Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-49221 State: PUBLISHED Published: 2024-10-17T17:55:52.104Z Last Updated: 2024-10-17T18:34:34.236Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Julian Weinert // cs&m Products: cSlider Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m cSlider allows Stored XSS.This issue affects cSlider: from n/a through 2.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cslider/wordpress-cslider-plugin-2-4-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49222 State: PUBLISHED Published: 2025-01-07T10:49:35.656Z Last Updated: 2025-01-07T14:24:35.715Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Amento Tech Pvt ltd Products: WPGuppy Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Amento Tech Pvt ltd WPGuppy allows Object Injection.This issue affects WPGuppy: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpguppy-lite/vulnerability/wordpress-wpguppy-plugin-1-1-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-49223 State: PUBLISHED Published: 2024-10-17T17:53:54.413Z Last Updated: 2024-10-17T18:34:40.825Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Shibu Lijack a.k.a CyberJack Products: CJ Change Howdy Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Shibu Lijack a.K.A CyberJack CJ Change Howdy allows Stored XSS.This issue affects CJ Change Howdy: from n/a through 3.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cj-change-howdy/wordpress-cj-change-howdy-plugin-3-3-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49224 State: PUBLISHED Published: 2024-10-18T09:58:11.322Z Last Updated: 2024-10-18T13:05:12.384Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mahesh Patel Products: Mitm Bug Tracker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mahesh Patel Mitm Bug Tracker allows Reflected XSS.This issue affects Mitm Bug Tracker: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mitm-bug-tracker/wordpress-mitm-bug-tracker-plugin-1-0-reflected-cross-site-scripting-xss-vulnerabil
abase/vulnerability/mitm-bug-tracker/wordpress-mitm-bug-tracker-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49225 State: PUBLISHED Published: 2024-10-18T09:57:02.449Z Last Updated: 2024-10-18T13:05:31.465Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Swebdeveloper Products: wpPricing Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Swebdeveloper wpPricing Builder allows Stored XSS.This issue affects wpPricing Builder: from n/a through 1.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wppricing-builder-lite-responsive-pricing-table-builder/wordpress-wppricing-builder-plugin-1-5
om/database/vulnerability/wppricing-builder-lite-responsive-pricing-table-builder/wordpress-wppricing-builder-plugin-1-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49226 State: PUBLISHED Published: 2024-10-16T13:19:10.591Z Last Updated: 2024-10-16T15:20:38.600Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: TAKETIN Products: TAKETIN To WP Membership Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in TAKETIN TAKETIN To WP Membership allows Object Injection.This issue affects TAKETIN To WP Membership: from n/a through 2.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/taketin-to-wp-membership/wordpress-taketin-to-wp-membership-plugin-2-8-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-49227 State: PUBLISHED Published: 2024-10-16T13:17:42.638Z Last Updated: 2024-10-16T15:16:57.255Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Innovaweb Sp. z o.o. Products: Free Stock Photos Foter Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Innovaweb Sp. Z o.O. Free Stock Photos Foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through 1.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/free-stock-photos-foter/wordpress-free-stock-photos-foter-plugin-1-5-4-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-49228 State: PUBLISHED Published: 2024-10-18T09:56:10.839Z Last Updated: 2024-10-18T12:46:35.375Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CrossedCode Products: bVerse Convert Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CrossedCode bVerse Convert allows Stored XSS.This issue affects bVerse Convert: from n/a through 1.3.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bverse-convert/wordpress-bverse-convert-plugin-1-3-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49229 State: PUBLISHED Published: 2024-10-17T17:51:01.756Z Last Updated: 2024-10-17T18:02:57.641Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Arif Nezami Products: Better Author Bio Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Arif Nezami Better Author Bio allows Cross-Site Scripting (XSS).This issue affects Better Author Bio: from n/a through 2.7.10.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/better-author-bio/wordpress-better-author-bio-plugin-2-7-10-11-csrf-to-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49230 State: PUBLISHED Published: 2024-10-18T09:54:00.598Z Last Updated: 2024-10-18T13:28:33.137Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Harpreet Singh Products: Ajax Custom CSS/JS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Harpreet Singh Ajax Custom CSS/JS allows Reflected XSS.This issue affects Ajax Custom CSS/JS: from n/a through 2.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ajax-awesome-css/wordpress-ajax-custom-css-js-plugin-2-0-4-reflected-cross-site-script
hstack.com/database/vulnerability/ajax-awesome-css/wordpress-ajax-custom-css-js-plugin-2-0-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49231 State: PUBLISHED Published: 2024-10-18T09:52:21.551Z Last Updated: 2024-10-18T13:29:09.047Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Peter CyClop Products: WordPress Video Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Peter CyClop WordPress Video allows Stored XSS.This issue affects WordPress Video: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wordpress-video/wordpress-wordpress-video-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49232 State: PUBLISHED Published: 2024-10-18T09:51:12.511Z Last Updated: 2024-12-04T23:14:19.644Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Javier Loureiro Products: El mejor Cluster Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Javier Loureiro El mejor Cluster allows DOM-Based XSS.This issue affects El mejor Cluster: from n/a through 1.1.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mejorcluster/wordpress-el-mejor-cluster-plugin-1-1-14-cross-site-scripting-xss-vulnerabil
