From 6ccfc4d64c10db27ac6ab7aa180253915eea4083 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sun, 16 Mar 2025 00:36:57 +0000
Subject: [PATCH] Publish Advisories

GHSA-2rw2-xw4x-5r3h
GHSA-2xwj-6795-v7p4
GHSA-34p8-5457-hfg2
GHSA-37x9-927q-77wg
GHSA-7gwx-43jg-g4qj
GHSA-87c8-vcwq-2gcc
GHSA-8rmj-hg3w-859w
GHSA-9pmv-v4jf-wjh6
GHSA-9rmh-v8rw-6322
GHSA-cc97-wq85-x524
GHSA-f69x-699j-343p
GHSA-hj6h-mjcj-4q98
GHSA-j336-f4h7-mj7v
GHSA-m2q9-2vpj-6vhp
GHSA-mp3f-frph-hqx2
GHSA-q48q-mrmp-gpx2
GHSA-qf84-x8w9-99px
GHSA-v7xw-8rmc-qv9f
GHSA-w3p7-73q2-q3hc
GHSA-x9hh-4chc-r5pm
GHSA-xprw-r8hx-4rqm
---
 .../GHSA-2rw2-xw4x-5r3h.json                  | 36 +++++++++++++
 .../GHSA-2xwj-6795-v7p4.json                  | 36 +++++++++++++
 .../GHSA-34p8-5457-hfg2.json                  | 36 +++++++++++++
 .../GHSA-37x9-927q-77wg.json                  | 36 +++++++++++++
 .../GHSA-7gwx-43jg-g4qj.json                  | 36 +++++++++++++
 .../GHSA-87c8-vcwq-2gcc.json                  | 36 +++++++++++++
 .../GHSA-8rmj-hg3w-859w.json                  | 36 +++++++++++++
 .../GHSA-9pmv-v4jf-wjh6.json                  | 36 +++++++++++++
 .../GHSA-9rmh-v8rw-6322.json                  | 36 +++++++++++++
 .../GHSA-cc97-wq85-x524.json                  | 25 +++++++++
 .../GHSA-f69x-699j-343p.json                  | 36 +++++++++++++
 .../GHSA-hj6h-mjcj-4q98.json                  | 36 +++++++++++++
 .../GHSA-j336-f4h7-mj7v.json                  | 36 +++++++++++++
 .../GHSA-m2q9-2vpj-6vhp.json                  | 36 +++++++++++++
 .../GHSA-mp3f-frph-hqx2.json                  | 36 +++++++++++++
 .../GHSA-q48q-mrmp-gpx2.json                  | 36 +++++++++++++
 .../GHSA-qf84-x8w9-99px.json                  | 36 +++++++++++++
 .../GHSA-v7xw-8rmc-qv9f.json                  | 52 +++++++++++++++++++
 .../GHSA-w3p7-73q2-q3hc.json                  | 36 +++++++++++++
 .../GHSA-x9hh-4chc-r5pm.json                  | 36 +++++++++++++
 .../GHSA-xprw-r8hx-4rqm.json                  | 36 +++++++++++++
 21 files changed, 761 insertions(+)
 create mode 100644 advisories/unreviewed/2025/03/GHSA-2rw2-xw4x-5r3h/GHSA-2rw2-xw4x-5r3h.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-2xwj-6795-v7p4/GHSA-2xwj-6795-v7p4.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-34p8-5457-hfg2/GHSA-34p8-5457-hfg2.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-37x9-927q-77wg/GHSA-37x9-927q-77wg.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-7gwx-43jg-g4qj/GHSA-7gwx-43jg-g4qj.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-87c8-vcwq-2gcc/GHSA-87c8-vcwq-2gcc.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-8rmj-hg3w-859w/GHSA-8rmj-hg3w-859w.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-9pmv-v4jf-wjh6/GHSA-9pmv-v4jf-wjh6.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-9rmh-v8rw-6322/GHSA-9rmh-v8rw-6322.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-cc97-wq85-x524/GHSA-cc97-wq85-x524.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-f69x-699j-343p/GHSA-f69x-699j-343p.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-hj6h-mjcj-4q98/GHSA-hj6h-mjcj-4q98.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-j336-f4h7-mj7v/GHSA-j336-f4h7-mj7v.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-m2q9-2vpj-6vhp/GHSA-m2q9-2vpj-6vhp.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-mp3f-frph-hqx2/GHSA-mp3f-frph-hqx2.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-q48q-mrmp-gpx2/GHSA-q48q-mrmp-gpx2.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-qf84-x8w9-99px/GHSA-qf84-x8w9-99px.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-v7xw-8rmc-qv9f/GHSA-v7xw-8rmc-qv9f.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-w3p7-73q2-q3hc/GHSA-w3p7-73q2-q3hc.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-x9hh-4chc-r5pm/GHSA-x9hh-4chc-r5pm.json
 create mode 100644 advisories/unreviewed/2025/03/GHSA-xprw-r8hx-4rqm/GHSA-xprw-r8hx-4rqm.json

diff --git a/advisories/unreviewed/2025/03/GHSA-2rw2-xw4x-5r3h/GHSA-2rw2-xw4x-5r3h.json b/advisories/unreviewed/2025/03/GHSA-2rw2-xw4x-5r3h/GHSA-2rw2-xw4x-5r3h.json
new file mode 100644
index 00000000000..923f6c9bdd4
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-2rw2-xw4x-5r3h/GHSA-2rw2-xw4x-5r3h.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2rw2-xw4x-5r3h",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26924"
