diff --git a/advisories/unreviewed/2025/03/GHSA-2rw2-xw4x-5r3h/GHSA-2rw2-xw4x-5r3h.json b/advisories/unreviewed/2025/03/GHSA-2rw2-xw4x-5r3h/GHSA-2rw2-xw4x-5r3h.json
new file mode 100644
index 00000000000..923f6c9bdd4
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-2rw2-xw4x-5r3h/GHSA-2rw2-xw4x-5r3h.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2rw2-xw4x-5r3h",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26924"
+  ],
+  "details": "Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound Ohio Extra allows Code Injection. This issue affects Ohio Extra: from n/a through 3.4.7.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26924"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/ohio-extra/vulnerability/wordpress-ohio-theme-extra-plugin-3-4-7-shortcode-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-2xwj-6795-v7p4/GHSA-2xwj-6795-v7p4.json b/advisories/unreviewed/2025/03/GHSA-2xwj-6795-v7p4/GHSA-2xwj-6795-v7p4.json
new file mode 100644
index 00000000000..286a281b078
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-2xwj-6795-v7p4/GHSA-2xwj-6795-v7p4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2xwj-6795-v7p4",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26972"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26972"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/private-content/vulnerability/wordpress-privatecontent-plugin-8-11-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-34p8-5457-hfg2/GHSA-34p8-5457-hfg2.json b/advisories/unreviewed/2025/03/GHSA-34p8-5457-hfg2/GHSA-34p8-5457-hfg2.json
new file mode 100644
index 00000000000..9101555d372
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-34p8-5457-hfg2/GHSA-34p8-5457-hfg2.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-34p8-5457-hfg2",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26556"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zzmaster WP AntiDDOS allows Reflected XSS. This issue affects WP AntiDDOS: from n/a through 2.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26556"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wpantiddos/vulnerability/wordpress-wp-antiddos-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-37x9-927q-77wg/GHSA-37x9-927q-77wg.json b/advisories/unreviewed/2025/03/GHSA-37x9-927q-77wg/GHSA-37x9-927q-77wg.json
new file mode 100644
index 00000000000..a0e3d4f8013
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-37x9-927q-77wg/GHSA-37x9-927q-77wg.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-37x9-927q-77wg",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26555"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Debug-Bar-Extender allows Reflected XSS. This issue affects Debug-Bar-Extender: from n/a through 0.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26555"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/debug-bar-extender/vulnerability/wordpress-debug-bar-extender-plugin-0-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-7gwx-43jg-g4qj/GHSA-7gwx-43jg-g4qj.json b/advisories/unreviewed/2025/03/GHSA-7gwx-43jg-g4qj/GHSA-7gwx-43jg-g4qj.json
new file mode 100644
index 00000000000..25c234de406
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-7gwx-43jg-g4qj/GHSA-7gwx-43jg-g4qj.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7gwx-43jg-g4qj",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26886"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Authors allows SQL Injection. This issue affects PublishPress Authors: from n/a through 4.7.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26886"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/publishpress-authors/vulnerability/wordpress-publishpress-authors-plugin-4-7-3-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-87c8-vcwq-2gcc/GHSA-87c8-vcwq-2gcc.json b/advisories/unreviewed/2025/03/GHSA-87c8-vcwq-2gcc/GHSA-87c8-vcwq-2gcc.json
new file mode 100644
index 00000000000..599b24e6db7
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-87c8-vcwq-2gcc/GHSA-87c8-vcwq-2gcc.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-87c8-vcwq-2gcc",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26978"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound FS Poster. This issue affects FS Poster: from n/a through 6.5.8.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26978"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/fs-poster/vulnerability/wordpress-fs-poster-plugin-6-5-8-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-8rmj-hg3w-859w/GHSA-8rmj-hg3w-859w.json b/advisories/unreviewed/2025/03/GHSA-8rmj-hg3w-859w/GHSA-8rmj-hg3w-859w.json
new file mode 100644
index 00000000000..6c47be7b92e
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-8rmj-hg3w-859w/GHSA-8rmj-hg3w-859w.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8rmj-hg3w-859w",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-23744"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dvs11 Random Posts, Mp3 Player + ShareButton allows Reflected XSS. This issue affects Random Posts, Mp3 Player + ShareButton: from n/a through 1.4.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23744"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/random-posts-mp3-player-sharebutton/vulnerability/wordpress-random-posts-mp3-player-sharebutton-plugin-1-4-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:12Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-9pmv-v4jf-wjh6/GHSA-9pmv-v4jf-wjh6.json b/advisories/unreviewed/2025/03/GHSA-9pmv-v4jf-wjh6/GHSA-9pmv-v4jf-wjh6.json
new file mode 100644
index 00000000000..5abab97d8c1
