diff --git a/advisories/unreviewed/2025/01/GHSA-269m-c36j-r834/GHSA-269m-c36j-r834.json b/advisories/unreviewed/2025/01/GHSA-269m-c36j-r834/GHSA-269m-c36j-r834.json
new file mode 100644
index 00000000000..c4e40b29752
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-269m-c36j-r834/GHSA-269m-c36j-r834.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-269m-c36j-r834",
+  "modified": "2025-01-28T09:32:34Z",
+  "published": "2025-01-28T09:32:34Z",
+  "aliases": [
+    "CVE-2025-0736"
+  ],
+  "details": "A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0736"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2025-0736"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2342233"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-532"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-28T09:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-3m9j-8q5f-868v/GHSA-3m9j-8q5f-868v.json b/advisories/unreviewed/2025/01/GHSA-3m9j-8q5f-868v/GHSA-3m9j-8q5f-868v.json
new file mode 100644
index 00000000000..0f010c15473
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-3m9j-8q5f-868v/GHSA-3m9j-8q5f-868v.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3m9j-8q5f-868v",
+  "modified": "2025-01-28T09:32:33Z",
+  "published": "2025-01-28T09:32:33Z",
+  "aliases": [
+    "CVE-2024-13521"
+  ],
+  "details": "The MailUp Auto Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the mas_options function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13521"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3060078%40mailup-auto-subscribtion%2Ftags%2F1.1.0&new=3229728%40mailup-auto-subscribtion%2Ftags%2F1.2.0"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9ee9b2e9-e3fe-43b2-9caf-7246a4201fe9?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-28T08:15:29Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-hv4f-rf4x-3pg2/GHSA-hv4f-rf4x-3pg2.json b/advisories/unreviewed/2025/01/GHSA-hv4f-rf4x-3pg2/GHSA-hv4f-rf4x-3pg2.json
new file mode 100644
index 00000000000..802f14adab8
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-hv4f-rf4x-3pg2/GHSA-hv4f-rf4x-3pg2.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hv4f-rf4x-3pg2",
+  "modified": "2025-01-28T09:32:33Z",
+  "published": "2025-01-28T09:32:33Z",
+  "aliases": [
+    "CVE-2024-13448"
+  ],
+  "details": "The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trx_addons_uploads_save_data' function in all versions up to, and including, 2.32.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13448"
+    },
+    {
+      "type": "WEB",
+      "url": "https://themeforest.net/item/qwery-multipurpose-business-wordpress-theme/29678687"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7c1372bd-821d-439c-9b11-dfa5f08dd0dd?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-434"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-28T07:15:06Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-j6mm-pjh3-2fh5/GHSA-j6mm-pjh3-2fh5.json b/advisories/unreviewed/2025/01/GHSA-j6mm-pjh3-2fh5/GHSA-j6mm-pjh3-2fh5.json
new file mode 100644
index 00000000000..5a469f3761b
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-j6mm-pjh3-2fh5/GHSA-j6mm-pjh3-2fh5.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j6mm-pjh3-2fh5",
+  "modified": "2025-01-28T09:32:34Z",
+  "published": "2025-01-28T09:32:34Z",
+  "aliases": [
+    "CVE-2025-0290"
+  ],
+  "details": "An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0290"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/372134"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-835"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-28T09:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-p953-3j66-hg45/GHSA-p953-3j66-hg45.json b/advisories/unreviewed/2025/01/GHSA-p953-3j66-hg45/GHSA-p953-3j66-hg45.json
new file mode 100644
index 00000000000..365114cbc88
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-p953-3j66-hg45/GHSA-p953-3j66-hg45.json
@@ -0,0 +1,51 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p953-3j66-hg45",
+  "modified": "2025-01-28T09:32:34Z",
+  "published": "2025-01-28T09:32:34Z",
+  "aliases": [
+    "CVE-2024-23953"
+  ],
+  "details": "Use of Arrays.equals() in LlapSignerImpl in Apache Hive to compare message signatures allows attacker to forge a valid signature for an arbitrary message byte by byte. The attacker should be an authorized user of the product to perform this attack. Users are recommended to upgrade to version 4.0.0, which fixes this issue.\n\nThe problem occurs when an application doesn’t use a constant-time algorithm for validating a signature. The method Arrays.equals() returns false right away when it sees that one of the input’s bytes are different. It means that the comparison time depends on the contents of the arrays. This little thing may allow an attacker to forge a valid signature for an arbitrary message byte by byte. So it might allow malicious users to submit splits/work with selected signatures to LLAP without running as a privileged user, potentially leading to DDoS attack.\n\nMore details in the reference section.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23953"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/hive/commit/b418e3c9f479ba8e7d31e6470306111002ffa809"
