Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-5122 State: PUBLISHED Published: 2024-05-20T07:00:04.927Z Last Updated: 2024-08-01T21:03:10.767Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Event Registration System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Event Registration System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registrar/. The manipulation of the argument search leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265202 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CIS
the public and may be used. VDB-265202 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265202 - https://vuldb.com/?ctiid.265202 - https://vuldb.com/?submit.338615 - https://github.com/BurakSevben/CVEs/blob/main/Event%20Registration%20System/Event%20Registration%20System%20-%20SQL%20Injection%20-%204.md
CVE ID: CVE-2024-5123 State: PUBLISHED Published: 2024-05-20T07:31:04.390Z Last Updated: 2024-08-01T21:03:10.664Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Event Registration System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/. The manipulation of the argument searchbar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265203. Additional Analyst Notes: - CISA A
ublic and may be used. The associated identifier of this vulnerability is VDB-265203. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265203 - https://vuldb.com/?ctiid.265203 - https://vuldb.com/?submit.338616 - https://github.com/BurakSevben/CVEs/blob/main/Event%20Registration%20System/Event%20Registration%20System%20-%20Cross-Site-Scripting%20-%201.md
CVE ID: CVE-2024-5124 State: PUBLISHED Published: 2024-06-06T18:54:13.192Z Last Updated: 2025-05-20T14:04:05.415Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-203 Description: A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic. The vulnerability is present in version 20240310 of the software, where passwords are compared using the '=' operator in Python. This method of comparison allows an attacker to guess passwords based on the timing of each character's comparison. The issue arises from the code segment tha
tacker to guess passwords based on the timing of each character's comparison. The issue arises from the code segment that checks a password for a particular username, which can lead to the exposure of sensitive information to an unauthorized actor. An attacker exploiting this vulnerability could potentially guess user passwords, compromising the security of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/e85ec077-930a-4597-975f-9341d2805641 - https://github.com/gaizhenbiao/chuanhuchatgpt/commit/e46ec4ecd896bc3c88eb9a2f44e8593f3c6761b4
CVE ID: CVE-2024-5125 State: PUBLISHED Published: 2024-11-14T17:36:04.963Z Last Updated: 2025-10-15T12:50:25.176Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-79 Description: parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting (XSS) and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulnerability allows attackers to embed malicious JavaScript code within SVG files, which is executed upon rendering, leading to potential credential theft and unauthorized data access. The Open Redirect vulnerability arises from insuff
, leading to potential credential theft and unauthorized data access. The Open Redirect vulnerability arises from insufficient URL validation within SVG files, enabling attackers to redirect users to malicious websites, thereby exposing them to phishing attacks, malware distribution, and reputation damage. These vulnerabilities are present in the application's functionality to send files to the AI module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e6ae8cfd-9f8b-41df-a0cc-1e7a47416995 - https://github.com/parisneo/lollms-webui/commit/9b0f6c4ad1b9a2cd3466dcefaa278df30feed67e
CVE ID: CVE-2024-5126 State: PUBLISHED Published: 2024-06-06T18:11:28.155Z Last Updated: 2025-10-15T12:49:40.803Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-862 Description: An improper access control vulnerability exists in the lunary-ai/lunary repository, specifically within the versions.patch functionality for updating prompts. Affected versions include 1.2.2 up to but not including 1.2.25. The vulnerability allows unauthorized users to update prompt details due to insufficient access control checks. This issue was addressed and fixed in version 1.2.25. Additional Analyst Notes: - CISA ADP Vulnric
ccess control checks. This issue was addressed and fixed in version 1.2.25. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/8e7e1267-ea6c-4789-b9dc-3410dfac6ec6 - https://github.com/lunary-ai/lunary/commit/b7bd3a830a0f47ba07d0fd57bf78c4dd8a216297
CVE ID: CVE-2024-5127 State: PUBLISHED Published: 2024-06-06T17:26:35.057Z Last Updated: 2024-11-03T18:27:23.145Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-862 Description: In lunary-ai/lunary versions 1.2.2 through 1.2.25, an improper access control vulnerability allows users on the Free plan to invite other members and assign them any role, including those intended for Paid and Enterprise plans only. This issue arises due to insufficient backend validation of roles and permissions, enabling unauthorized users to join a project and potentially exploit roles and permissions not intended for their
ons, enabling unauthorized users to join a project and potentially exploit roles and permissions not intended for their use. The vulnerability specifically affects the Team feature, where the backend fails to validate whether a user has paid for a plan before allowing them to send invite links with any role assigned. This could lead to unauthorized access and manipulation of project settings or data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/719a5db3-f943-4100-a660-011cadf1bb32 - https://github.com/lunary-ai/lunary/commit/b7bd3a830a0f47ba07d0fd57bf78c4dd8a216297
