diff --git a/advisories/unreviewed/2025/03/GHSA-2gjq-2933-hpjg/GHSA-2gjq-2933-hpjg.json b/advisories/unreviewed/2025/03/GHSA-2gjq-2933-hpjg/GHSA-2gjq-2933-hpjg.json
new file mode 100644
index 00000000000..04df57fcbc3
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-2gjq-2933-hpjg/GHSA-2gjq-2933-hpjg.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2gjq-2933-hpjg",
+  "modified": "2025-03-13T06:30:35Z",
+  "published": "2025-03-13T06:30:35Z",
+  "aliases": [
+    "CVE-2024-7296"
+  ],
+  "details": "An issue was discovered in GitLab EE affecting all versions from 16.5 prior to 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2  which allowed a user with a custom permission to approve pending membership requests beyond the maximum number of allowed users.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7296"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/2602274"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/475056"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:35Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-3cg7-x7vx-225c/GHSA-3cg7-x7vx-225c.json b/advisories/unreviewed/2025/03/GHSA-3cg7-x7vx-225c/GHSA-3cg7-x7vx-225c.json
new file mode 100644
index 00000000000..037141020a4
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-3cg7-x7vx-225c/GHSA-3cg7-x7vx-225c.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3cg7-x7vx-225c",
+  "modified": "2025-03-13T06:30:35Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2025-0652"
+  ],
+  "details": "An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2 could allow unauthorized users to access confidential information intended for internal use only.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0652"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/2947863"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/514532"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:36Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-3f7x-54cr-7w35/GHSA-3f7x-54cr-7w35.json b/advisories/unreviewed/2025/03/GHSA-3f7x-54cr-7w35/GHSA-3f7x-54cr-7w35.json
index 0347b98b6ad..377a1e5bc00 100644
--- a/advisories/unreviewed/2025/03/GHSA-3f7x-54cr-7w35/GHSA-3f7x-54cr-7w35.json
+++ b/advisories/unreviewed/2025/03/GHSA-3f7x-54cr-7w35/GHSA-3f7x-54cr-7w35.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3f7x-54cr-7w35",
-  "modified": "2025-03-12T18:32:52Z",
+  "modified": "2025-03-13T06:30:34Z",
   "published": "2025-03-12T15:32:05Z",
   "aliases": [
     "CVE-2025-22954"
@@ -22,6 +22,10 @@
     {
       "type": "WEB",
       "url": "https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38829"
+    },
+    {
+      "type": "WEB",
+      "url": "https://koha-community.org/koha-24-11-02-released"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/03/GHSA-5mjv-86c4-mprj/GHSA-5mjv-86c4-mprj.json b/advisories/unreviewed/2025/03/GHSA-5mjv-86c4-mprj/GHSA-5mjv-86c4-mprj.json
new file mode 100644
index 00000000000..44511b656c1
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-5mjv-86c4-mprj/GHSA-5mjv-86c4-mprj.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5mjv-86c4-mprj",
+  "modified": "2025-03-13T06:30:35Z",
+  "published": "2025-03-13T06:30:35Z",
+  "aliases": [
+    "CVE-2025-1257"
+  ],
+  "details": "An issue was discovered in GitLab EE affecting all versions starting with 12.3 before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. A vulnerability in certain GitLab instances could allow an attacker to cause a denial of service condition by manipulating specific API inputs.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1257"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/2984218"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/519348"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:36Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-66q2-c4x8-8x2c/GHSA-66q2-c4x8-8x2c.json b/advisories/unreviewed/2025/03/GHSA-66q2-c4x8-8x2c/GHSA-66q2-c4x8-8x2c.json
new file mode 100644
index 00000000000..fdee9a0fa32
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-66q2-c4x8-8x2c/GHSA-66q2-c4x8-8x2c.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-66q2-c4x8-8x2c",
+  "modified": "2025-03-13T06:30:35Z",
+  "published": "2025-03-13T06:30:35Z",
+  "aliases": [
+    "CVE-2025-1486"
+  ],
+  "details": "The WoWPth WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1486"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/182ecda8-3385-4f9f-a917-efdeb237247c"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:37Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-6gm9-64qv-5qwj/GHSA-6gm9-64qv-5qwj.json b/advisories/unreviewed/2025/03/GHSA-6gm9-64qv-5qwj/GHSA-6gm9-64qv-5qwj.json
