Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-36486 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-11-26T14:52:46.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ILIAS-eLearning/ILIAS/pull/5987 - https://github.com/ILIAS-eLearning/ILIAS/pull/5988 - https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=xd:kx:54&cmdClass=ilBlogPos
Learning/ILIAS/pull/5988 - https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=xd:kx:54&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=3439&prvm=fsc&bmn=2023-12&blpg=786
CVE ID: CVE-2023-36487 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T19:44:19.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141694&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI - https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141703&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilL
lias.php?ref_id=1719&obj_id=141703&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI
CVE ID: CVE-2023-36488 State: PUBLISHED Published: 2023-06-29T00:00:00.000Z Last Updated: 2025-02-13T16:56:20.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to stored Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141704&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI - https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141710&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI
CVE ID: CVE-2023-36489 State: PUBLISHED Published: 2023-09-06T09:35:41.575Z Last Updated: 2024-09-26T20:03:19.698Z Vendors: TP-LINK Products: TL-WR802N, TL-WR841N, TL-WR902AC Problem Types: OS command injection Description: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmware - https://www.tp-link.com/jp/support/download/tl-wr841n/v14/#Firmware - https://www.tp-link.com/jp/support/download/tl-wr902ac/#Firmware - https://jvn.jp/en/vu/JVNVU99392903/
CVE ID: CVE-2023-36490 State: PUBLISHED Published: 2024-02-14T13:38:08.274Z Last Updated: 2024-08-14T18:36:53.148Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) MAS software Problem Types: denial of service, CWE-665 Description: Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00967.html
CVE ID: CVE-2023-36492 State: PUBLISHED Published: 2023-09-05T09:09:44.818Z Last Updated: 2024-09-30T17:26:59.102Z Vendors: SHIRASAGI Project Products: SHIRASAGI Problem Types: Cross-site scripting (XSS) Description: Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ss-proj.org/support/954.html - https://jvn.jp/en/jp/JVN82758000/
CVE ID: CVE-2023-36493 State: PUBLISHED Published: 2024-02-14T13:38:14.296Z Last Updated: 2024-08-08T13:16:20.576Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) SDK for OpenCL(TM) Applications software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00992.html
CVE ID: CVE-2023-36494 State: PUBLISHED Published: 2023-08-02T15:54:26.677Z Last Updated: 2024-10-11T14:09:45.235Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: F5OS - Appliance Problem Types: CWE-532 Description: Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000134922
CVE ID: CVE-2023-36495 State: PUBLISHED Published: 2023-07-28T04:30:42.842Z Last Updated: 2025-02-13T16:56:21.066Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213846 - https://suppo
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213842 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/en-us/HT213848 - https://support.apple.com/kb/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213841 - https://support.apple.com/kb/HT213846 - https://support.apple.com/kb/HT213842 - https://support.apple.com/kb/HT213848
CVE ID: CVE-2023-36496 State: PUBLISHED Published: 2024-02-01T23:00:03.660Z Last Updated: 2025-06-17T21:29:22.156Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L) Vendors: Ping Identity Products: PingDirectory Problem Types: CWE-269 Description: Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their permissions in the Directory Server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pingidentity.com/s/article/SECADV039 - https://www.pingidentity.com/en/resources/downloads/pingdirectory-downloads.html - https://docs.pingidentity.com/r/en-us/pingdir
www.pingidentity.com/en/resources/downloads/pingdirectory-downloads.html - https://docs.pingidentity.com/r/en-us/pingdirectory-93/ynf1693338390284
CVE ID: CVE-2023-36497 State: PUBLISHED Published: 2023-09-11T19:36:26.795Z Last Updated: 2025-01-16T21:29:58.801Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dover Fueling Solutions Products: MAGLINK LX Web Console Configuration Problem Types: CWE-305 Description: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01