CVE ID: CVE-2024-5128 State: PUBLISHED Published: 2024-06-06T18:08:23.755Z Last Updated: 2024-11-03T18:27:23.511Z Severity: CRITICAL (CVSS 9.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-639 Description: An Insecure Direct Object Reference (IDOR) vulnerability was identified in lunary-ai/lunary, affecting versions up to and including 1.2.2. This vulnerability allows unauthorized users to view, update, or delete any dataset_prompt or dataset_prompt_variation within any dataset or project. The issue stems from improper access control checks in the dataset management endpoints, where direct references to object IDs are not adequ
improper access control checks in the dataset management endpoints, where direct references to object IDs are not adequately secured against unauthorized access. This vulnerability was fixed in version 1.2.25. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/11248071-11b2-42d9-991a-504bf2044332 - https://github.com/lunary-ai/lunary/commit/0755dde1afc2a74ec23b55eee03e4416916cf48f
CVE ID: CVE-2024-5129 State: PUBLISHED Published: 2024-06-06T18:28:21.030Z Last Updated: 2024-08-01T21:03:10.779Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-862 Description: A Privilege Escalation Vulnerability exists in lunary-ai/lunary version 1.2.2, where any user can delete any datasets due to missing authorization checks. The vulnerability is present in the dataset deletion functionality, where the application fails to verify if the user requesting the deletion has the appropriate permissions. This allows unauthorized users to send a DELETE request to the server and delete any dataset by specify
ate permissions. This allows unauthorized users to send a DELETE request to the server and delete any dataset by specifying its ID. The issue is located in the datasets.delete function within the datasets index file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/a6c0deb3-6a4c-4188-8aaa-9e6207f82f44 - https://github.com/lunary-ai/lunary/commit/14078c1d2b8766075bf655f187ece24c7a787776
CVE ID: CVE-2024-5130 State: PUBLISHED Published: 2024-06-06T18:43:30.816Z Last Updated: 2025-10-15T12:50:25.737Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-862 Description: An Incorrect Authorization vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, which allows unauthenticated users to delete any dataset. The vulnerability is due to the lack of proper authorization checks in the dataset deletion endpoint. Specifically, the endpoint does not verify if the provided project ID belongs to the current user, thereby allowing any dataset to be deleted without proper authenticati
provided project ID belongs to the current user, thereby allowing any dataset to be deleted without proper authentication. This issue was fixed in version 1.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/e81a9871-308d-4628-9726-af66643a16fe - https://github.com/lunary-ai/lunary/commit/14078c1d2b8766075bf655f187ece24c7a787776
CVE ID: CVE-2024-5131 State: PUBLISHED Published: 2024-06-06T18:31:16.725Z Last Updated: 2024-11-03T18:27:24.663Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-639 Description: An Improper Access Control vulnerability exists in the lunary-ai/lunary repository, affecting versions up to and including 1.2.2. The vulnerability allows unauthorized users to view any prompts in any projects by supplying a specific prompt ID to an endpoint that does not adequately verify the ownership of the prompt ID. This issue was fixed in version 1.2.25. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Conta
rompt ID. This issue was fixed in version 1.2.25. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/52c129f2-114e-492f-aee8-32c78f75ac4f - https://github.com/lunary-ai/lunary/commit/ddfd497afd017a6946c582a1a806687fdac888bf
CVE ID: CVE-2024-5132 State: REJECTED Published: 2024-06-06T18:30:38.148Z Last Updated: 2024-06-07T16:55:08.368Z Description: No description available.
CVE ID: CVE-2024-5133 State: PUBLISHED Published: 2024-06-06T18:21:53.548Z Last Updated: 2025-10-15T12:49:41.581Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-200 Description: In lunary-ai/lunary version 1.2.4, an account takeover vulnerability exists due to the exposure of password recovery tokens in API responses. Specifically, when a user initiates the password reset process, the recovery token is included in the response of the `GET /v1/users/me/org` endpoint, which lists all users in a team. This allows any authenticated user to capture the recovery token of another user and subsequently chang
users in a team. This allows any authenticated user to capture the recovery token of another user and subsequently change that user's password without consent, effectively taking over the account. The issue lies in the inclusion of the `recovery_token` attribute in the users object returned by the API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/6057598d-93c4-4a94-bb80-5bd508013c5b
CVE ID: CVE-2024-5134 State: PUBLISHED Published: 2024-05-20T08:00:05.885Z Last Updated: 2024-08-01T21:03:10.967Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Electricity Consumption Monitoring Tool Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bill.php. The manipulation of the argument bill leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-265210 is the identifier assigned to this vulnerability.