new file mode 100644
index 00000000000..ae99484526d
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-6gm9-64qv-5qwj/GHSA-6gm9-64qv-5qwj.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6gm9-64qv-5qwj",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2024-13054"
+  ],
+  "details": "An issue was discovered in GitLab CE/EE affecting all versions before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. where a denial of service vulnerability could allow an attacker to cause a system reboot under certain conditions.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13054"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/2911928"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/511004"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:35Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-78r2-qh4g-m8q3/GHSA-78r2-qh4g-m8q3.json b/advisories/unreviewed/2025/03/GHSA-78r2-qh4g-m8q3/GHSA-78r2-qh4g-m8q3.json
new file mode 100644
index 00000000000..b87d98a9e13
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-78r2-qh4g-m8q3/GHSA-78r2-qh4g-m8q3.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-78r2-qh4g-m8q3",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2024-13885"
+  ],
+  "details": "The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13885"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/b64d17d6-8416-476e-ad78-b7b9cb85b84f"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:35Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-8rx5-5gmv-vg9p/GHSA-8rx5-5gmv-vg9p.json b/advisories/unreviewed/2025/03/GHSA-8rx5-5gmv-vg9p/GHSA-8rx5-5gmv-vg9p.json
new file mode 100644
index 00000000000..a2d1f4ff44e
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-8rx5-5gmv-vg9p/GHSA-8rx5-5gmv-vg9p.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8rx5-5gmv-vg9p",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2024-13887"
+  ],
+  "details": "The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.14 via the 'ajax_listing_submit_image_upload' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to add arbitrary images to listings.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13887"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3249927/business-directory-plugin/trunk/includes/class-wpbdp.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/06c3de6d-92e7-46f8-86a9-37f027767fc0?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-639"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T04:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-92f4-7j98-gcp8/GHSA-92f4-7j98-gcp8.json b/advisories/unreviewed/2025/03/GHSA-92f4-7j98-gcp8/GHSA-92f4-7j98-gcp8.json
new file mode 100644
index 00000000000..b9377cd6390
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-92f4-7j98-gcp8/GHSA-92f4-7j98-gcp8.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-92f4-7j98-gcp8",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2025-1503"
+  ],
+  "details": "The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Roundup Recipe Name field in all versions up to, and including, 9.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1503"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3254687/wp-recipe-maker/trunk/includes/public/class-wprm-list-saver.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e23f63a0-3061-42e0-a6be-05fa20a174ea?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T05:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-95hj-r9g9-45hj/GHSA-95hj-r9g9-45hj.json b/advisories/unreviewed/2025/03/GHSA-95hj-r9g9-45hj/GHSA-95hj-r9g9-45hj.json
new file mode 100644
index 00000000000..31c00def060
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-95hj-r9g9-45hj/GHSA-95hj-r9g9-45hj.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-95hj-r9g9-45hj",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2025-2104"
+  ],
+  "details": "The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to unauthorized post publication due to insufficient validation on the pagelayer_save_content() function in all versions up to, and including, 1.9.8. This makes it possible for authenticated attackers, with Contributor-level access and above, to bypass post moderation and publish posts to the site.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2104"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3253356%40pagelayer&new=3253356%40pagelayer&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2e3897fb-0f40-4111-8a7d-60415e1f9f96?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T05:15:28Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-cqph-p8m6-m58v/GHSA-cqph-p8m6-m58v.json b/advisories/unreviewed/2025/03/GHSA-cqph-p8m6-m58v/GHSA-cqph-p8m6-m58v.json