ack.com/database/vulnerability/mejorcluster/wordpress-el-mejor-cluster-plugin-1-1-14-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49233 State: PUBLISHED Published: 2024-10-18T09:50:07.342Z Last Updated: 2024-10-18T13:30:29.514Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: MadrasThemes Products: MAS Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MadrasThemes MAS Elementor allows DOM-Based XSS.This issue affects MAS Elementor: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mas-addons-for-elementor/wordpress-mas-elementor-plugin-1-1-6-cross-site-scripting-xss-vulnerability?_s_i
/vulnerability/mas-addons-for-elementor/wordpress-mas-elementor-plugin-1-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49234 State: PUBLISHED Published: 2024-10-18T09:49:14.737Z Last Updated: 2024-10-18T13:35:51.315Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: themeworm Products: Plexx Elementor Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in themeworm Plexx Elementor Extension allows Stored XSS.This issue affects Plexx Elementor Extension: from n/a through 1.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/plexx-elementor-extension/wordpress-plexx-elementor-extension-plugin-1-3-4-cro
s://patchstack.com/database/vulnerability/plexx-elementor-extension/wordpress-plexx-elementor-extension-plugin-1-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49235 State: PUBLISHED Published: 2024-10-17T17:24:17.951Z Last Updated: 2024-10-17T20:01:17.347Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: VideoWhisper.com Products: Contact Forms, Live Support, CRM, Video Messages Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in VideoWhisper.Com Contact Forms, Live Support, CRM, Video Messages allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through 1.10.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/live-support-ti
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/live-support-tickets/wordpress-contact-forms-live-support-crm-video-messages-plugin-1-10-2-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-49236 State: PUBLISHED Published: 2024-10-18T09:48:11.962Z Last Updated: 2024-10-18T13:36:21.255Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Hafiz Uddin Ahmed Products: Crazy Call To Action Box Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hafiz Uddin Ahmed Crazy Call To Action Box allows Stored XSS.This issue affects Crazy Call To Action Box: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/crazy-call-to-action-box/wordpress-crazy-call-to-action-box-plugi
ences: - https://patchstack.com/database/vulnerability/crazy-call-to-action-box/wordpress-crazy-call-to-action-box-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49237 State: PUBLISHED Published: 2024-10-17T17:49:23.866Z Last Updated: 2024-10-17T18:34:48.575Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ahmet Imamoglu Products: Ahmeti Wp Timeline Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ahmet Imamoglu Ahmeti Wp Timeline allows Stored XSS.This issue affects Ahmeti Wp Timeline: from n/a through 5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ahmeti-wp-timeline/wordpress-ahmeti-wp-timeline-plugin-5-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49238 State: PUBLISHED Published: 2024-10-18T09:46:56.420Z Last Updated: 2024-10-18T13:37:01.808Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: M. Konieczny, DH9SB Products: ADIF Log Search Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in M. Konieczny, DH9SB ADIF Log Search Widget allows Reflected XSS.This issue affects ADIF Log Search Widget: from n/a through 1.0f. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/adif-log-search-widget/wordpress-adif-log-search-widget-plugin-1-0f
ces: - https://patchstack.com/database/vulnerability/adif-log-search-widget/wordpress-adif-log-search-widget-plugin-1-0f-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49239 State: PUBLISHED Published: 2024-10-18T09:46:04.609Z Last Updated: 2024-10-18T13:05:50.338Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Nikhil Vaghela Products: Add Categories Post Footer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Nikhil Vaghela Add Categories Post Footer allows Reflected XSS.This issue affects Add Categories Post Footer: from n/a through 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/add-categories-post-footer/wordpress-add-categories-post-footer-
rences: - https://patchstack.com/database/vulnerability/add-categories-post-footer/wordpress-add-categories-post-footer-plugin-2-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49240 State: PUBLISHED Published: 2024-10-18T09:45:17.423Z Last Updated: 2024-10-18T13:37:42.181Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Agustin Berasategui Products: AB Categories Search Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Agustin Berasategui AB Categories Search Widget allows Reflected XSS.This issue affects AB Categories Search Widget: from n/a through 0.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ab-categories-search-widget/wordpress-ab-categories