CVE ID: CVE-2023-36498 State: PUBLISHED Published: 2024-02-06T16:20:15.386Z Last Updated: 2025-11-04T18:15:13.723Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Tp-Link Products: ER7206 Omada Gigabit VPN Router Problem Types: CWE-78 Description: A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability and gain access to an unrestricted shell. Additional Analyst Notes: - CISA ADP Vulnrichment: - C
gger this vulnerability and gain access to an unrestricted shell. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1853
CVE ID: CVE-2023-36499 State: PUBLISHED Published: 2023-08-07T00:00:00 Last Updated: 2024-10-15T19:40:57.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/FirmRec/IoT-Vulns/blob/main/netgear/nvram_ssid/README.md
CVE ID: CVE-2023-36501 State: PUBLISHED Published: 2023-07-25T13:23:14.109Z Last Updated: 2024-09-26T15:11:13.045Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Michael Winkler Products: teachPress Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 9.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/teachpress/wordpress-teachpress-plugin-9-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-36502 State: PUBLISHED Published: 2023-07-25T13:26:50.676Z Last Updated: 2024-09-26T15:09:06.104Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: cththemes Products: Balkon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <= 1.3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/balkon/wordpress-balkon-theme-1-3-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-36503 State: PUBLISHED Published: 2023-07-25T13:50:07.651Z Last Updated: 2024-08-02T16:45:56.647Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Max Foundry Products: WordPress Button Plugin MaxButtons Problem Types: CWE-79 Description: Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin <= 9.5.3 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/maxbuttons/wordpress-wordpress-button-plugin-maxbuttons-plugin-9-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-36504 State: PUBLISHED Published: 2024-06-13T23:48:53.333Z Last Updated: 2024-08-02T16:45:57.088Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: BBS e-Theme Products: BBS e-Popup Problem Types: CWE-862 Description: Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bbs-e-popup/wordpress-bbs-e-popup-plugin-2-4-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-36505 State: PUBLISHED Published: 2024-04-17T09:09:33.241Z Last Updated: 2024-08-02T16:45:56.646Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: Saturday Drive Products: Ninja Forms Contact Form Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Saturday Drive Ninja Forms Contact Form.This issue affects Ninja Forms Contact Form : from n/a through 3.6.24. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ninja-forms/wordpress-ninja-forms-contact-form-the-drag-and-drop-form-builder-for-wordpress-plugin-3-6-24-arbitrary-file-deletio
rms/wordpress-ninja-forms-contact-form-the-drag-and-drop-form-builder-for-wordpress-plugin-3-6-24-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2023-36506 State: PUBLISHED Published: 2024-12-13T14:23:41.538Z Last Updated: 2024-12-13T20:51:09.979Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: YITH Products: YITH WooCommerce Waiting List Problem Types: CWE-862 Description: Missing Authorization vulnerability in YITH YITH WooCommerce Waiting List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Waiting List: from n/a through 2.13.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yith-woocommerce-waiting-list/vulnerability/wordpress-yith-woocommerce-waitlist-plugin-
ck.com/database/wordpress/plugin/yith-woocommerce-waiting-list/vulnerability/wordpress-yith-woocommerce-waitlist-plugin-2-6-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-36507 State: PUBLISHED Published: 2023-11-30T15:26:47.663Z Last Updated: 2024-08-02T16:45:57.113Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Repute Infosystems Products: BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.64. Additional Analyst Notes: - CVE Program Container: Referen
Plugin and Online Scheduling Plugin: from n/a through 1.0.64. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bookingpress-appointment-booking/wordpress-bookingpress-plugin-1-0-64-unauthenticated-server-information-disclosure-vulnerability?_s_id=cve
CVE ID: CVE-2023-36508 State: PUBLISHED Published: 2023-10-31T14:23:21.313Z Last Updated: 2025-02-19T21:24:38.348Z Vendors: BestWebSoft Products: Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a through 1.7.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