new file mode 100644
index 00000000000..781d4f2bad1
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-cqph-p8m6-m58v/GHSA-cqph-p8m6-m58v.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cqph-p8m6-m58v",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2024-13884"
+  ],
+  "details": "The Limit Bio WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13884"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/759a60ac-c890-4961-91e4-53db5096eb3c"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:35Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-g8qj-jv5h-78cp/GHSA-g8qj-jv5h-78cp.json b/advisories/unreviewed/2025/03/GHSA-g8qj-jv5h-78cp/GHSA-g8qj-jv5h-78cp.json
index a3277355a1e..db8f90fdd5a 100644
--- a/advisories/unreviewed/2025/03/GHSA-g8qj-jv5h-78cp/GHSA-g8qj-jv5h-78cp.json
+++ b/advisories/unreviewed/2025/03/GHSA-g8qj-jv5h-78cp/GHSA-g8qj-jv5h-78cp.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g8qj-jv5h-78cp",
-  "modified": "2025-03-11T15:31:00Z",
+  "modified": "2025-03-13T06:30:34Z",
   "published": "2025-03-11T15:31:00Z",
   "aliases": [
     "CVE-2025-27363"
@@ -22,6 +22,18 @@
     {
       "type": "WEB",
       "url": "https://www.facebook.com/security/advisories/cve-2025-27363"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/03/13/1"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/03/13/2"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/03/13/3"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/03/GHSA-h5p7-7wx6-9q49/GHSA-h5p7-7wx6-9q49.json b/advisories/unreviewed/2025/03/GHSA-h5p7-7wx6-9q49/GHSA-h5p7-7wx6-9q49.json
new file mode 100644
index 00000000000..674d3007c5f
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-h5p7-7wx6-9q49/GHSA-h5p7-7wx6-9q49.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h5p7-7wx6-9q49",
+  "modified": "2025-03-13T06:30:35Z",
+  "published": "2025-03-13T06:30:35Z",
+  "aliases": [
+    "CVE-2024-13891"
+  ],
+  "details": "The Schedule WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13891"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/58c8b73c-3a29-4a66-9b2e-f24b5c2769ac"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:35Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-jj7w-rgj3-p8jw/GHSA-jj7w-rgj3-p8jw.json b/advisories/unreviewed/2025/03/GHSA-jj7w-rgj3-p8jw/GHSA-jj7w-rgj3-p8jw.json
new file mode 100644
index 00000000000..d6fe741ab02
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-jj7w-rgj3-p8jw/GHSA-jj7w-rgj3-p8jw.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jj7w-rgj3-p8jw",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2024-12380"
+  ],
+  "details": "An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12380"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/2868951"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/508557"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-209"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:35Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-jqww-pvxg-f4jw/GHSA-jqww-pvxg-f4jw.json b/advisories/unreviewed/2025/03/GHSA-jqww-pvxg-f4jw/GHSA-jqww-pvxg-f4jw.json
new file mode 100644
index 00000000000..5ef87482a8b
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-jqww-pvxg-f4jw/GHSA-jqww-pvxg-f4jw.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jqww-pvxg-f4jw",
+  "modified": "2025-03-13T06:30:35Z",
+  "published": "2025-03-13T06:30:35Z",
+  "aliases": [
+    "CVE-2025-1401"
+  ],
+  "details": "The WP Click Info WordPress plugin through 2.7.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1401"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/072620a2-76db-49d2-aae5-1170c409f7e7"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:36Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-jx93-fcjj-g734/GHSA-jx93-fcjj-g734.json b/advisories/unreviewed/2025/03/GHSA-jx93-fcjj-g734/GHSA-jx93-fcjj-g734.json
new file mode 100644
index 00000000000..30c6576631f
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-jx93-fcjj-g734/GHSA-jx93-fcjj-g734.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jx93-fcjj-g734",
+  "modified": "2025-03-13T06:30:35Z",
+  "published": "2025-03-13T06:30:35Z",
+  "aliases": [
+    "CVE-2025-1436"
+  ],
+  "details": "The Limit Bio WordPress plugin through 1.0 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1436"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/849ed0a0-be17-43cf-a3a1-ad54dfb33d57"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:37Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-mcp2-9qpg-mmvj/GHSA-mcp2-9qpg-mmvj.json b/advisories/unreviewed/2025/03/GHSA-mcp2-9qpg-mmvj/GHSA-mcp2-9qpg-mmvj.json