ichment: References: - https://patchstack.com/database/vulnerability/ab-categories-search-widget/wordpress-ab-categories-search-widget-plugin-0-2-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49241 State: PUBLISHED Published: 2024-10-18T09:44:18.623Z Last Updated: 2024-10-18T13:51:47.278Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Tady Walsh Products: Tito Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tady Walsh Tito allows DOM-Based XSS.This issue affects Tito: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/tito/wordpress-tito-plugin-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49242 State: PUBLISHED Published: 2024-10-16T13:39:47.006Z Last Updated: 2024-10-16T14:16:30.513Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Shafiq Products: Digital Lottery Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Shafiq Digital Lottery allows Upload a Web Shell to a Web Server.This issue affects Digital Lottery: from n/a through 3.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/digital-lottery/wordpress-digital-lottery-plugin-3-0-5-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-49243 State: PUBLISHED Published: 2024-10-18T09:42:25.551Z Last Updated: 2024-10-18T17:10:58.648Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Jon Vincent Mendoza Products: Dynamic Elementor Addons Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jon Vincent Mendoza Dynamic Elementor Addons allows PHP Local File Inclusion.This issue affects Dynamic Elementor Addons: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dynamic-elementor-addons/wordpress-dy
CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dynamic-elementor-addons/wordpress-dynamic-elementor-addons-plugin-1-0-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2024-49244 State: PUBLISHED Published: 2024-10-17T17:33:11.071Z Last Updated: 2024-10-17T19:31:51.346Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: cmssoft Products: CSV Product Import Export for WooCommerce Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cmssoft CSV Product Import Export for WooCommerce allows SQL Injection.This issue affects CSV Product Import Export for WooCommerce: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/csv-wc-product-import-export/wordpress-s
A ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/csv-wc-product-import-export/wordpress-sv-product-import-export-for-woocommerce-plugin-1-0-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-49245 State: PUBLISHED Published: 2024-10-16T13:46:58.220Z Last Updated: 2024-10-16T13:58:42.704Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Ahime Products: Ahime Image Printer Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ahime Ahime Image Printer.This issue affects Ahime Image Printer: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ahime-image-printer/wordpress-ahime-image-printer-plugin-1-0-0-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2024-49246 State: PUBLISHED Published: 2024-10-17T17:31:28.121Z Last Updated: 2024-10-17T19:32:14.656Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: anand23 Products: Ajax Rating with Custom Login Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anand23 Ajax Rating with Custom Login allows SQL Injection.This issue affects Ajax Rating with Custom Login: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ajax-rating-with-custom-login/wordpress-ajax-rating-with-custom-login-plug
https://patchstack.com/database/vulnerability/ajax-rating-with-custom-login/wordpress-ajax-rating-with-custom-login-plugin-1-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-49247 State: PUBLISHED Published: 2024-10-16T12:31:02.405Z Last Updated: 2024-10-16T15:26:17.081Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: sooskriszta, webforza Products: BuddyPress Better Registration Problem Types: CWE-288 Description: : Authentication Bypass Using an Alternate Path or Channel vulnerability in sooskriszta, webforza BuddyPress Better Registration allows : Authentication Bypass.This issue affects BuddyPress Better Registration: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/better-bp-registration/wordpress-buddypress-better-registr
: References: - https://patchstack.com/database/vulnerability/better-bp-registration/wordpress-buddypress-better-registration-plugin-1-6-broken-authentication-vulnerability?_s_id=cve
CVE ID: CVE-2024-49248 State: PUBLISHED Published: 2024-10-17T19:35:31.749Z Last Updated: 2024-10-17T20:04:26.143Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Igor Funa Products: Ad Inserter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Igor Funa Ad Inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a through 2.7.37. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ad-inserter/wordpress-ad-inserter-plugin-2-7-37-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49249 State: PUBLISHED Published: 2025-01-07T10:49:34.877Z Last Updated: 2025-01-07T14:25:29.523Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: SMSA Express Products: SMSA Shipping Problem Types: CWE-35 Description: Path Traversal vulnerability in SMSA Express SMSA Shipping allows Path Traversal.This issue affects SMSA Shipping: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smsa-shipping-official/vulnerability/wordpress-smsa-shipping-plugin-2-3-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2024-49250 State: PUBLISHED Published: 2024-10-20T10:28:46.857Z Last Updated: 2024-10-20T13:40:27.718Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Michael Tran Products: Table of Contents Plus Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Michael Tran Table of Contents Plus allows Cross Site Request Forgery.This issue affects Table of Contents Plus: from n/a through 2408. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/table-of-contents-plus/wordpress-table-of-contents-plus-plugin-2408-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-49251 State: PUBLISHED Published: 2024-10-16T13:27:31.399Z Last Updated: 2024-10-16T15:25:12.260Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Maantheme Products: Maan Addons For Elementor Problem Types: CWE-98 Description: : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Maantheme Maan Addons For Elementor allows Local Code Inclusion.This issue affects Maan Addons For Elementor: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/maan-elementor-addons/wordpress-maan-addons-for-elemento
nt: References: - https://patchstack.com/database/vulnerability/maan-elementor-addons/wordpress-maan-addons-for-elementor-plugin-1-0-1-local-file-inclusion-vulnerability?_s_id=cve