exploit has been disclosed to the public and may be used. VDB-265210 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265210 - https://vuldb.com/?ctiid.265210 - https://vuldb.com/?submit.338980 - https://github.com/BurakSevben/CVEs/blob/main/Electricity%20Consumption%20Monitoring%20Tool/Electricity%20Consumption%20Monitoring%20Tool%20-%20SQL%20Injection.md
CVE ID: CVE-2024-5135 State: PUBLISHED Published: 2024-05-20T08:31:03.784Z Last Updated: 2024-08-01T21:03:10.981Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Directory Management System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Directory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265211. Additional Analyst Notes: - CISA AD
blic and may be used. The associated identifier of this vulnerability is VDB-265211. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265211 - https://vuldb.com/?ctiid.265211 - https://vuldb.com/?submit.339121 - https://github.com/BurakSevben/CVEs/blob/main/Directory%20Management%20System/Directory%20Management%20System%20-%20SQL%20Injection%20-%201.md
CVE ID: CVE-2024-5136 State: PUBLISHED Published: 2024-05-20T09:00:04.307Z Last Updated: 2024-08-01T21:03:10.643Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Directory Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /admin/search-directory.php.. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265212. Additional Analyst Notes: - CISA ADP Vulnrichment: - CV
may be used. The identifier of this vulnerability is VDB-265212. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265212 - https://vuldb.com/?ctiid.265212 - https://vuldb.com/?submit.339122 - https://github.com/BurakSevben/CVEs/blob/main/Directory%20Management%20System/Directory%20Management%20System%20-%20Cross-Site-Scripting%20-%201.md
CVE ID: CVE-2024-5137 State: PUBLISHED Published: 2024-05-20T09:31:04.377Z Last Updated: 2024-08-01T21:03:10.745Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Directory Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php of the component Searchbar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265213 was assigned to this vulnerability. Additiona
as been disclosed to the public and may be used. The identifier VDB-265213 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265213 - https://vuldb.com/?ctiid.265213 - https://vuldb.com/?submit.339123 - https://github.com/BurakSevben/CVEs/blob/main/Directory%20Management%20System/Directory%20Management%20System%20-%20Cross-Site-Scripting%20-%202.md
CVE ID: CVE-2024-5138 State: PUBLISHED Published: 2024-05-31T21:02:19.979Z Last Updated: 2024-09-06T19:48:49.508Z Vendors: Canonical Ltd. Products: snapd Description: The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap. It was found that snapctl did not properly parse command-line arguments, allowing an unprivileged user to trigger an authorised action on behalf of the snap that would normally require administrator privileges to perform. This could possibly allow an unprivileged user to perform a denial of service or similar. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
user to perform a denial of service or similar. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/snapcore/snapd/commit/68ee9c6aa916ab87dbfd9a26030690f2cabf1e14 - https://bugs.launchpad.net/snapd/+bug/2065077 - https://www.cve.org/CVERecord?id=CVE-2024-5138 - https://github.com/snapcore/snapd/security/advisories/GHSA-p9v8-q5m4-pf46
CVE ID: CVE-2024-5141 State: PUBLISHED Published: 2024-06-06T03:53:08.632Z Last Updated: 2024-08-01T21:03:11.048Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mpntod Products: Rotating Tweets (Twitter widget and shortcode) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Rotating Tweets (Twitter widget and shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's' 'rotatingtweets' in all versions up to, and including, 1.9.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenti
to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/02cff893-4f41-4bb0-9fb0-344a3a8afa0b?source=cve - https://plugins.trac.wordpress.org/browser/rotatingtweets/tags/1.9.10/rotatingtweets.php#L2267
CVE ID: CVE-2024-5142 State: PUBLISHED Published: 2024-05-24T05:58:41.316Z Last Updated: 2024-08-27T10:50:11.915Z Vendors: M-Files Corporation Products: Hubshare Problem Types: CWE-79 Description: Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://product.m-files.com/security-advisories/cve-2024-5142/
CVE ID: CVE-2024-5143 State: PUBLISHED Published: 2024-05-23T16:58:15.462Z Last Updated: 2024-10-31T14:48:58.413Z Vendors: HP Inc. Products: Certain HP LaserJet Pro Printers Description: A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_10643804-10643841-16/HPSBPI03941
CVE ID: CVE-2024-5144 State: REJECTED Published: N/A Last Updated: 2024-05-31T17:32:24.789Z Description: No description available.
CVE ID: CVE-2024-5145 State: PUBLISHED Published: 2024-05-20T22:31:04.320Z Last Updated: 2024-08-01T21:03:11.046Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Vehicle Management System Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Vehicle Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file /newdriver.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265289 was assigned to this v
remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265289 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265289 - https://vuldb.com/?ctiid.265289 - https://vuldb.com/?submit.339721 - https://github.com/CveSecLook/cve/issues/38
CVE ID: CVE-2024-5146 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:50.613Z Description: No description available.
CVE ID: CVE-2024-5147 State: PUBLISHED Published: 2024-05-22T07:37:25.726Z Last Updated: 2024-08-01T21:03:10.671Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wpzoom Products: WPZOOM Addons for Elementor (Templates, Widgets) Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.37 via the 'grid_style' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of
possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f006bb33-d017-445b-9c02-bd848c199671?source=cve - https://plugins.trac.wordpress.org/browser/wpzoom-elementor-addons/trunk/includes/wpzoom-elementor-ajax-posts-grid.php#L112 - https://plugins.trac.wordpress.org/browser/wpzoom-elem
addons/trunk/includes/wpzoom-elementor-ajax-posts-grid.php#L112 - https://plugins.trac.wordpress.org/browser/wpzoom-elementor-addons/trunk/includes/wpzoom-elementor-ajax-posts-grid.php#L105 - https://plugins.trac.wordpress.org/changeset/3090236#file6