+  ],
+  "details": "Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound Ohio Extra allows Code Injection. This issue affects Ohio Extra: from n/a through 3.4.7.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26924"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/ohio-extra/vulnerability/wordpress-ohio-theme-extra-plugin-3-4-7-shortcode-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-2xwj-6795-v7p4/GHSA-2xwj-6795-v7p4.json b/advisories/unreviewed/2025/03/GHSA-2xwj-6795-v7p4/GHSA-2xwj-6795-v7p4.json
new file mode 100644
index 00000000000..286a281b078
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-2xwj-6795-v7p4/GHSA-2xwj-6795-v7p4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2xwj-6795-v7p4",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26972"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26972"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/private-content/vulnerability/wordpress-privatecontent-plugin-8-11-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-34p8-5457-hfg2/GHSA-34p8-5457-hfg2.json b/advisories/unreviewed/2025/03/GHSA-34p8-5457-hfg2/GHSA-34p8-5457-hfg2.json
new file mode 100644
index 00000000000..9101555d372
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-34p8-5457-hfg2/GHSA-34p8-5457-hfg2.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-34p8-5457-hfg2",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26556"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zzmaster WP AntiDDOS allows Reflected XSS. This issue affects WP AntiDDOS: from n/a through 2.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26556"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wpantiddos/vulnerability/wordpress-wp-antiddos-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-37x9-927q-77wg/GHSA-37x9-927q-77wg.json b/advisories/unreviewed/2025/03/GHSA-37x9-927q-77wg/GHSA-37x9-927q-77wg.json
new file mode 100644
index 00000000000..a0e3d4f8013
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-37x9-927q-77wg/GHSA-37x9-927q-77wg.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-37x9-927q-77wg",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26555"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Debug-Bar-Extender allows Reflected XSS. This issue affects Debug-Bar-Extender: from n/a through 0.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26555"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/debug-bar-extender/vulnerability/wordpress-debug-bar-extender-plugin-0-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-7gwx-43jg-g4qj/GHSA-7gwx-43jg-g4qj.json b/advisories/unreviewed/2025/03/GHSA-7gwx-43jg-g4qj/GHSA-7gwx-43jg-g4qj.json
new file mode 100644
index 00000000000..25c234de406
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-7gwx-43jg-g4qj/GHSA-7gwx-43jg-g4qj.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7gwx-43jg-g4qj",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26886"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Authors allows SQL Injection. This issue affects PublishPress Authors: from n/a through 4.7.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26886"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/publishpress-authors/vulnerability/wordpress-publishpress-authors-plugin-4-7-3-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-87c8-vcwq-2gcc/GHSA-87c8-vcwq-2gcc.json b/advisories/unreviewed/2025/03/GHSA-87c8-vcwq-2gcc/GHSA-87c8-vcwq-2gcc.json
new file mode 100644
index 00000000000..599b24e6db7
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-87c8-vcwq-2gcc/GHSA-87c8-vcwq-2gcc.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-87c8-vcwq-2gcc",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26978"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound FS Poster. This issue affects FS Poster: from n/a through 6.5.8.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26978"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/fs-poster/vulnerability/wordpress-fs-poster-plugin-6-5-8-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-8rmj-hg3w-859w/GHSA-8rmj-hg3w-859w.json b/advisories/unreviewed/2025/03/GHSA-8rmj-hg3w-859w/GHSA-8rmj-hg3w-859w.json
