallelujah",
 		"halpes",
 		"halstein",
 		"hampton",
@@ -17398,6 +17413,7 @@ func themes() []string {
 		"hobo",
 		"hogwords",
 		"holding_pattern",
+		"holistic-center",
 		"holmes",
 		"home-services",
 		"homelancer",
@@ -18651,6 +18667,7 @@ func themes() []string {
 		"yolox",
 		"yootheme",
 		"yottis",
+		"your-dress",
 		"yourjourney",
 		"yozi",
 		"yuki",
@@ -18666,6 +18683,7 @@ func themes() []string {
 		"zella-theme",
 		"zenlite",
 		"zenon-lite",
+		"zensoul",
 		"zentrum",
 		"zermatt",
 		"zigcy-baby",