Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-53760 State: PUBLISHED Published: 2024-11-30T21:49:37.828Z Last Updated: 2024-12-01T23:07:53.852Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Capitalize My Title Products: Capitalize My Title Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Capitalize My Title allows Stored XSS.This issue affects Capitalize My Title: from n/a through 0.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/capitalize-my-title/vulnerability/wordpress-capitalize-my-title-wordpress-plugin-0-5-3-cross-site-sc
se/wordpress/plugin/capitalize-my-title/vulnerability/wordpress-capitalize-my-title-wordpress-plugin-0-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53761 State: PUBLISHED Published: 2024-12-02T13:48:33.921Z Last Updated: 2024-12-02T15:40:22.966Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: P. Roy Products: WP Revisions Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in P. Roy WP Revisions Manager allows Cross Site Request Forgery.This issue affects WP Revisions Manager: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-revisions-manager/vulnerability/wordpress-wp-revisions-manager-plugin-1-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-53762 State: PUBLISHED Published: 2024-12-02T13:48:33.375Z Last Updated: 2024-12-02T19:02:29.581Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Faster Themes Products: FastBook – Responsive Appointment Booking and Scheduling System Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Faster Themes FastBook – Responsive Appointment Booking and Scheduling System allows Stored XSS.This issue affects FastBook – Responsive Appointment Booking and Scheduling System: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fastbook-respo
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fastbook-responsive-appointment-booking-and-scheduling-system/vulnerability/wordpress-fastbook-plugin-1-1-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53763 State: PUBLISHED Published: 2024-11-30T21:48:14.805Z Last Updated: 2024-12-01T23:07:53.726Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Rejuan Ahamed Products: Best Addons for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rejuan Ahamed Best Addons for Elementor allows Stored XSS.This issue affects Best Addons for Elementor: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/best-addons-for-elementor/vulnerability/wordpress-best-addons-for-elemento
ps://patchstack.com/database/wordpress/plugin/best-addons-for-elementor/vulnerability/wordpress-best-addons-for-elementor-plugin-1-0-5-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53764 State: PUBLISHED Published: 2024-11-30T21:36:12.556Z Last Updated: 2024-12-01T23:07:54.345Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: SoftHopper Products: Softtemplates For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftHopper Softtemplates For Elementor allows DOM-Based XSS.This issue affects Softtemplates For Elementor: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/softtemplates-for-elementor/vulnerability/wordpress-softtemplates-for-e
https://patchstack.com/database/wordpress/plugin/softtemplates-for-elementor/vulnerability/wordpress-softtemplates-for-elementor-plugin-1-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53765 State: PUBLISHED Published: 2024-12-02T13:48:32.810Z Last Updated: 2024-12-02T15:40:22.818Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Think201 Products: Mins To Read Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Think201 Mins To Read allows Stored XSS.This issue affects Mins To Read: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mins-to-read/vulnerability/wordpress-mins-to-read-plugin-1-2-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53766 State: PUBLISHED Published: 2024-11-30T21:35:20.664Z Last Updated: 2024-12-01T23:07:54.218Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Devnex Products: Devnex Addons For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Devnex Devnex Addons For Elementor allows DOM-Based XSS.This issue affects Devnex Addons For Elementor: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/devnex-addons-for-elementor/vulnerability/wordpress-devnex-addons-for-elementor
patchstack.com/database/wordpress/plugin/devnex-addons-for-elementor/vulnerability/wordpress-devnex-addons-for-elementor-plugin-1-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53767 State: PUBLISHED Published: 2024-11-30T21:29:13.186Z Last Updated: 2024-12-01T23:07:54.653Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Pixobe Products: Pixobe Cartography Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixobe Pixobe Cartography allows DOM-Based XSS.This issue affects Pixobe Cartography: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pixobe-cartography/vulnerability/wordpress-pixobe-cartography-plugin-1-0-1-cross-site-scripting-xss-vulner
dpress/plugin/pixobe-cartography/vulnerability/wordpress-pixobe-cartography-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53768 State: PUBLISHED Published: 2024-11-30T21:02:40.516Z Last Updated: 2024-12-02T15:50:21.354Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IDE Interactive Products: Content Audit Exporter Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in IDE Interactive Content Audit Exporter allows Retrieve Embedded Sensitive Data.This issue affects Content Audit Exporter: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/content-audit-exporter/vulnerability/wordpress-content-audit-exporte
- https://patchstack.com/database/wordpress/plugin/content-audit-exporter/vulnerability/wordpress-content-audit-exporter-plugin-1-1-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-53769 State: PUBLISHED Published: 2024-12-02T13:48:32.272Z Last Updated: 2024-12-02T15:40:22.685Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ludovic RIAUDEL Products: Custom Post Type to Map Store Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ludovic RIAUDEL Custom Post Type to Map Store allows Stored XSS.This issue affects Custom Post Type to Map Store: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cpt-to-map-store/vulnerability/wordpress-custom-post-type-to-map-store-plugin-1-1-0-csrf-to-stored-xss-vulnera