new file mode 100644
index 00000000000..6c47be7b92e
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-8rmj-hg3w-859w/GHSA-8rmj-hg3w-859w.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8rmj-hg3w-859w",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-23744"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dvs11 Random Posts, Mp3 Player + ShareButton allows Reflected XSS. This issue affects Random Posts, Mp3 Player + ShareButton: from n/a through 1.4.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23744"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/random-posts-mp3-player-sharebutton/vulnerability/wordpress-random-posts-mp3-player-sharebutton-plugin-1-4-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:12Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-9pmv-v4jf-wjh6/GHSA-9pmv-v4jf-wjh6.json b/advisories/unreviewed/2025/03/GHSA-9pmv-v4jf-wjh6/GHSA-9pmv-v4jf-wjh6.json
new file mode 100644
index 00000000000..5abab97d8c1
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-9pmv-v4jf-wjh6/GHSA-9pmv-v4jf-wjh6.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9pmv-v4jf-wjh6",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26553"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spring Devs Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin allows Reflected XSS. This issue affects Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin: from n/a through 2.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26553"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wc-pre-order/vulnerability/wordpress-pre-order-addon-for-woocommerce-plugin-1-0-7-reflected-cross-site-scripting?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-9rmh-v8rw-6322/GHSA-9rmh-v8rw-6322.json b/advisories/unreviewed/2025/03/GHSA-9rmh-v8rw-6322/GHSA-9rmh-v8rw-6322.json
new file mode 100644
index 00000000000..ef6cb8fb82c
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-9rmh-v8rw-6322/GHSA-9rmh-v8rw-6322.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9rmh-v8rw-6322",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26899"
+  ],
+  "details": "Cross-Site Request Forgery (CSRF) vulnerability in Recapture Cart Recovery and Email Marketing Recapture for WooCommerce allows Cross Site Request Forgery. This issue affects Recapture for WooCommerce: from n/a through 1.0.43.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26899"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/recapture-for-woocommerce/vulnerability/wordpress-recapture-for-woocommerce-plugin-1-0-43-csrf-to-settings-change-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-cc97-wq85-x524/GHSA-cc97-wq85-x524.json b/advisories/unreviewed/2025/03/GHSA-cc97-wq85-x524/GHSA-cc97-wq85-x524.json
new file mode 100644
index 00000000000..e7dc21e10e3
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-cc97-wq85-x524/GHSA-cc97-wq85-x524.json
@@ -0,0 +1,25 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cc97-wq85-x524",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-0524"
+  ],
+  "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0524"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T23:15:36Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-f69x-699j-343p/GHSA-f69x-699j-343p.json b/advisories/unreviewed/2025/03/GHSA-f69x-699j-343p/GHSA-f69x-699j-343p.json
new file mode 100644
index 00000000000..8631ec5978d
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-f69x-699j-343p/GHSA-f69x-699j-343p.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f69x-699j-343p",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26969"
+  ],
+  "details": "Missing Authorization vulnerability in Aldo Latino PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26969"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/private-content/vulnerability/wordpress-privatecontent-plugin-8-11-5-subscriber-site-wide-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-hj6h-mjcj-4q98/GHSA-hj6h-mjcj-4q98.json b/advisories/unreviewed/2025/03/GHSA-hj6h-mjcj-4q98/GHSA-hj6h-mjcj-4q98.json
new file mode 100644
index 00000000000..ae95a5677f4