from n/a through 1.7.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/contact-form-to-db/wordpress-contact-form-to-db-by-bestwebsoft-plugin-1-7-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-36509 State: PUBLISHED Published: 2024-12-13T14:23:42.064Z Last Updated: 2024-12-13T20:50:35.898Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Suresh Chand Products: CHP Ads Block Detector Problem Types: CWE-862 Description: Missing Authorization vulnerability in Suresh Chand CHP Ads Block Detector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CHP Ads Block Detector: from n/a through 3.9.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/chp-ads-block-detector/vulnerability/wordpress-chp-ads-block-detector-plugin-3-9-5-broken-acc
/database/wordpress/plugin/chp-ads-block-detector/vulnerability/wordpress-chp-ads-block-detector-plugin-3-9-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-36510 State: PUBLISHED Published: 2024-12-13T14:23:42.586Z Last Updated: 2024-12-13T20:49:52.788Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Reservation Diary Products: ReDi Restaurant Reservation Problem Types: CWE-862 Description: Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a through 23.0211. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/redi-restaurant-reservation/vulnerability/wordpress-redi-restaurant-
- https://patchstack.com/database/wordpress/plugin/redi-restaurant-reservation/vulnerability/wordpress-redi-restaurant-reservation-plugin-23-0211-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-36511 State: PUBLISHED Published: 2023-07-17T14:19:39.463Z Last Updated: 2024-09-30T14:39:04.419Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WooCommerce Products: WooCommerce Order Barcodes Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Order Barcodes plugin <= 1.6.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-order-barcodes/wordpress-woocommerce-order-barcodes-plugin-1-6-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-36512 State: PUBLISHED Published: 2024-06-19T12:34:22.628Z Last Updated: 2024-08-02T16:45:57.231Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Woo Products: AutomateWoo Problem Types: CWE-862 Description: Missing Authorization vulnerability in Woo AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/automatewoo/wordpress-automatewoo-plugin-5-7-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-36513 State: PUBLISHED Published: 2023-07-17T14:26:47.999Z Last Updated: 2024-09-30T14:38:45.986Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WooCommerce Products: AutomateWoo Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/automatewoo/wordpress-automatewoo-plugin-5-7-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-36514 State: PUBLISHED Published: 2023-07-17T14:30:41.215Z Last Updated: 2024-09-30T14:38:23.871Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: WooCommerce Products: Shipping Multiple Addresses Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-36515 State: PUBLISHED Published: 2024-06-19T14:20:08.589Z Last Updated: 2024-08-02T16:45:57.153Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ThimPress Products: LearnPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-plugin-4-2-3-unauthenticated-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-36516 State: PUBLISHED Published: 2024-06-19T14:18:33.714Z Last Updated: 2024-08-02T16:45:56.668Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: ThimPress Products: LearnPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-plugin-4-2-3-authenticated-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-36517 State: PUBLISHED Published: 2023-07-11T08:02:47.433Z Last Updated: 2024-10-11T15:06:42.475Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Kevon Adonis Products: WP Abstracts Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-abstracts-manuscripts-manager/wordpress-wp-abstracts-plugin-2-6-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-36518 State: PUBLISHED Published: 2024-12-13T14:23:43.174Z Last Updated: 2024-12-13T20:48:55.653Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Hugh Lashbrooke Products: Post Hit Counter Problem Types: CWE-862 Description: Missing Authorization vulnerability in Hugh Lashbrooke Post Hit Counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Hit Counter: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-hit-counter/vulnerability/wordpress-post-hit-counter-plugin-1-3-2-broken-access-control?_s_id=cve
CVE ID: CVE-2023-36519 State: PUBLISHED Published: 2024-12-13T14:23:43.739Z Last Updated: 2024-12-13T20:48:20.236Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: wpthemego Products: SW Product Bundles Problem Types: CWE-862 Description: Missing Authorization vulnerability in wpthemego SW Product Bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SW Product Bundles: from n/a through 2.0.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sw-product-bundles/vulnerability/wordpress-sw-product-bundles-plugin-2-0-15-broken-access-control?_s_id=cve