diff --git a/advisories/unreviewed/2025/02/GHSA-56h9-pghv-8mp7/GHSA-56h9-pghv-8mp7.json b/advisories/unreviewed/2025/02/GHSA-56h9-pghv-8mp7/GHSA-56h9-pghv-8mp7.json
new file mode 100644
index 00000000000..f1d926f7996
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-56h9-pghv-8mp7/GHSA-56h9-pghv-8mp7.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-56h9-pghv-8mp7",
+  "modified": "2025-02-20T09:31:36Z",
+  "published": "2025-02-20T09:31:36Z",
+  "aliases": [
+    "CVE-2024-13888"
+  ],
+  "details": "The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13888"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3243366"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/wpappninja/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a139f0fc-f3e0-4759-aa8d-ba138e5ccc87?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-601"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-20T09:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-jj4m-28mq-gpjr/GHSA-jj4m-28mq-gpjr.json b/advisories/unreviewed/2025/02/GHSA-jj4m-28mq-gpjr/GHSA-jj4m-28mq-gpjr.json
new file mode 100644
index 00000000000..9a960d9f844
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-jj4m-28mq-gpjr/GHSA-jj4m-28mq-gpjr.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jj4m-28mq-gpjr",
+  "modified": "2025-02-20T09:31:36Z",
+  "published": "2025-02-20T09:31:36Z",
+  "aliases": [
+    "CVE-2025-1064"
+  ],
+  "details": "The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's xoo_el_action shortcode in all versions up to, and including, 2.8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1064"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3239293/easy-login-woocommerce"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/dd62a072-8619-4f51-a52f-2ada7e455cb1?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-20T09:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-qf3h-q4g6-359h/GHSA-qf3h-q4g6-359h.json b/advisories/unreviewed/2025/02/GHSA-qf3h-q4g6-359h/GHSA-qf3h-q4g6-359h.json
new file mode 100644
index 00000000000..9df70642f9e
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-qf3h-q4g6-359h/GHSA-qf3h-q4g6-359h.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qf3h-q4g6-359h",
+  "modified": "2025-02-20T09:31:35Z",
+  "published": "2025-02-20T09:31:35Z",
+  "aliases": [
+    "CVE-2024-13155"
+  ],
+  "details": "The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: Since the widget code isn't part of the code base, to apply the patch, the affected widget: Transparent Split Hero must be deleted and reinstalled manually.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13155"
+    },
+    {
+      "type": "WEB",
+      "url": "https://unlimited-elements.com/change-log"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/unlimited-elements-for-elementor/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/63ba4880-9fbb-42e3-a8db-8115eb832b13?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-20T08:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-w56m-wcpr-36rf/GHSA-w56m-wcpr-36rf.json b/advisories/unreviewed/2025/02/GHSA-w56m-wcpr-36rf/GHSA-w56m-wcpr-36rf.json
new file mode 100644
index 00000000000..7b5069e4e12
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-w56m-wcpr-36rf/GHSA-w56m-wcpr-36rf.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w56m-wcpr-36rf",
+  "modified": "2025-02-20T09:31:36Z",
+  "published": "2025-02-20T09:31:36Z",
+  "aliases": [
+    "CVE-2025-0897"
+  ],
+  "details": "The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode in all versions up to, and including, 6.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0897"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/modal-window/trunk/public/class-shortcodes.php#L70"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3243077"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/modal-window/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/de4dfcc7-fcc0-46e5-8452-98783007368d?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-20T09:15:09Z"
+  }
+}
\ No newline at end of file