diff --git a/advisories/unreviewed/2025/06/GHSA-7c63-xmgg-xrx5/GHSA-7c63-xmgg-xrx5.json b/advisories/unreviewed/2025/06/GHSA-7c63-xmgg-xrx5/GHSA-7c63-xmgg-xrx5.json
index 03f88f3ba69..b25c0f20284 100644
--- a/advisories/unreviewed/2025/06/GHSA-7c63-xmgg-xrx5/GHSA-7c63-xmgg-xrx5.json
+++ b/advisories/unreviewed/2025/06/GHSA-7c63-xmgg-xrx5/GHSA-7c63-xmgg-xrx5.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7c63-xmgg-xrx5",
-  "modified": "2025-06-02T18:30:53Z",
+  "modified": "2025-06-03T09:32:04Z",
   "published": "2025-06-02T18:30:53Z",
   "aliases": [
     "CVE-2025-5086"
diff --git a/advisories/unreviewed/2025/06/GHSA-f9j8-jh89-c96f/GHSA-f9j8-jh89-c96f.json b/advisories/unreviewed/2025/06/GHSA-f9j8-jh89-c96f/GHSA-f9j8-jh89-c96f.json
new file mode 100644
index 00000000000..d6738752cdb
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-f9j8-jh89-c96f/GHSA-f9j8-jh89-c96f.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f9j8-jh89-c96f",
+  "modified": "2025-06-03T09:32:05Z",
+  "published": "2025-06-03T09:32:05Z",
+  "aliases": [
+    "CVE-2025-41428"
+  ],
+  "details": "Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41428"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN37075430"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.keiyo-system.co.jp/archives/11310"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T08:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-fqj9-7f6j-j2hx/GHSA-fqj9-7f6j-j2hx.json b/advisories/unreviewed/2025/06/GHSA-fqj9-7f6j-j2hx/GHSA-fqj9-7f6j-j2hx.json
new file mode 100644
index 00000000000..90cac526efb
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-fqj9-7f6j-j2hx/GHSA-fqj9-7f6j-j2hx.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fqj9-7f6j-j2hx",
+  "modified": "2025-06-03T09:32:06Z",
+  "published": "2025-06-03T09:32:06Z",
+  "aliases": [
+    "CVE-2025-5116"
+  ],
+  "details": "The WP Plugin Info Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘containerid’ parameter in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This issue is due to an incomplete patch for CVE-2025-31835.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5116"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/DLXPlugins/wp-plugin-info-card/blob/dev/php/Shortcodes.php#L893"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wp-plugin-info-card/trunk/php/Shortcodes.php#L929"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3303791"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/wp-plugin-info-card/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e29ea7dd-14b8-45d3-a87e-3f58de88af4c?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T09:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-g47q-4gcv-4qvr/GHSA-g47q-4gcv-4qvr.json b/advisories/unreviewed/2025/06/GHSA-g47q-4gcv-4qvr/GHSA-g47q-4gcv-4qvr.json
new file mode 100644
index 00000000000..39b34f1aade
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-g47q-4gcv-4qvr/GHSA-g47q-4gcv-4qvr.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g47q-4gcv-4qvr",
+  "modified": "2025-06-03T09:32:06Z",
+  "published": "2025-06-03T09:32:06Z",
+  "aliases": [
+    "CVE-2025-4420"
+  ],
+  "details": "The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘containerWidth’ parameter in all versions up to, and including, 1.3.1 due to a missing capability check on the vayu_blocks_option_panel_callback() function and insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4420"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/vayu-blocks/trunk/inc/admin-api.php#L6"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3303594"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/vayu-blocks/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/db01bc0a-4508-4fb5-941d-3f1a52528e2b?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T09:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-gh3g-9366-jh5q/GHSA-gh3g-9366-jh5q.json b/advisories/unreviewed/2025/06/GHSA-gh3g-9366-jh5q/GHSA-gh3g-9366-jh5q.json
new file mode 100644
index 00000000000..d062aa16b34
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-gh3g-9366-jh5q/GHSA-gh3g-9366-jh5q.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gh3g-9366-jh5q",
+  "modified": "2025-06-03T09:32:06Z",
+  "published": "2025-06-03T09:32:06Z",
+  "aliases": [
+    "CVE-2025-5103"
+  ],
+  "details": "The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to boolean-based SQL Injection via the 'default_price' and 'product_id' parameters in all versions up to, and including, 3.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5103"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/woo-gift-cards-lite/tags/3.1.4/admin/class-woocommerce-gift-cards-lite-admin.php#L571"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3303359"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/woo-gift-cards-lite/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e9e89383-a9c6-4300-970c-0b36e4d97e3d?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T09:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-mgh6-ff9g-g8rx/GHSA-mgh6-ff9g-g8rx.json b/advisories/unreviewed/2025/06/GHSA-mgh6-ff9g-g8rx/GHSA-mgh6-ff9g-g8rx.json
new file mode 100644
index 00000000000..88e010e213f
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-mgh6-ff9g-g8rx/GHSA-mgh6-ff9g-g8rx.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mgh6-ff9g-g8rx",
+  "modified": "2025-06-03T09:32:06Z",
+  "published": "2025-06-03T09:32:06Z",
+  "aliases": [
+    "CVE-2025-1725"
+  ],
+  "details": "The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1725"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/file-manager/tags/6.6.3/backend/app/Http/Controllers/FileManagerController.php#L112"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/84ddb481-f989-4ba8-9925-e8327c30de38?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-434"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T09:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-vmqr-hrfr-7527/GHSA-vmqr-hrfr-7527.json b/advisories/unreviewed/2025/06/GHSA-vmqr-hrfr-7527/GHSA-vmqr-hrfr-7527.json
new file mode 100644
index 00000000000..fd0f8963f4b
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-vmqr-hrfr-7527/GHSA-vmqr-hrfr-7527.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vmqr-hrfr-7527",
+  "modified": "2025-06-03T09:32:04Z",
+  "published": "2025-06-03T09:32:04Z",
+  "aliases": [
+    "CVE-2025-21479"
+  ],
+  "details": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21479"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T07:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-x2cp-8gpq-25hx/GHSA-x2cp-8gpq-25hx.json b/advisories/unreviewed/2025/06/GHSA-x2cp-8gpq-25hx/GHSA-x2cp-8gpq-25hx.json
new file mode 100644
index 00000000000..81c5c6140a8
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-x2cp-8gpq-25hx/GHSA-x2cp-8gpq-25hx.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x2cp-8gpq-25hx",
+  "modified": "2025-06-03T09:32:05Z",
+  "published": "2025-06-03T09:32:05Z",
+  "aliases": [
+    "CVE-2025-46355"
+  ],
+  "details": "Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SYSTEM privilege on Windows system where the product is running by a local authenticated attacker.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46355"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN05562338"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.keiyo-system.co.jp/archives/11305"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-276"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T08:15:19Z"
+  }
+}
\ No newline at end of file