ss/plugin/cpt-to-map-store/vulnerability/wordpress-custom-post-type-to-map-store-plugin-1-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53770 State: PUBLISHED Published: 2024-12-02T13:48:31.669Z Last Updated: 2024-12-02T15:40:22.550Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Peter MacIntyre Products: RingCentral Communications Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Peter MacIntyre RingCentral Communications allows Stored XSS.This issue affects RingCentral Communications: from n/a through 1.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rccp-free/vulnerability/wordpress-ringcentral-communications-plugin-1-6-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53771 State: PUBLISHED Published: 2024-11-30T21:25:54.305Z Last Updated: 2024-12-01T23:07:54.470Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sergio Micó Products: SimpleSchema Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sergio Micó SimpleSchema allows DOM-Based XSS.This issue affects SimpleSchema: from n/a through 1.7.6.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simpleschema-free/vulnerability/wordpress-simpleschema-plugin-1-7-6-9-cross-site-scripting-xss-vulnerability?_s_
/plugin/simpleschema-free/vulnerability/wordpress-simpleschema-plugin-1-7-6-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53772 State: PUBLISHED Published: 2024-11-30T21:24:29.463Z Last Updated: 2024-12-01T23:07:55.971Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: PickPlugins Products: Mail Picker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Mail Picker allows DOM-Based XSS.This issue affects Mail Picker: from n/a through 1.0.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mail-picker/vulnerability/wordpress-mail-picker-plugin-1-0-14-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53773 State: PUBLISHED Published: 2024-11-30T21:23:06.515Z Last Updated: 2024-12-01T23:07:55.831Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Praca.pl sp. z o.o. Products: Znajdź Pracę z Praca.pl Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Praca.Pl sp. Z o.O. Znajdź Pracę z Praca.Pl allows DOM-Based XSS.This issue affects Znajdź Pracę z Praca.Pl: from n/a through 2.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/znajdz-prace-z-pracapl/vulnerability/wordpress-znajdz-prace-z-pra
es: - https://patchstack.com/database/wordpress/plugin/znajdz-prace-z-pracapl/vulnerability/wordpress-znajdz-prace-z-praca-pl-plugin-2-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53774 State: PUBLISHED Published: 2024-11-30T21:17:44.915Z Last Updated: 2024-12-01T23:07:55.457Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sparkle WP Products: Sparkle Elementor Kit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sparkle WP Sparkle Elementor Kit allows DOM-Based XSS.This issue affects Sparkle Elementor Kit: from n/a through 2.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sparkle-elementor-kit/vulnerability/wordpress-sparkle-elementor-kit-plugin-2-0-9-cross-si
.com/database/wordpress/plugin/sparkle-elementor-kit/vulnerability/wordpress-sparkle-elementor-kit-plugin-2-0-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53775 State: PUBLISHED Published: 2024-12-02T13:48:31.092Z Last Updated: 2024-12-02T15:40:22.423Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: TannerRitchie Web Applications/DancePress Products: DancePress (TRWA) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in TannerRitchie Web Applications/DancePress DancePress (TRWA) allows Cross Site Request Forgery.This issue affects DancePress (TRWA): from n/a through 3.1.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dancepress-trwa/vulnerability/wordpress-dancepress-trwa-plugin-3-1-11-cross
s://patchstack.com/database/wordpress/plugin/dancepress-trwa/vulnerability/wordpress-dancepress-trwa-plugin-3-1-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-53776 State: PUBLISHED Published: 2024-12-02T13:48:30.516Z Last Updated: 2024-12-02T15:29:04.146Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Raphael Heide Products: Donate Me Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Raphael Heide Donate Me allows Stored XSS.This issue affects Donate Me: from n/a through 1.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/donate-me/vulnerability/wordpress-donate-me-plugin-1-2-5-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53777 State: PUBLISHED Published: 2024-12-02T13:48:29.962Z Last Updated: 2024-12-02T15:40:22.283Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Alberto Reineri Products: Simple Header and Footer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Alberto Reineri Simple Header and Footer allows Stored XSS.This issue affects Simple Header and Footer: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-header-and-footer/vulnerability/wordpress-simple-header-and-footer-plugin-1-0-0-csrf-to-stored-cross-site-scripting-xs
e-header-and-footer/vulnerability/wordpress-simple-header-and-footer-plugin-1-0-0-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53778 State: PUBLISHED Published: 2024-11-30T21:15:19.687Z Last Updated: 2024-12-01T23:07:54.961Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Essential Marketer Products: Essential Breadcrumbs Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Essential Marketer Essential Breadcrumbs allows Stored XSS.This issue affects Essential Breadcrumbs: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/essential-breadcrumbs/vulnerability/wordpress-essential-breadcrumbs-plugin-1-1-1-csrf-to-stored-cross-site-scripting-xss-vulnera
