diff --git a/advisories/unreviewed/2025/02/GHSA-4r87-7p53-q3p7/GHSA-4r87-7p53-q3p7.json b/advisories/unreviewed/2025/02/GHSA-4r87-7p53-q3p7/GHSA-4r87-7p53-q3p7.json
new file mode 100644
index 00000000000..d9985de9c13
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-4r87-7p53-q3p7/GHSA-4r87-7p53-q3p7.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4r87-7p53-q3p7",
+  "modified": "2025-02-21T12:32:12Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2024-13648"
+  ],
+  "details": "The Maps for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MapOnePoint' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13648"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226414%40maps-for-wp&new=3226414%40maps-for-wp&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242174%40maps-for-wp&new=3242174%40maps-for-wp&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a16c8b5d-fd93-49b4-b1d7-f4cd9248aef3?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T10:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-6gm8-27pm-mx3w/GHSA-6gm8-27pm-mx3w.json b/advisories/unreviewed/2025/02/GHSA-6gm8-27pm-mx3w/GHSA-6gm8-27pm-mx3w.json
index a21d4ebae7c..2bb51eca4a2 100644
--- a/advisories/unreviewed/2025/02/GHSA-6gm8-27pm-mx3w/GHSA-6gm8-27pm-mx3w.json
+++ b/advisories/unreviewed/2025/02/GHSA-6gm8-27pm-mx3w/GHSA-6gm8-27pm-mx3w.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6gm8-27pm-mx3w",
-  "modified": "2025-02-12T18:31:35Z",
+  "modified": "2025-02-21T12:32:11Z",
   "published": "2025-02-12T18:31:35Z",
   "aliases": [
     "CVE-2025-0332"
diff --git a/advisories/unreviewed/2025/02/GHSA-6gp8-2hg4-hfj9/GHSA-6gp8-2hg4-hfj9.json b/advisories/unreviewed/2025/02/GHSA-6gp8-2hg4-hfj9/GHSA-6gp8-2hg4-hfj9.json
new file mode 100644
index 00000000000..de5d68dbabe
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-6gp8-2hg4-hfj9/GHSA-6gp8-2hg4-hfj9.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6gp8-2hg4-hfj9",
+  "modified": "2025-02-21T12:32:12Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2024-12452"
+  ],
+  "details": "The Ziggeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ziggeo_event' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12452"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/ziggeo/tags/3.1/core/events.php#L52"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242184%40ziggeo&new=3242184%40ziggeo&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/be82095d-2b15-432e-a667-523286fa9629?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T10:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-8fqf-22v8-53hr/GHSA-8fqf-22v8-53hr.json b/advisories/unreviewed/2025/02/GHSA-8fqf-22v8-53hr/GHSA-8fqf-22v8-53hr.json
new file mode 100644
index 00000000000..ba6c2d88a28
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-8fqf-22v8-53hr/GHSA-8fqf-22v8-53hr.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8fqf-22v8-53hr",
+  "modified": "2025-02-21T12:32:13Z",
+  "published": "2025-02-21T12:32:13Z",
+  "aliases": [
+    "CVE-2025-1489"
+  ],
+  "details": "The WP-Appbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's appbox shortcode in all versions up to, and including, 4.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1489"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3244084"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/wp-appbox/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6d58355d-2762-4ecc-aec2-52a1e3323017?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T12:15:30Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-8pmr-8rff-whwg/GHSA-8pmr-8rff-whwg.json b/advisories/unreviewed/2025/02/GHSA-8pmr-8rff-whwg/GHSA-8pmr-8rff-whwg.json
new file mode 100644
index 00000000000..a3d5d1e0506
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-8pmr-8rff-whwg/GHSA-8pmr-8rff-whwg.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8pmr-8rff-whwg",
+  "modified": "2025-02-21T12:32:12Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2024-13713"
+  ],
+  "details": "The WPExperts Square For GiveWP plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13713"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wpexperts-square-for-give/trunk/includes/class-give-square.php#L189"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3242658/wpexperts-square-for-give/trunk/includes/class-give-square.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7863c5fb-1eda-41a3-b8ec-054784ab2438?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T12:15:30Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-f92c-pvc8-f6h9/GHSA-f92c-pvc8-f6h9.json b/advisories/unreviewed/2025/02/GHSA-f92c-pvc8-f6h9/GHSA-f92c-pvc8-f6h9.json
