Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1736 State: PUBLISHED Published: 2025-03-30T05:49:14.551Z Last Updated: 2025-11-03T20:57:10.963Z Vendors: PHP Group Products: PHP Problem Types: CWE-20 Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/php/php-src/security/advisories/GHSA-hgf5-96fm-v528
CVE ID: CVE-2025-1737 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:38.225Z Description: No description available.
CVE ID: CVE-2025-1738 State: PUBLISHED Published: 2025-02-27T12:20:29.340Z Last Updated: 2025-02-27T14:40:51.750Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Trivision Products: Camera NC227WF Problem Types: CWE-598 Description: A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-trivision-camera-nc227wf
CVE ID: CVE-2025-1739 State: PUBLISHED Published: 2025-02-27T12:45:26.314Z Last Updated: 2025-02-27T14:24:12.502Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Trivision Products: Camera NC227WF Problem Types: CWE-288 Description: An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vulnerability allows an attacker to retrieve administrator's credentials in cleartext by sending a request against the server using curl with random credentials to "/en/player/activex_pal.asp" and successfully authenticating the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ww
successfully authenticating the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-trivision-camera-nc227wf
CVE ID: CVE-2025-1740 State: PUBLISHED Published: 2025-09-03T08:52:05.634Z Last Updated: 2025-09-03T14:39:53.932Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Akinsoft Products: MyRezzta Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force.This issue affects MyRezzta: from s2.03.01 before v2.05.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0205
CVE ID: CVE-2025-1741 State: PUBLISHED Published: 2025-02-27T16:00:08.945Z Last Updated: 2025-02-27T16:10:50.259Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: b1gMail Problem Types: CWE-502, CWE-20 Description: A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched remotely. Upgrading to version 7.4.1-pl2 is able to address this issue. The identifier of the patch is 4816c8b748f6a5b965c8994e2cf10861bf6e68aa. It is recommended to
ble to address this issue. The identifier of the patch is 4816c8b748f6a5b965c8994e2cf10861bf6e68aa. It is recommended to upgrade the affected component. The vendor acted highly professional and even fixed this issue in the discontinued commercial edition as b1gMail 7.4.0-pl3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.297829 - https://vuldb.com/?ctiid.297829 - https://vuldb.com/?submit.505838 - https://gist.github.com/mcdruid/cb0b848c12fd6a6bc0c1b3357b983d30 - https://www.b1gmail.eu/forum/thread/217-security-update-to-b1gmail-7-4-1-released/ - https://github.com/b1gMail-OSS/b1gMail/commit/4816c8b748f6a5b965c8994e2cf10861bf6e68aa - https://github.co
1-released/ - https://github.com/b1gMail-OSS/b1gMail/commit/4816c8b748f6a5b965c8994e2cf10861bf6e68aa - https://github.com/b1gMail-OSS/b1gMail/releases/tag/7.4.1-pl2
CVE ID: CVE-2025-1742 State: PUBLISHED Published: 2025-02-27T17:00:06.917Z Last Updated: 2025-03-24T13:07:25.782Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: pihome-shc Products: PiHome Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument page_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
e used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.297830 - https://vuldb.com/?ctiid.297830 - https://vuldb.com/?submit.502501 - https://github.com/janssensjelle/published-pocs/blob/main/pihomehvac_xss_home.md
CVE ID: CVE-2025-1743 State: PUBLISHED Published: 2025-02-27T17:31:04.676Z Last Updated: 2025-02-27T17:57:56.985Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: zyx0814 Products: Pichome Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of the file /index.php?mod=textviewer. The manipulation of the argument src leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.297831 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.297831 - https://vuldb.com/?ctiid.297831 - https://vuldb.com/?submit.502168 - https://github.com/sheratan4/cve/issues/4
CVE ID: CVE-2025-1744 State: PUBLISHED Published: 2025-02-28T03:24:50.301Z Last Updated: 2025-02-28T15:21:25.305Z Vendors: radareorg Products: radare2 Problem Types: CWE-787 Description: Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/pull/23969
CVE ID: CVE-2025-1745 State: PUBLISHED Published: 2025-02-27T17:31:17.540Z Last Updated: 2025-02-27T17:57:38.755Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: LinZhaoguan Products: pb-cms Problem Types: CWE-352, CWE-862 Description: A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the component Logout. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.297832 - https://vuldb.com/?ctiid.297832 - https://vuldb.co
- CISA ADP Vulnrichment: References: - https://vuldb.com/?id.297832 - https://vuldb.com/?ctiid.297832 - https://vuldb.com/?submit.502342 - https://gitee.com/LinZhaoguan/pb-cms/issues/IBMM8V
CVE ID: CVE-2025-1746 State: PUBLISHED Published: 2025-02-28T13:38:23.895Z Last Updated: 2025-02-28T14:33:34.329Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: OpenCart Products: OpenCart Problem Types: CWE-79 Description: Cross-Site Scripting vulnerability in OpenCart versions prior to 4.1.0. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the search in the /product/search endpoint. This vulnerability could be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