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-9pmv-v4jf-wjh6/GHSA-9pmv-v4jf-wjh6.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9pmv-v4jf-wjh6",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26553"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spring Devs Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin allows Reflected XSS. This issue affects Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin: from n/a through 2.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26553"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wc-pre-order/vulnerability/wordpress-pre-order-addon-for-woocommerce-plugin-1-0-7-reflected-cross-site-scripting?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-9rmh-v8rw-6322/GHSA-9rmh-v8rw-6322.json b/advisories/unreviewed/2025/03/GHSA-9rmh-v8rw-6322/GHSA-9rmh-v8rw-6322.json
new file mode 100644
index 00000000000..ef6cb8fb82c
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-9rmh-v8rw-6322/GHSA-9rmh-v8rw-6322.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9rmh-v8rw-6322",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26899"
+  ],
+  "details": "Cross-Site Request Forgery (CSRF) vulnerability in Recapture Cart Recovery and Email Marketing Recapture for WooCommerce allows Cross Site Request Forgery. This issue affects Recapture for WooCommerce: from n/a through 1.0.43.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26899"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/recapture-for-woocommerce/vulnerability/wordpress-recapture-for-woocommerce-plugin-1-0-43-csrf-to-settings-change-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-cc97-wq85-x524/GHSA-cc97-wq85-x524.json b/advisories/unreviewed/2025/03/GHSA-cc97-wq85-x524/GHSA-cc97-wq85-x524.json
new file mode 100644
index 00000000000..e7dc21e10e3
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-cc97-wq85-x524/GHSA-cc97-wq85-x524.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cc97-wq85-x524",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-0524"
+  ],
+  "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0524"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T23:15:36Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-f69x-699j-343p/GHSA-f69x-699j-343p.json b/advisories/unreviewed/2025/03/GHSA-f69x-699j-343p/GHSA-f69x-699j-343p.json
new file mode 100644
index 00000000000..8631ec5978d
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-f69x-699j-343p/GHSA-f69x-699j-343p.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f69x-699j-343p",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26969"
+  ],
+  "details": "Missing Authorization vulnerability in Aldo Latino PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26969"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/private-content/vulnerability/wordpress-privatecontent-plugin-8-11-5-subscriber-site-wide-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-hj6h-mjcj-4q98/GHSA-hj6h-mjcj-4q98.json b/advisories/unreviewed/2025/03/GHSA-hj6h-mjcj-4q98/GHSA-hj6h-mjcj-4q98.json
new file mode 100644
index 00000000000..ae95a5677f4
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-hj6h-mjcj-4q98/GHSA-hj6h-mjcj-4q98.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hj6h-mjcj-4q98",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-27281"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cookforweb All In Menu allows Blind SQL Injection. This issue affects All In Menu: from n/a through 1.1.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27281"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/all-in-menu/vulnerability/wordpress-all-in-menu-plugin-1-1-5-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-j336-f4h7-mj7v/GHSA-j336-f4h7-mj7v.json b/advisories/unreviewed/2025/03/GHSA-j336-f4h7-mj7v/GHSA-j336-f4h7-mj7v.json
new file mode 100644
index 00000000000..532c6dc2c08
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-j336-f4h7-mj7v/GHSA-j336-f4h7-mj7v.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j336-f4h7-mj7v",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26875"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce allows SQL Injection. This issue affects Multiple Shipping And Billing Address For Woocommerce: from n/a through 1.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26875"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/different-shipping-and-billing-address-for-woocommerce/vulnerability/wordpress-multiple-shipping-and-billing-address-for-woocommerce-plugin-1-3-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-m2q9-2vpj-6vhp/GHSA-m2q9-2vpj-6vhp.json b/advisories/unreviewed/2025/03/GHSA-m2q9-2vpj-6vhp/GHSA-m2q9-2vpj-6vhp.json
new file mode 100644
index 00000000000..1c3aa422e0e
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-m2q9-2vpj-6vhp/GHSA-m2q9-2vpj-6vhp.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m2q9-2vpj-6vhp",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26554"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Discord Post allows Reflected XSS. This issue affects WP Discord Post: from n/a through 2.1.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26554"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wp-discord-post/vulnerability/wordpress-wp-discord-post-plugin-2-1-0-reflectef-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-mp3f-frph-hqx2/GHSA-mp3f-frph-hqx2.json b/advisories/unreviewed/2025/03/GHSA-mp3f-frph-hqx2/GHSA-mp3f-frph-hqx2.json
new file mode 100644
index 00000000000..f0bad35427a