new file mode 100644
index 00000000000..43cccd100fc
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-mcp2-9qpg-mmvj/GHSA-mcp2-9qpg-mmvj.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mcp2-9qpg-mmvj",
+  "modified": "2025-03-13T06:30:35Z",
+  "published": "2025-03-13T06:30:35Z",
+  "aliases": [
+    "CVE-2025-1487"
+  ],
+  "details": "The WoWPth WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1487"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/9c683c2e-4f7f-4862-b844-6bdc3d1885dd"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:37Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-p53j-g8pw-4w5f/GHSA-p53j-g8pw-4w5f.json b/advisories/unreviewed/2025/03/GHSA-p53j-g8pw-4w5f/GHSA-p53j-g8pw-4w5f.json
new file mode 100644
index 00000000000..f1a4274a0de
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-p53j-g8pw-4w5f/GHSA-p53j-g8pw-4w5f.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p53j-g8pw-4w5f",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2020-36843"
+  ],
+  "details": "The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36843"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/str4d/ed25519-java/issues/82#issue-727629226"
+    },
+    {
+      "type": "WEB",
+      "url": "https://eprint.iacr.org/2020/1244"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-347"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:34Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-vpfh-639j-fr82/GHSA-vpfh-639j-fr82.json b/advisories/unreviewed/2025/03/GHSA-vpfh-639j-fr82/GHSA-vpfh-639j-fr82.json
new file mode 100644
index 00000000000..904e5698aa3
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-vpfh-639j-fr82/GHSA-vpfh-639j-fr82.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vpfh-639j-fr82",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2025-2250"
+  ],
+  "details": "The WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2250"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.svn.wordpress.org/reportattacks/tags/2.32/includes/list-tables/class-reportattacks-list-table.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3254851%40reportattacks&new=3254851%40reportattacks&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/602bf9b1-17a9-441a-b12d-15412df2deb4?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T04:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-x8w2-qrcv-wgc3/GHSA-x8w2-qrcv-wgc3.json b/advisories/unreviewed/2025/03/GHSA-x8w2-qrcv-wgc3/GHSA-x8w2-qrcv-wgc3.json
new file mode 100644
index 00000000000..d296475557d
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-x8w2-qrcv-wgc3/GHSA-x8w2-qrcv-wgc3.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x8w2-qrcv-wgc3",
+  "modified": "2025-03-13T06:30:34Z",
+  "published": "2025-03-13T06:30:34Z",
+  "aliases": [
+    "CVE-2025-1561"
+  ],
+  "details": "The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages when logging is enabled that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1561"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/apppresser/tags/4.4.10/templates/template.php#L32"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3254632/apppresser/tags/4.4.11/inc/AppPresser_Log_Admin.php?old=3219464&old_path=apppresser%2Ftags%2F4.4.10%2Finc%2FAppPresser_Log_Admin.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/77328e35-b6e6-40eb-8c85-896d54419aef?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T05:15:27Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-xq5v-g7v7-8q74/GHSA-xq5v-g7v7-8q74.json b/advisories/unreviewed/2025/03/GHSA-xq5v-g7v7-8q74/GHSA-xq5v-g7v7-8q74.json
new file mode 100644
index 00000000000..767f369aa36
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-xq5v-g7v7-8q74/GHSA-xq5v-g7v7-8q74.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xq5v-g7v7-8q74",
+  "modified": "2025-03-13T06:30:35Z",
+  "published": "2025-03-13T06:30:35Z",
+  "aliases": [
+    "CVE-2024-8402"
+  ],
+  "details": "An issue was discovered in GitLab EE affecting all versions starting from 17.2 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. An input validation issue in the Google Cloud IAM integration feature could have enabled a Maintainer to introduce malicious code.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8402"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/2601569"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/482813"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-77"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-13T06:15:36Z"
+  }
+}
\ No newline at end of file