+    },
+    {
+      "type": "WEB",
+      "url": "https://blog.gypsyengineer.com/en/security/preventing-timing-attacks-with-codeql.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cqr.company/web-vulnerabilities/timing-attacks"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/hive"
+    },
+    {
+      "type": "WEB",
+      "url": "https://issues.apache.org/jira/browse/HIVE-28030"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/0nloywj49nbtlc6l3c6363qvq7o1ztb7"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-208"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-28T09:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-qf78-r92f-64mc/GHSA-qf78-r92f-64mc.json b/advisories/unreviewed/2025/01/GHSA-qf78-r92f-64mc/GHSA-qf78-r92f-64mc.json
new file mode 100644
index 00000000000..03c4abdd457
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-qf78-r92f-64mc/GHSA-qf78-r92f-64mc.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qf78-r92f-64mc",
+  "modified": "2025-01-28T09:32:34Z",
+  "published": "2025-01-28T09:32:34Z",
+  "aliases": [
+    "CVE-2024-13527"
+  ],
+  "details": "The Philantro – Donations and Donor Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes like 'donate' in all versions up to, and including, 5.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13527"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3224699"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/be3c8800-cbef-4d85-a1f3-b5c70ba955b5?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-28T09:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-qqrp-rh67-96r2/GHSA-qqrp-rh67-96r2.json b/advisories/unreviewed/2025/01/GHSA-qqrp-rh67-96r2/GHSA-qqrp-rh67-96r2.json
new file mode 100644
index 00000000000..a55f417a3f3
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-qqrp-rh67-96r2/GHSA-qqrp-rh67-96r2.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qqrp-rh67-96r2",
+  "modified": "2025-01-28T09:32:33Z",
+  "published": "2025-01-28T09:32:33Z",
+  "aliases": [
+    "CVE-2024-13509"
+  ],
+  "details": "The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url parameter in all versions up to, and including, 1.10.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability is partially fixed in 1.10.13 and completely fixed in 1.10.14.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13509"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3225862/ws-form"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3226595/ws-form"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wsform.com/changelog/?utm_source=wp_plugins&utm_medium=readme"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/910d9b31-b63a-427e-830b-a4c6a7e77ade?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-28T07:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-x8qf-h4pp-w59j/GHSA-x8qf-h4pp-w59j.json b/advisories/unreviewed/2025/01/GHSA-x8qf-h4pp-w59j/GHSA-x8qf-h4pp-w59j.json
new file mode 100644
index 00000000000..840d6bee893
--- /dev/null
+++ b/advisories/unreviewed/2025/01/GHSA-x8qf-h4pp-w59j/GHSA-x8qf-h4pp-w59j.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x8qf-h4pp-w59j",
+  "modified": "2025-01-28T09:32:34Z",
+  "published": "2025-01-28T09:32:34Z",
+  "aliases": [
+    "CVE-2025-0321"
+  ],
+  "details": "The ElementsKit Pro plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 3.7.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0321"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpmet.com/plugin/elementskit"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpmet.com/plugin/elementskit/roadmaps"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/204cfe20-9df1-4f6c-a38c-a21b43dde385?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-01-28T08:15:29Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/01/GHSA-xh5q-pch5-g3xq/GHSA-xh5q-pch5-g3xq.json b/advisories/unreviewed/2025/01/GHSA-xh5q-pch5-g3xq/GHSA-xh5q-pch5-g3xq.json
index 3272c788a6b..b32a53becdb 100644
--- a/advisories/unreviewed/2025/01/GHSA-xh5q-pch5-g3xq/GHSA-xh5q-pch5-g3xq.json
+++ b/advisories/unreviewed/2025/01/GHSA-xh5q-pch5-g3xq/GHSA-xh5q-pch5-g3xq.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xh5q-pch5-g3xq",
-  "modified": "2025-01-23T06:31:49Z",
+  "modified": "2025-01-28T09:32:33Z",
   "published": "2025-01-14T18:32:00Z",
   "aliases": [
     "CVE-2024-12085"
@@ -31,6 +31,14 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:0637"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:0688"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:0714"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2024-12085"