l-breadcrumbs/vulnerability/wordpress-essential-breadcrumbs-plugin-1-1-1-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53779 State: PUBLISHED Published: 2024-12-02T13:48:29.325Z Last Updated: 2024-12-02T15:40:22.139Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Max Engel Products: Yahoo! WebPlayer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Max Engel Yahoo! WebPlayer allows Stored XSS.This issue affects Yahoo! WebPlayer: from n/a through 2.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yahoo-media-player/vulnerability/wordpress-yahoo-webplayer-plugin-2-0-6-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53780 State: PUBLISHED Published: 2024-12-02T13:48:28.782Z Last Updated: 2024-12-02T15:40:21.884Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rajeev Chauhan Products: Load More Posts Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rajeev Chauhan Load More Posts allows Stored XSS.This issue affects Load More Posts: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/load-more-posts/vulnerability/wordpress-load-more-posts-plugin-1-4-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53781 State: PUBLISHED Published: 2024-12-02T13:48:28.168Z Last Updated: 2024-12-02T15:40:21.744Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Home Junction Products: SpatialMatch IDX Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Home Junction SpatialMatch IDX allows Stored XSS.This issue affects SpatialMatch IDX: from n/a through 3.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/spatialmatch-free-lifestyle-search/vulnerability/wordpress-spatialmatch-idx-plugin-3-0-9-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53782 State: PUBLISHED Published: 2024-12-02T13:48:27.538Z Last Updated: 2024-12-02T15:40:21.599Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CMSaccount Products: Photo Video Store Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CMSaccount Photo Video Store allows Cross-Site Scripting (XSS).This issue affects Photo Video Store: from n/a through 21.07. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/photo-video-store/vulnerability/wordpress-photo-video-store-plugin-21-07-csrf-to-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53783 State: PUBLISHED Published: 2024-11-30T21:03:29.504Z Last Updated: 2024-12-01T23:07:56.388Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Anzia Products: Ni WooCommerce Cost Of Goods Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anzia Ni WooCommerce Cost Of Goods allows SQL Injection.This issue affects Ni WooCommerce Cost Of Goods: from n/a through 3.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ni-woocommerce-cost-of-goods/vulnerability/wordpress-ni-woocommerce-cost-of-good
atchstack.com/database/wordpress/plugin/ni-woocommerce-cost-of-goods/vulnerability/wordpress-ni-woocommerce-cost-of-goods-plugin-3-2-8-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-53784 State: PUBLISHED Published: 2024-12-02T13:48:26.934Z Last Updated: 2024-12-02T15:40:21.478Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: E-goi Products: Smart Marketing SMS and Newsletters Forms Problem Types: CWE-862 Description: Missing Authorization vulnerability in E-goi Smart Marketing SMS and Newsletters Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Marketing SMS and Newsletters Forms: from n/a through 5.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smart-marketing-for-wp/vulnerability/wordpress-sma
hment: References: - https://patchstack.com/database/wordpress/plugin/smart-marketing-for-wp/vulnerability/wordpress-smart-marketing-sms-and-newsletters-forms-plugin-5-0-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-53785 State: PUBLISHED Published: 2024-12-09T13:02:16.330Z Last Updated: 2024-12-09T18:36:55.626Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Alexander Volkov Products: Chatter Problem Types: CWE-862 Description: Missing Authorization vulnerability in Alexander Volkov Chatter.This issue affects Chatter: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/chatter/vulnerability/wordpress-chatter-plugin-1-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-53786 State: PUBLISHED Published: 2024-11-30T21:14:19.722Z Last Updated: 2024-12-01T23:07:54.800Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Codeless Products: Cowidgets – Elementor Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeless Cowidgets – Elementor Addons allows Stored XSS.This issue affects Cowidgets – Elementor Addons: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cowidgets-elementor-addons/vulnerability/wordpress-cowidgets-elementor-addo
s://patchstack.com/database/wordpress/plugin/cowidgets-elementor-addons/vulnerability/wordpress-cowidgets-elementor-addons-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53787 State: PUBLISHED Published: 2024-11-30T21:10:45.363Z Last Updated: 2024-12-01T23:07:56.260Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: vinoth06 Products: Random Banner Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vinoth06 Random Banner allows Stored XSS.This issue affects Random Banner: from n/a through 4.2.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/random-banner/vulnerability/wordpress-random-banner-plugin-4-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53788 State: PUBLISHED Published: 2024-11-30T21:05:23.534Z Last Updated: 2024-12-01T23:07:56.117Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Portfoliohub Products: WordPress Portfolio Builder – Portfolio Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Portfoliohub WordPress Portfolio Builder – Portfolio Gallery allows Stored XSS.This issue affects WordPress Portfolio Builder – Portfolio Gallery: from n/a through 1.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/uber-grid/
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/uber-grid/vulnerability/wordpress-wordpress-portfolio-builder-portfolio-gallery-plugin-1-1-7-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2024-53789 State: PUBLISHED Published: 2024-12-02T13:48:26.371Z Last Updated: 2024-12-02T15:40:21.355Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ritesh Sanap Products: Advanced What should we write next about Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ritesh Sanap Advanced What should we write next about allows Stored XSS.This issue affects Advanced What should we write next about: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-what-should-we-write-about-next/vulnerability/wordpress-advanced-what-shou
hstack.com/database/wordpress/plugin/advanced-what-should-we-write-about-next/vulnerability/wordpress-advanced-what-should-we-write-next-about-plugin-1-0-3-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve