diff --git a/advisories/github-reviewed/2024/10/GHSA-3h3x-2hwv-hr52/GHSA-3h3x-2hwv-hr52.json b/advisories/github-reviewed/2024/10/GHSA-3h3x-2hwv-hr52/GHSA-3h3x-2hwv-hr52.json
index 7c9504aa3d4..c5a7b49d0f5 100644
--- a/advisories/github-reviewed/2024/10/GHSA-3h3x-2hwv-hr52/GHSA-3h3x-2hwv-hr52.json
+++ b/advisories/github-reviewed/2024/10/GHSA-3h3x-2hwv-hr52/GHSA-3h3x-2hwv-hr52.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3h3x-2hwv-hr52",
-  "modified": "2025-03-06T01:33:50Z",
+  "modified": "2025-05-13T09:31:08Z",
   "published": "2024-10-01T21:31:34Z",
   "aliases": [
     "CVE-2024-9355"
@@ -84,6 +84,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:2416"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:7118"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2024-9355"
diff --git a/advisories/unreviewed/2025/02/GHSA-j3qr-8f3v-fgjj/GHSA-j3qr-8f3v-fgjj.json b/advisories/unreviewed/2025/02/GHSA-j3qr-8f3v-fgjj/GHSA-j3qr-8f3v-fgjj.json
index 9641053bbb7..0aae6bd0072 100644
--- a/advisories/unreviewed/2025/02/GHSA-j3qr-8f3v-fgjj/GHSA-j3qr-8f3v-fgjj.json
+++ b/advisories/unreviewed/2025/02/GHSA-j3qr-8f3v-fgjj/GHSA-j3qr-8f3v-fgjj.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j3qr-8f3v-fgjj",
-  "modified": "2025-04-23T12:31:25Z",
+  "modified": "2025-05-13T09:31:08Z",
   "published": "2025-02-10T18:30:47Z",
   "aliases": [
     "CVE-2024-12133"
@@ -23,6 +23,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:4049"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:7077"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2024-12133"
diff --git a/advisories/unreviewed/2025/05/GHSA-2qj3-8hcm-v7fh/GHSA-2qj3-8hcm-v7fh.json b/advisories/unreviewed/2025/05/GHSA-2qj3-8hcm-v7fh/GHSA-2qj3-8hcm-v7fh.json
new file mode 100644
index 00000000000..57e5d5d27bd
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2qj3-8hcm-v7fh/GHSA-2qj3-8hcm-v7fh.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2qj3-8hcm-v7fh",
+  "modified": "2025-05-13T09:31:08Z",
+  "published": "2025-05-13T09:31:08Z",
+  "aliases": [
+    "CVE-2025-4339"
+  ],
+  "details": "The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary theme options.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4339"
+    },
+    {
+      "type": "WEB",
+      "url": "https://codex-themes.com/thegem/changelog.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://themeforest.net/item/thegem-creative-multipurpose-highperformance-wordpress-theme/16061685"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f2358979-25b9-4c52-88dc-25390be6bd22?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-13T07:15:52Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-5jqc-r6h2-3m9j/GHSA-5jqc-r6h2-3m9j.json b/advisories/unreviewed/2025/05/GHSA-5jqc-r6h2-3m9j/GHSA-5jqc-r6h2-3m9j.json
new file mode 100644
index 00000000000..2f1ab9588cf
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-5jqc-r6h2-3m9j/GHSA-5jqc-r6h2-3m9j.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5jqc-r6h2-3m9j",
+  "modified": "2025-05-13T09:31:09Z",
+  "published": "2025-05-13T09:31:09Z",
+  "aliases": [
+    "CVE-2025-3916"
+  ],
+  "details": "CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to\nexploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD\nfile) provided by the attacker.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3916"
+    },
+    {
+      "type": "WEB",
+      "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-133-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-133-03.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-13T09:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-6w7j-pwh6-f5f5/GHSA-6w7j-pwh6-f5f5.json b/advisories/unreviewed/2025/05/GHSA-6w7j-pwh6-f5f5/GHSA-6w7j-pwh6-f5f5.json
new file mode 100644
index 00000000000..dabf8318fbc
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-6w7j-pwh6-f5f5/GHSA-6w7j-pwh6-f5f5.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6w7j-pwh6-f5f5",
+  "modified": "2025-05-13T09:31:09Z",
+  "published": "2025-05-13T09:31:09Z",
+  "aliases": [
+    "CVE-2025-41645"
+  ],
+  "details": "An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41645"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cert.vde.com/en/advisories/VDE-2025-010"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-669"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-13T09:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-fvjp-r2gf-q2qc/GHSA-fvjp-r2gf-q2qc.json b/advisories/unreviewed/2025/05/GHSA-fvjp-r2gf-q2qc/GHSA-fvjp-r2gf-q2qc.json
new file mode 100644
index 00000000000..c8bf03ba654
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-fvjp-r2gf-q2qc/GHSA-fvjp-r2gf-q2qc.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fvjp-r2gf-q2qc",
+  "modified": "2025-05-13T09:31:09Z",
+  "published": "2025-05-13T09:31:09Z",
+  "aliases": [
+    "CVE-2025-4474"
+  ],
