Approved changes feed: RSS · Atom

cpe:2.3:a:wordlift:wordlift:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWordlift (ad64fb38-a7dc-5a7b-b146-a88dff64a04c)
ProductWordlift (04199151-0553-5db9-9ad7-6d58ca4eeb38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/insideout10/wordlift-plugin purl2cpe 2026-06-01 10:15:34.872954

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-53582 vulnerable 2026-06-08 07:31:14.733883 WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through <= 3.54.5.
Published: 2025-08-14T18:21:52.363Z
Updated: 2026-04-28T16:13:26.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30624 vulnerable 2026-06-08 07:17:00.741758 WordPress WordLift plugin <= 3.54.4 - Broken Access Control Vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in WordLift WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through <= 3.54.4.
Published: 2025-06-06T12:54:24.591Z
Updated: 2026-04-28T16:11:55.940Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.