Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-45797 State: PUBLISHED Published: 2022-12-01T14:12:42.349Z Last Updated: 2025-04-24T20:02:48.215Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Problem Types: n/a Description: An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges and delete files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.tren
rability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/solution/000291830
CVE ID: CVE-2022-45798 State: PUBLISHED Published: 2022-12-22T21:24:44.297Z Last Updated: 2025-04-15T13:36:36.173Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Problem Types: n/a Description: A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges by creating a symbolic link and abusing the service to delete a file. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
ploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/solution/000291830 - https://www.zerodayinitiative.com/advisories/ZDI-22-1665/
CVE ID: CVE-2022-45801 State: PUBLISHED Published: 2023-05-01T14:50:11.110Z Last Updated: 2024-10-15T16:05:19.229Z Vendors: Apache Software Foundation Products: Apache StreamPark (incubating) Problem Types: CWE-74 Description: Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements through techniques similar to SQL Injection. LDAP injection attacks could result in the granting of permissions to unauthorized queries, and content modification inside the LDAP tree. T
ks could result in the granting of permissions to unauthorized queries, and content modification inside the LDAP tree. This risk may only occur when the user logs in with ldap, and the user name and password login will not be affected, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/xbkwwpkp3n2rs2wcxg8l26mhsftxwwr9
CVE ID: CVE-2022-45802 State: PUBLISHED Published: 2023-05-01T14:04:57.625Z Last Updated: 2024-10-21T15:10:45.155Z Vendors: Apache Software Foundation Products: Apache StreamPark (incubating) Problem Types: CWE-434 Description: Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/thwl1v2h6r3c21x1qwff08o57qzjnst6
CVE ID: CVE-2022-45803 State: PUBLISHED Published: 2024-06-21T13:35:50.647Z Last Updated: 2024-08-03T14:17:04.092Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Nikolay Strikhar Products: WordPress Form Builder Plugin – Gutenberg Forms Problem Types: CWE-862 Description: Missing Authorization vulnerability in Nikolay Strikhar WordPress Form Builder Plugin – Gutenberg Forms.This issue affects WordPress Form Builder Plugin – Gutenberg Forms: from n/a through 2.2.8.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/forms-gutenberg/wordpress-gutenberg-forms-plugin-2-2-8-3-a
: References: - https://patchstack.com/database/vulnerability/forms-gutenberg/wordpress-gutenberg-forms-plugin-2-2-8-3-auth-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-45804 State: PUBLISHED Published: 2023-03-01T13:19:15.951Z Last Updated: 2025-01-13T15:54:52.617Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: RoboSoft Products: Photo Gallery, Images, Slider in Rbs Image Gallery Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/robo-gallery/wordpress-photo-gallery-images-slider-in-rb
nt: References: - https://patchstack.com/database/vulnerability/robo-gallery/wordpress-photo-gallery-images-slider-in-rbs-image-gallery-plugin-3-2-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-45805 State: PUBLISHED Published: 2023-11-03T12:18:12.106Z Last Updated: 2024-09-05T15:36:00.661Z Vendors: Paytm Products: Paytm Payment Gateway Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/paytm-payments/wordpress-paytm-payment-gateway-plugin-2-7-3-auth-sql-injection-sqli-vulnerability?_s_id=cve
CVE ID: CVE-2022-45806 State: PUBLISHED Published: 2024-12-13T14:22:01.576Z Last Updated: 2024-12-13T19:03:59.518Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Strategy11 Form Builder Team Products: Formidable Forms Problem Types: CWE-862 Description: Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/formidable/vulnerability/wordpress-formidable-forms-plugin-5-5-4-broken-access-
patchstack.com/database/wordpress/plugin/formidable/vulnerability/wordpress-formidable-forms-plugin-5-5-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-45807 State: PUBLISHED Published: 2023-02-02T16:12:09.133Z Last Updated: 2025-01-13T15:58:14.559Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WPVibes Products: WP Mail Log Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in WPVibes WP Mail Log plugin <= 1.0.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-mail-log/wordpress-wp-mail-log-plugin-1-0-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-45808 State: PUBLISHED Published: 2023-01-24T09:13:42.720Z Last Updated: 2025-01-08T22:08:52.338Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: ThimPress Products: LearnPress – WordPress LMS Plugin Problem Types: CWE-89 Description: SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-wordpress-lms-plugin-plugin-4-1-7-3-2-sql-injection?_s_id=cve - https://patchstack.com/articles/multiple-critical-vulnerabilities-fixed-in-learnpress-plugin
2-sql-injection?_s_id=cve - https://patchstack.com/articles/multiple-critical-vulnerabilities-fixed-in-learnpress-plugin-version/
CVE ID: CVE-2022-45809 State: PUBLISHED Published: 2023-12-18T23:28:56.476Z Last Updated: 2025-05-07T20:29:10.597Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Ricard Torres Products: Thumbs Rating Problem Types: CWE-367 Description: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/thumbs-rating/wordpress-thumbs-rating-plugin-4-1-0-race-condition-vulnerability?_s_id=cve