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-mp3f-frph-hqx2/GHSA-mp3f-frph-hqx2.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mp3f-frph-hqx2",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26548"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Random Image Selector allows Reflected XSS. This issue affects Random Image Selector: from n/a through 2.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26548"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/random-image-selector/vulnerability/wordpress-random-image-selector-plugin-1-5-6-reflected-cross-site-scripting-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:12Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-q48q-mrmp-gpx2/GHSA-q48q-mrmp-gpx2.json b/advisories/unreviewed/2025/03/GHSA-q48q-mrmp-gpx2/GHSA-q48q-mrmp-gpx2.json
new file mode 100644
index 00000000000..57f0084d28f
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-q48q-mrmp-gpx2/GHSA-q48q-mrmp-gpx2.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q48q-mrmp-gpx2",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26940"
+  ],
+  "details": "Path Traversal vulnerability in NotFound Pie Register Premium. This issue affects Pie Register Premium: from n/a through 3.8.3.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26940"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/pie-register-premium/vulnerability/wordpress-pie-register-premium-plugin-3-8-3-2-path-traversal-to-non-arbitrary-file-deletion-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-35"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-qf84-x8w9-99px/GHSA-qf84-x8w9-99px.json b/advisories/unreviewed/2025/03/GHSA-qf84-x8w9-99px/GHSA-qf84-x8w9-99px.json
new file mode 100644
index 00000000000..55250e7c77d
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-qf84-x8w9-99px/GHSA-qf84-x8w9-99px.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qf84-x8w9-99px",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26976"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aldo Latino PrivateContent. This issue affects PrivateContent: from n/a through 8.11.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26976"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/private-content/vulnerability/wordpress-privatecontent-plugin-8-11-4-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-v7xw-8rmc-qv9f/GHSA-v7xw-8rmc-qv9f.json b/advisories/unreviewed/2025/03/GHSA-v7xw-8rmc-qv9f/GHSA-v7xw-8rmc-qv9f.json
new file mode 100644
index 00000000000..202593fca88
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-v7xw-8rmc-qv9f/GHSA-v7xw-8rmc-qv9f.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v7xw-8rmc-qv9f",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-2334"
+  ],
+  "details": "A vulnerability classified as problematic has been found in 274056675 springboot-openai-chatgpt e84f6f5. This affects the function deleteChat of the file /api/mjkj-chat/chat/ai/delete/chat of the component Chat History Handler. The manipulation of the argument chatListId leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2334"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.299799"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.299799"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.505688"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cnblogs.com/aibot/p/18732182"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T23:15:36Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-w3p7-73q2-q3hc/GHSA-w3p7-73q2-q3hc.json b/advisories/unreviewed/2025/03/GHSA-w3p7-73q2-q3hc/GHSA-w3p7-73q2-q3hc.json
new file mode 100644
index 00000000000..82287e309f9
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-w3p7-73q2-q3hc/GHSA-w3p7-73q2-q3hc.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w3p7-73q2-q3hc",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26961"
+  ],
+  "details": "Missing Authorization vulnerability in NotFound Fresh Framework allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Fresh Framework: from n/a through 1.70.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26961"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/fresh-framework/vulnerability/wordpress-fresh-framework-plugin-1-70-0-unauthenticated-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-x9hh-4chc-r5pm/GHSA-x9hh-4chc-r5pm.json b/advisories/unreviewed/2025/03/GHSA-x9hh-4chc-r5pm/GHSA-x9hh-4chc-r5pm.json
new file mode 100644
index 00000000000..7f9ef28c93c
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-x9hh-4chc-r5pm/GHSA-x9hh-4chc-r5pm.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x9hh-4chc-r5pm",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26895"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maennchen1.de m1.DownloadList allows DOM-Based XSS. This issue affects m1.DownloadList: from n/a through 0.19.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26895"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/m1downloadlist/vulnerability/wordpress-m1-downloadlist-plugin-0-19-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-xprw-r8hx-4rqm/GHSA-xprw-r8hx-4rqm.json b/advisories/unreviewed/2025/03/GHSA-xprw-r8hx-4rqm/GHSA-xprw-r8hx-4rqm.json
new file mode 100644
index 00000000000..f4f98df6312
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-xprw-r8hx-4rqm/GHSA-xprw-r8hx-4rqm.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xprw-r8hx-4rqm",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26921"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager allows Object Injection. This issue affects Booking and Rental Manager: from n/a through 2.2.6.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26921"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/booking-and-rental-manager-for-woocommerce/vulnerability/wordpress-booking-and-rental-manager-plugin-2-2-6-php-object-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file