new file mode 100644
index 00000000000..d49d086e7cd
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-f92c-pvc8-f6h9/GHSA-f92c-pvc8-f6h9.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f92c-pvc8-f6h9",
+  "modified": "2025-02-21T12:32:13Z",
+  "published": "2025-02-21T12:32:13Z",
+  "aliases": [
+    "CVE-2025-1402"
+  ],
+  "details": "The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajax_ticket_delete' function in all versions up to, and including, 5.19.1.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary Attendee tickets.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1402"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/event-tickets/tags/5.18.1/src/Tribe/Assets.php#L202"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/event-tickets/tags/5.18.1/src/Tribe/Metabox.php#L30"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/event-tickets/tags/5.18.1/src/Tribe/Metabox.php#L490"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordfence.freshdesk.com/a/tickets/375051"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/dbd838b6-7792-4378-8969-a70c6e16ff6a?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T12:15:30Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-h5p9-qh9j-j8pj/GHSA-h5p9-qh9j-j8pj.json b/advisories/unreviewed/2025/02/GHSA-h5p9-qh9j-j8pj/GHSA-h5p9-qh9j-j8pj.json
new file mode 100644
index 00000000000..54ce06b1be9
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-h5p9-qh9j-j8pj/GHSA-h5p9-qh9j-j8pj.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h5p9-qh9j-j8pj",
+  "modified": "2025-02-21T12:32:12Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2024-13461"
+  ],
+  "details": "The Autoship Cloud for WooCommerce Subscription Products plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'autoship-create-scheduled-order-action' shortcode in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13461"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242136%40autoship-cloud&new=3242136%40autoship-cloud&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0ae16c4e-0151-4414-8612-ec8eb92505fd?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T10:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-jcwj-vprq-9qpr/GHSA-jcwj-vprq-9qpr.json b/advisories/unreviewed/2025/02/GHSA-jcwj-vprq-9qpr/GHSA-jcwj-vprq-9qpr.json
new file mode 100644
index 00000000000..37521cd1a58
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-jcwj-vprq-9qpr/GHSA-jcwj-vprq-9qpr.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jcwj-vprq-9qpr",
+  "modified": "2025-02-21T12:32:13Z",
+  "published": "2025-02-21T12:32:13Z",
+  "aliases": [
+    "CVE-2025-1535"
+  ],
+  "details": "A vulnerability was found in Baiyi Cloud Asset Management System 8.142.100.161. It has been classified as critical. This affects an unknown part of the file /wuser/admin.ticket.close.php. The manipulation of the argument ticket_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1535"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/sekaino-sakura/CVE/blob/main/CVE_2.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.296475"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.296475"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.496969"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T12:15:30Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-mf23-7g8w-fxp4/GHSA-mf23-7g8w-fxp4.json b/advisories/unreviewed/2025/02/GHSA-mf23-7g8w-fxp4/GHSA-mf23-7g8w-fxp4.json
new file mode 100644
index 00000000000..ada81864076
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-mf23-7g8w-fxp4/GHSA-mf23-7g8w-fxp4.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mf23-7g8w-fxp4",
+  "modified": "2025-02-21T12:32:12Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2024-13455"
+  ],
+  "details": "The igumbi Online Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'igumbi_calendar' shortcode in all versions up to, and including, 1.40 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13455"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3243431%40igumbi-online-booking&new=3243431%40igumbi-online-booking&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b21f9cfa-8113-42bc-a9dc-4d891bd9821b?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T12:15:29Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-mhw9-x46c-v6q4/GHSA-mhw9-x46c-v6q4.json b/advisories/unreviewed/2025/02/GHSA-mhw9-x46c-v6q4/GHSA-mhw9-x46c-v6q4.json
index b6b11ccfe4c..9c7a23b0cad 100644
--- a/advisories/unreviewed/2025/02/GHSA-mhw9-x46c-v6q4/GHSA-mhw9-x46c-v6q4.json
+++ b/advisories/unreviewed/2025/02/GHSA-mhw9-x46c-v6q4/GHSA-mhw9-x46c-v6q4.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mhw9-x46c-v6q4",
-  "modified": "2025-02-20T21:30:51Z",
+  "modified": "2025-02-21T12:32:11Z",
   "published": "2025-02-13T15:31:25Z",
   "aliases": [
     "CVE-2025-1094"
@@ -23,6 +23,10 @@
       "type": "WEB",
       "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00015.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00024.html"
+    },
     {
       "type": "WEB",
       "url": "https://www.postgresql.org/support/security/CVE-2025-1094"
diff --git a/advisories/unreviewed/2025/02/GHSA-mrg6-gr4g-r85w/GHSA-mrg6-gr4g-r85w.json b/advisories/unreviewed/2025/02/GHSA-mrg6-gr4g-r85w/GHSA-mrg6-gr4g-r85w.json
new file mode 100644
index 00000000000..d48c83969c0
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-mrg6-gr4g-r85w/GHSA-mrg6-gr4g-r85w.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mrg6-gr4g-r85w",
+  "modified": "2025-02-21T12:32:12Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2024-12276"
+  ],
+  "details": "The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to second-order SQL Injection via filenames in all versions up to, and including, 2.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with  access to upload files and manage filenames through a third-party plugin like a File Manager, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The risk of this vulnerability is very minimal as it requires a user to be able to manipulate filenames in order to successfully exploit.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12276"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3242743/ultimate-member/tags/2.10.0/includes/core/class-uploader.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/846f9828-2f1f-4d08-abfb-909b8d634d8a?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T10:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-pvp4-8q5g-43fg/GHSA-pvp4-8q5g-43fg.json b/advisories/unreviewed/2025/02/GHSA-pvp4-8q5g-43fg/GHSA-pvp4-8q5g-43fg.json
new file mode 100644
index 00000000000..dbf4af70511
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-pvp4-8q5g-43fg/GHSA-pvp4-8q5g-43fg.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pvp4-8q5g-43fg",
+  "modified": "2025-02-21T12:32:13Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2025-1470"
+  ],
+  "details": "In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not check their return values for NULL memory pointers or for memory allocation failures.  This can lead to NULL pointer dereference crashes.  Beginning in version 0.5.0, internal OMR consumers of atoe functions handle NULL return values and memory allocation failures correctly.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1470"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/eclipse-omr/omr/pull/7655"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/eclipse-omr/omr/pull/7663"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.eclipse.org/security/cve-assignement/-/issues/54"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T10:15:11Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-qf7q-96xw-2xgh/GHSA-qf7q-96xw-2xgh.json b/advisories/unreviewed/2025/02/GHSA-qf7q-96xw-2xgh/GHSA-qf7q-96xw-2xgh.json
new file mode 100644
index 00000000000..c7567c6adb1
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-qf7q-96xw-2xgh/GHSA-qf7q-96xw-2xgh.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qf7q-96xw-2xgh",
+  "modified": "2025-02-21T12:32:13Z",
+  "published": "2025-02-21T12:32:13Z",
+  "aliases": [
+    "CVE-2024-9150"
+  ],
+  "details": "Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a host system with applications high privileges.\nThis issue has been fixed in version 8.0.00204.0",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9150"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cert.pl/en/posts/2025/02/CVE-2024-9150"
+    },
+    {
+      "type": "WEB",
+      "url": "https://efigo.pl/blog/cve-2024-9150"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wynenterprise.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-1336"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T12:15:30Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-r7qp-5852-gh42/GHSA-r7qp-5852-gh42.json b/advisories/unreviewed/2025/02/GHSA-r7qp-5852-gh42/GHSA-r7qp-5852-gh42.json
new file mode 100644
index 00000000000..5af112dfd88
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-r7qp-5852-gh42/GHSA-r7qp-5852-gh42.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r7qp-5852-gh42",
+  "modified": "2025-02-21T12:32:12Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2024-13353"
+  ],
+  "details": "The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.4 via several widgets. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13353"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/responsive-addons-for-elementor/trunk/includes/widgets-manager/widgets/woocommerce/class-responsive-addons-for-elementor-product-carousel.php#L3151"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/responsive-addons-for-elementor/trunk/includes/widgets-manager/widgets/woocommerce/class-responsive-addons-for-elementor-woo-products.php#L3725"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3226779/responsive-addons-for-elementor/tags/1.6.5/includes/widgets-manager/widgets/woocommerce/class-responsive-addons-for-elementor-product-carousel.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3226779/responsive-addons-for-elementor/tags/1.6.5/includes/widgets-manager/widgets/woocommerce/class-responsive-addons-for-elementor-woo-products.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/98df88f8-5aeb-4f57-8525-6a9357173b1d?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-98"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T10:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-vrvx-7jh3-63wq/GHSA-vrvx-7jh3-63wq.json b/advisories/unreviewed/2025/02/GHSA-vrvx-7jh3-63wq/GHSA-vrvx-7jh3-63wq.json
new file mode 100644
index 00000000000..5a48528db2f
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-vrvx-7jh3-63wq/GHSA-vrvx-7jh3-63wq.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vrvx-7jh3-63wq",
+  "modified": "2025-02-21T12:32:13Z",
+  "published": "2025-02-21T12:32:13Z",
+  "aliases": [
+    "CVE-2024-13846"
+  ],
+  "details": "The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13846"
+    },
+    {
+      "type": "WEB",
+      "url": "https://codecanyon.net/item/ultimate-learning-pro-wordpress-plugin/21772657"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e9ccd2cc-ee5e-40e3-905d-21884ec01f72?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T12:15:30Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-w5mv-5x6q-jgmp/GHSA-w5mv-5x6q-jgmp.json b/advisories/unreviewed/2025/02/GHSA-w5mv-5x6q-jgmp/GHSA-w5mv-5x6q-jgmp.json
new file mode 100644
index 00000000000..a5b0618ff32
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-w5mv-5x6q-jgmp/GHSA-w5mv-5x6q-jgmp.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w5mv-5x6q-jgmp",
+  "modified": "2025-02-21T12:32:12Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2025-1471"
+  ],
+  "details": "In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer size then buffer overflow occurs.  Beginning in version 0.5.0, the conversion buffers are sized correctly and checked appropriately to prevent buffer overflows.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1471"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/eclipse-omr/omr/pull/7658"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.eclipse.org/security/cve-assignement/-/issues/55"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T10:15:11Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-xh29-r392-48pf/GHSA-xh29-r392-48pf.json b/advisories/unreviewed/2025/02/GHSA-xh29-r392-48pf/GHSA-xh29-r392-48pf.json
new file mode 100644
index 00000000000..97900fef1f1
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-xh29-r392-48pf/GHSA-xh29-r392-48pf.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xh29-r392-48pf",
+  "modified": "2025-02-21T12:32:13Z",
+  "published": "2025-02-21T12:32:12Z",
+  "aliases": [
+    "CVE-2024-13900"
+  ],
+  "details": "The Head, Footer and Post Injections plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.3.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject PHP Code in multisite environments.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13900"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3244016"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5177bde6-4922-48ee-9155-577c392809a0?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T12:15:30Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-xj6r-wgr5-8rxc/GHSA-xj6r-wgr5-8rxc.json b/advisories/unreviewed/2025/02/GHSA-xj6r-wgr5-8rxc/GHSA-xj6r-wgr5-8rxc.json
index 3d59a9a9cd1..271831e05a5 100644
--- a/advisories/unreviewed/2025/02/GHSA-xj6r-wgr5-8rxc/GHSA-xj6r-wgr5-8rxc.json
+++ b/advisories/unreviewed/2025/02/GHSA-xj6r-wgr5-8rxc/GHSA-xj6r-wgr5-8rxc.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xj6r-wgr5-8rxc",
-  "modified": "2025-02-12T18:31:35Z",
+  "modified": "2025-02-21T12:32:11Z",
   "published": "2025-02-12T18:31:35Z",
   "aliases": [
     "CVE-2024-11628"