CVE ID: CVE-2022-45810 State: PUBLISHED Published: 2023-11-07T16:50:04.184Z Last Updated: 2025-02-19T21:19:35.808Z Vendors: Icegram Products: Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce.This issue affects Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce: from n/a through 5.5.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vu
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/email-subscribers/wordpress-icegram-express-email-subscribers-newsletters-and-marketing-automation-plugin-plugin-5-5-2-csv-injection?_s_id=cve
CVE ID: CVE-2022-45811 State: PUBLISHED Published: 2025-01-02T15:08:57.224Z Last Updated: 2025-01-03T18:56:19.808Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: WeyHan Ng Products: Post Teaser Problem Types: CWE-862 Description: Missing Authorization vulnerability in WeyHan Ng Post Teaser.This issue affects Post Teaser: from n/a through 4.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-teaser/vulnerability/wordpress-post-teaser-plugin-4-1-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-45812 State: PUBLISHED Published: 2023-05-08T12:09:13.696Z Last Updated: 2025-01-09T15:25:39.112Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Martin Lees Products: Exxp Problem Types: CWE-79 Description: Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Lees Exxp plugin <= 2.6.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/exxp-wp/wordpress-exxp-plugin-2-6-8-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-45814 State: PUBLISHED Published: 2023-03-17T13:32:03.059Z Last Updated: 2025-02-19T21:40:39.466Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Fabian von Allmen Products: WP Calendar Problem Types: CWE-79 Description: Stored Cross-Site Scripting (XSS) vulnerability in Fabian von Allmen WP Calendar plugin <= 1.5.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-calendar/wordpress-wp-calendar-plugin-1-5-3-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-45815 State: PUBLISHED Published: 2023-05-25T10:59:59.037Z Last Updated: 2025-01-08T21:58:29.018Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: StylemixThemes Products: GDPR Compliance & Cookie Consent Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in StylemixThemes GDPR Compliance & Cookie Consent plugin <= 1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gdpr-compliance-cookie-consent/wordpress-gdpr-compliance-cookie-consent-plugin-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-45816 State: PUBLISHED Published: 2022-12-06T21:32:27.423Z Last Updated: 2024-08-03T14:24:01.008Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Milan Petrovic Products: GD bbPress Attachments Problem Types: CWE-79 Description: Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/gd-bbpress-attachments/wordpress-gd-bbpress-attachments-plugin-4-3-1-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-45817 State: PUBLISHED Published: 2023-03-17T13:37:44.105Z Last Updated: 2025-01-13T15:50:46.831Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Erin Garscadden Products: GC Testimonials Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in Erin Garscadden GC Testimonials plugin <= 1.3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gc-testimonials/wordpress-gc-testimonials-plugin-1-3-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-45818 State: PUBLISHED Published: 2023-05-04T12:54:12.629Z Last Updated: 2025-01-09T15:28:43.942Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP OnlineSupport, Essential Plugin Products: Hero Banner Ultimate Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Hero Banner Ultimate plugin <= 1.3.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/hero-banner-ultimate/wordpress-hero-banner-ultimate-plugin-1-3-4-auth-stored-cross-site-scripting-xss-vulnerabil
ability/hero-banner-ultimate/wordpress-hero-banner-ultimate-plugin-1-3-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-45819 State: PUBLISHED Published: 2024-12-13T14:22:02.516Z Last Updated: 2024-12-23T18:04:08.458Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Popup Maker Products: Popup Maker Problem Types: CWE-862 Description: Missing Authorization vulnerability in Popup Maker Popup Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Maker: from n/a through 1.17.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/popup-maker/vulnerability/wordpress-popup-maker-plugin-1-17-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-45820 State: PUBLISHED Published: 2023-01-24T09:18:46.239Z Last Updated: 2025-01-13T15:58:54.755Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: ThimPress Products: LearnPress – WordPress LMS Plugin Problem Types: CWE-89 Description: SQL Injection (SQLi) vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-plugin-4-1-7-3-2-auth-sql-injection-sqli-vulnerability?_s_id=cve - https://patchstack.com/articles/multiple-critical-vulnerabilities-fixed-in-learnpr
ection-sqli-vulnerability?_s_id=cve - https://patchstack.com/articles/multiple-critical-vulnerabilities-fixed-in-learnpress-plugin-version/