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-hj6h-mjcj-4q98/GHSA-hj6h-mjcj-4q98.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hj6h-mjcj-4q98",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-27281"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cookforweb All In Menu allows Blind SQL Injection. This issue affects All In Menu: from n/a through 1.1.5.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27281"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/all-in-menu/vulnerability/wordpress-all-in-menu-plugin-1-1-5-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-j336-f4h7-mj7v/GHSA-j336-f4h7-mj7v.json b/advisories/unreviewed/2025/03/GHSA-j336-f4h7-mj7v/GHSA-j336-f4h7-mj7v.json
new file mode 100644
index 00000000000..532c6dc2c08
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-j336-f4h7-mj7v/GHSA-j336-f4h7-mj7v.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j336-f4h7-mj7v",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26875"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce allows SQL Injection. This issue affects Multiple Shipping And Billing Address For Woocommerce: from n/a through 1.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26875"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/different-shipping-and-billing-address-for-woocommerce/vulnerability/wordpress-multiple-shipping-and-billing-address-for-woocommerce-plugin-1-3-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-m2q9-2vpj-6vhp/GHSA-m2q9-2vpj-6vhp.json b/advisories/unreviewed/2025/03/GHSA-m2q9-2vpj-6vhp/GHSA-m2q9-2vpj-6vhp.json
new file mode 100644
index 00000000000..1c3aa422e0e
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-m2q9-2vpj-6vhp/GHSA-m2q9-2vpj-6vhp.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m2q9-2vpj-6vhp",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26554"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Discord Post allows Reflected XSS. This issue affects WP Discord Post: from n/a through 2.1.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26554"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/wp-discord-post/vulnerability/wordpress-wp-discord-post-plugin-2-1-0-reflectef-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-mp3f-frph-hqx2/GHSA-mp3f-frph-hqx2.json b/advisories/unreviewed/2025/03/GHSA-mp3f-frph-hqx2/GHSA-mp3f-frph-hqx2.json
new file mode 100644
index 00000000000..f0bad35427a
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-mp3f-frph-hqx2/GHSA-mp3f-frph-hqx2.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mp3f-frph-hqx2",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26548"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Random Image Selector allows Reflected XSS. This issue affects Random Image Selector: from n/a through 2.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26548"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/random-image-selector/vulnerability/wordpress-random-image-selector-plugin-1-5-6-reflected-cross-site-scripting-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:12Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-q48q-mrmp-gpx2/GHSA-q48q-mrmp-gpx2.json b/advisories/unreviewed/2025/03/GHSA-q48q-mrmp-gpx2/GHSA-q48q-mrmp-gpx2.json
new file mode 100644
index 00000000000..57f0084d28f
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-q48q-mrmp-gpx2/GHSA-q48q-mrmp-gpx2.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q48q-mrmp-gpx2",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26940"
+  ],
+  "details": "Path Traversal vulnerability in NotFound Pie Register Premium. This issue affects Pie Register Premium: from n/a through 3.8.3.2.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26940"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/pie-register-premium/vulnerability/wordpress-pie-register-premium-plugin-3-8-3-2-path-traversal-to-non-arbitrary-file-deletion-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-35"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-qf84-x8w9-99px/GHSA-qf84-x8w9-99px.json b/advisories/unreviewed/2025/03/GHSA-qf84-x8w9-99px/GHSA-qf84-x8w9-99px.json
new file mode 100644
index 00000000000..55250e7c77d
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-qf84-x8w9-99px/GHSA-qf84-x8w9-99px.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qf84-x8w9-99px",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26976"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aldo Latino PrivateContent. This issue affects PrivateContent: from n/a through 8.11.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26976"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/private-content/vulnerability/wordpress-privatecontent-plugin-8-11-4-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:15Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-v7xw-8rmc-qv9f/GHSA-v7xw-8rmc-qv9f.json b/advisories/unreviewed/2025/03/GHSA-v7xw-8rmc-qv9f/GHSA-v7xw-8rmc-qv9f.json
new file mode 100644
index 00000000000..202593fca88
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-v7xw-8rmc-qv9f/GHSA-v7xw-8rmc-qv9f.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v7xw-8rmc-qv9f",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-2334"
+  ],
+  "details": "A vulnerability classified as problematic has been found in 274056675 springboot-openai-chatgpt e84f6f5. This affects the function deleteChat of the file /api/mjkj-chat/chat/ai/delete/chat of the component Chat History Handler. The manipulation of the argument chatListId leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2334"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.299799"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.299799"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.505688"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cnblogs.com/aibot/p/18732182"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T23:15:36Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-w3p7-73q2-q3hc/GHSA-w3p7-73q2-q3hc.json b/advisories/unreviewed/2025/03/GHSA-w3p7-73q2-q3hc/GHSA-w3p7-73q2-q3hc.json
new file mode 100644
index 00000000000..82287e309f9
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-w3p7-73q2-q3hc/GHSA-w3p7-73q2-q3hc.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w3p7-73q2-q3hc",
+  "modified": "2025-03-16T00:35:23Z",
+  "published": "2025-03-16T00:35:23Z",
+  "aliases": [
+    "CVE-2025-26961"
+  ],
+  "details": "Missing Authorization vulnerability in NotFound Fresh Framework allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Fresh Framework: from n/a through 1.70.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26961"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/fresh-framework/vulnerability/wordpress-fresh-framework-plugin-1-70-0-unauthenticated-broken-access-control-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-x9hh-4chc-r5pm/GHSA-x9hh-4chc-r5pm.json b/advisories/unreviewed/2025/03/GHSA-x9hh-4chc-r5pm/GHSA-x9hh-4chc-r5pm.json
new file mode 100644
index 00000000000..7f9ef28c93c
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-x9hh-4chc-r5pm/GHSA-x9hh-4chc-r5pm.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x9hh-4chc-r5pm",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26895"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maennchen1.de m1.DownloadList allows DOM-Based XSS. This issue affects m1.DownloadList: from n/a through 0.19.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26895"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/m1downloadlist/vulnerability/wordpress-m1-downloadlist-plugin-0-19-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-xprw-r8hx-4rqm/GHSA-xprw-r8hx-4rqm.json b/advisories/unreviewed/2025/03/GHSA-xprw-r8hx-4rqm/GHSA-xprw-r8hx-4rqm.json
new file mode 100644
index 00000000000..f4f98df6312
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-xprw-r8hx-4rqm/GHSA-xprw-r8hx-4rqm.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xprw-r8hx-4rqm",
+  "modified": "2025-03-16T00:35:22Z",
+  "published": "2025-03-16T00:35:22Z",
+  "aliases": [
+    "CVE-2025-26921"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager allows Object Injection. This issue affects Booking and Rental Manager: from n/a through 2.2.6.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26921"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/booking-and-rental-manager-for-woocommerce/vulnerability/wordpress-booking-and-rental-manager-plugin-2-2-6-php-object-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-15T22:15:14Z"
+  }
+}
\ No newline at end of file