+  "details": "The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_admin_setting_form_function() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the plugin’s 'register' role setting to make new user registrations default to the administrator role, leading to an elevation of privileges to that of an administrator.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4474"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/request/admin.php#L26"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/request/tabs/login.php#L14"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3290623"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/frontend-dashboard/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/fb61159a-e501-4c55-a384-b6049e0f0bc8?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-285"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-13T07:15:52Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-ppx4-jjmr-85w2/GHSA-ppx4-jjmr-85w2.json b/advisories/unreviewed/2025/05/GHSA-ppx4-jjmr-85w2/GHSA-ppx4-jjmr-85w2.json
new file mode 100644
index 00000000000..2ef0271ca62
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-ppx4-jjmr-85w2/GHSA-ppx4-jjmr-85w2.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-ppx4-jjmr-85w2",
+  "modified": "2025-05-13T09:31:08Z",
+  "published": "2025-05-13T09:31:08Z",
+  "aliases": [
+    "CVE-2025-3107"
+  ],
+  "details": "The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby' parameter in all versions up to, and including, 4.9.9.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3107"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/newsletters-lite/tags/4.9.9.8/helpers/shortcode.php#L1094"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3290691"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3290691/newsletters-lite/trunk/helpers/shortcode.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://tribulant.com/docs/wordpress-mailing-list-plugin/31/#doc6:~:text=snippets%20and%20more.-,Release%20Notes,-The%20changelogs%20below"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/newsletters-lite/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/397555cf-0b0c-4ce5-97ad-59f135f9d195?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-13T07:15:51Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-r5fm-cfwf-f9jw/GHSA-r5fm-cfwf-f9jw.json b/advisories/unreviewed/2025/05/GHSA-r5fm-cfwf-f9jw/GHSA-r5fm-cfwf-f9jw.json
new file mode 100644
index 00000000000..c9fb7045f8a
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-r5fm-cfwf-f9jw/GHSA-r5fm-cfwf-f9jw.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r5fm-cfwf-f9jw",
+  "modified": "2025-05-13T09:31:08Z",
+  "published": "2025-05-13T09:31:08Z",
+  "aliases": [
+    "CVE-2025-4473"
+  ],
+  "details": "The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends outgoing emails. By pointing SMTP to their own server, attackers could capture password reset emails intended for administrators, and elevate their privileges for full site takeover.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4473"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/function-admin.php#L3055"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/layout/settings_tab/email/class-fed-email.php#L122"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/route/class-fed-request.php#L35"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3290623"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/frontend-dashboard/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2f3a10b5-b024-4b3f-af67-b7fcb997d368?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-285"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-13T07:15:52Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-w36c-pjh8-xh3c/GHSA-w36c-pjh8-xh3c.json b/advisories/unreviewed/2025/05/GHSA-w36c-pjh8-xh3c/GHSA-w36c-pjh8-xh3c.json
new file mode 100644
index 00000000000..5e2222b8ee4
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-w36c-pjh8-xh3c/GHSA-w36c-pjh8-xh3c.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w36c-pjh8-xh3c",
+  "modified": "2025-05-13T09:31:08Z",
+  "published": "2025-05-13T09:31:08Z",
+  "aliases": [
+    "CVE-2025-4317"
+  ],
+  "details": "The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem_get_logo_url() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4317"
+    },
+    {
+      "type": "WEB",
+      "url": "https://codex-themes.com/thegem/changelog.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://themeforest.net/item/thegem-creative-multipurpose-highperformance-wordpress-theme/16061685"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d379bc09-7788-4a29-b23f-7f42afe04fd4?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-434"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-13T07:15:52Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-w6c7-j32f-rq8j/GHSA-w6c7-j32f-rq8j.json b/advisories/unreviewed/2025/05/GHSA-w6c7-j32f-rq8j/GHSA-w6c7-j32f-rq8j.json
new file mode 100644
index 00000000000..ad541cbac1a
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-w6c7-j32f-rq8j/GHSA-w6c7-j32f-rq8j.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w6c7-j32f-rq8j",
+  "modified": "2025-05-13T09:31:09Z",
+  "published": "2025-05-13T09:31:09Z",
+  "aliases": [
+    "CVE-2025-27696"
+  ],
+  "details": "Improper Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.\n\nThis issue affects Apache Superset: through 4.1.1.\n\nUsers are recommended to upgrade to version 4.1.2 or above, which fixes the issue.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27696"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/k2od03bxnxs6vcp80sr03ywcxl194413"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/05/12/3"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-285"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-13T09:15:20Z"
+  }
+}
\ No newline at end of file