CVE ID: CVE-2022-45821 State: PUBLISHED Published: 2023-08-08T11:57:44.302Z Last Updated: 2024-09-25T16:51:38.114Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NooTheme Products: Noo Timetable Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in NooTheme Noo Timetable plugin <= 2.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/noo-timetable/wordpress-noo-timetable-responsive-calendar-auto-sync-wordpress-plugin-plugin-2-1-3-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-45822 State: PUBLISHED Published: 2022-12-05T10:57:53.985Z Last Updated: 2025-02-20T19:48:36.046Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Advanced Booking Calendar Products: Advanced Booking Calendar Problem Types: CWE-89 Description: Unauth. SQL Injection (SQLi) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-booking-calendar/wordpress-advanced-booking-calendar-plugin-1-7-1-unauth-sql-injection-sqli-vulnerability?_s_id=cve
CVE ID: CVE-2022-45823 State: PUBLISHED Published: 2023-07-11T07:50:53.391Z Last Updated: 2024-10-11T16:08:40.771Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: GalleryPlugins Products: Video Contest WordPress Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in GalleryPlugins Video Contest WordPress plugin <= 3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/video-contest/wordpress-video-contest-wordpress-plugin-plugin-3-2-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-45824 State: PUBLISHED Published: 2022-12-05T11:07:32.421Z Last Updated: 2025-02-20T19:48:28.183Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Advanced Booking Calendar Products: Advanced Booking Calendar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-booking-calendar/wordpress-advanced-booking-calendar-plugin-1-7-1-multiple-cross-site-scripting-csrf-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-45825 State: PUBLISHED Published: 2023-03-28T07:04:24.945Z Last Updated: 2025-01-10T19:15:56.922Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: iThemes Products: WPComplete Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in iThemes WPComplete plugin <= 2.9.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpcomplete/wordpress-wpcomplete-plugin-2-9-2-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-45826 State: PUBLISHED Published: 2024-12-13T14:22:03.618Z Last Updated: 2024-12-13T20:38:20.473Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WP Sunshine Products: Sunshine Photo Cart Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 2.9.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sunshine-photo-cart/vulnerability/wordpress-sunshine-photo-cart-plugin-2-9-13-auth-broken-access-contro
wordpress/plugin/sunshine-photo-cart/vulnerability/wordpress-sunshine-photo-cart-plugin-2-9-13-auth-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2022-45827 State: PUBLISHED Published: 2023-06-12T12:44:08.625Z Last Updated: 2024-11-01T14:02:43.831Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: GalleryPlugins Products: Video Contest Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GalleryPlugins Video Contest plugin <= 3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/video-contest/wordpress-video-contest-wordpress-plugin-plugin-3-2-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-45828 State: PUBLISHED Published: 2023-07-18T11:53:56.314Z Last Updated: 2024-09-25T17:03:06.808Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: NooTheme Products: Noo Timetable Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in NooTheme Noo Timetable plugin <= 2.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/noo-timetable/wordpress-noo-timetable-responsive-calendar-auto-sync-wordpress-plugin-plugin-2-1-3-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-45829 State: PUBLISHED Published: 2022-12-06T21:53:04.536Z Last Updated: 2025-02-20T19:47:59.602Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: WPecommerce, Alexanderfoxc Products: Easy WP SMTP Problem Types: CWE-22 Description: Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-wp-smtp/wordpress-easy-wp-smtp-plugin-1-5-1-auth-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2022-45830 State: PUBLISHED Published: 2025-01-02T15:02:35.509Z Last Updated: 2025-01-03T18:57:05.309Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Analytify Products: Analytify Problem Types: CWE-862 Description: Missing Authorization vulnerability in Analytify.This issue affects Analytify: from n/a through 4.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-analytify/vulnerability/wordpress-analytify-google-analytics-dashboard-plugin-4-2-3-privilege-escalation?_s_id=cve
CVE ID: CVE-2022-45831 State: PUBLISHED Published: 2023-03-28T07:15:45.955Z Last Updated: 2025-01-10T19:15:47.341Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: biplob018 Products: Image Hover Effects for Elementor with Lightbox and Flipbox Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in biplob018 Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 2.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/image-hover-effects-with-carousel/wordpress-image-hover-effects-caption-hover-with-carousel-plugin
atabase/vulnerability/image-hover-effects-with-carousel/wordpress-image-hover-effects-caption-hover-with-carousel-plugin-2-8-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2022-45832 State: PUBLISHED Published: 2024-06-19T14:32:28.362Z Last Updated: 2024-08-08T16:31:45.912Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Hennessey Digital Products: Attorney Problem Types: CWE-862 Description: Missing Authorization vulnerability in Hennessey Digital Attorney.This issue affects Attorney: from n/a through 3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/attorney/wordpress-attorney-theme-3-unauth-arbitrary-content-deletion-vulnerability?_s_id=cve