as session cookies, or to perform actions on behalf of the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-opencart
CVE ID: CVE-2025-1747 State: PUBLISHED Published: 2025-02-28T13:42:34.071Z Last Updated: 2025-02-28T14:30:46.213Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: OpenCart Products: OpenCart Problem Types: CWE-79 Description: HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/login. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-opencart
CVE ID: CVE-2025-1748 State: PUBLISHED Published: 2025-02-28T13:43:11.346Z Last Updated: 2025-02-28T14:27:25.289Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: OpenCart Products: OpenCart Problem Types: CWE-79 Description: HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/register. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-opencart
CVE ID: CVE-2025-1749 State: PUBLISHED Published: 2025-02-28T13:43:25.866Z Last Updated: 2025-02-28T14:11:59.634Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: OpenCart Products: OpenCart Problem Types: CWE-79 Description: HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/voucher. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-opencart
CVE ID: CVE-2025-1750 State: PUBLISHED Published: 2025-06-02T10:04:50.526Z Last Updated: 2025-06-02T12:18:24.429Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-89 Description: An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e1302233-9180-4
ution (RCE). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e1302233-9180-4269-9047-1526247d2cd8 - https://github.com/run-llama/llama_index/commit/369a2942df2efcf6b74461c45d20a0af1fbe4ae2
CVE ID: CVE-2025-1751 State: PUBLISHED Published: 2025-02-27T12:03:10.610Z Last Updated: 2025-02-27T14:42:34.087Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ATISoluciones Products: CIGES Problem Types: CWE-89 Description: A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.atisoluciones.com/incidentes-cve
CVE ID: CVE-2025-1752 State: PUBLISHED Published: 2025-05-10T13:21:30.866Z Last Updated: 2025-10-15T12:50:06.038Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-674 Description: A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latest(v0.12.15). The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the max_depth parameter in the get_article_urls function. This allows an attacker to exhaust Python's recursion limit through repeated f
rameter in the get_article_urls function. This allows an attacker to exhaust Python's recursion limit through repeated function calls, leading to resource consumption and ultimately crashing the Python process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/cd7b9082-7d75-42e4-84f5-dbee23cbc467 - https://github.com/run-llama/llama_index/commit/3c65db2947271de3bd1927dc66a044da385de4da
CVE ID: CVE-2025-1753 State: PUBLISHED Published: 2025-05-28T09:34:10.993Z Last Updated: 2025-05-28T13:25:50.026Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-78 Description: LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the `--files` argument, which is directly passed into `os.system`. An attacker who controls the content of this argument can inject and execute arbitrary shell commands. This vulnerability can be exploited locally if the attacker has control over the CLI arguments, and remotely if a web appli
s vulnerability can be exploited locally if the attacker has control over the CLI arguments, and remotely if a web application calls the LLama-Index CLI with a user-controlled filename. This issue can lead to arbitrary code execution on the affected system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/19e1c67e-1d77-451d-b10b-acbe99900b22 - https://github.com/run-llama/llama_index/commit/b57e76738c53ca82d88658b82f2d82d1c7839c7d
CVE ID: CVE-2025-1754 State: PUBLISHED Published: 2025-06-26T05:31:40.856Z Last Updated: 2025-06-26T13:19:41.870Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-306 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed unauthenticated attackers to upload arbitrary files to public projects by sending crafted API requests, potentially leading to resource abuse and unauthorized content storage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/iss
ent storage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/521619 - https://hackerone.com/reports/3009067
CVE ID: CVE-2025-1755 State: PUBLISHED Published: 2025-02-27T15:24:07.174Z Last Updated: 2025-02-27T16:07:45.320Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: MongoDB Inc Products: MongoDB Compass Problem Types: CWE-426 Description: MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\node_modules\. This issue affects MongoDB Compass prior to 1.42.1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jira.mongodb.org/browse/COMPASS-9058
CVE ID: CVE-2025-1756 State: PUBLISHED Published: 2025-02-27T15:28:11.633Z Last Updated: 2025-02-27T16:06:31.860Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: MongoDB Inc Products: mongosh Problem Types: CWE-426 Description: mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jira.mongodb.org/browse/MONGOSH-2028
CVE ID: CVE-2025-1757 State: PUBLISHED Published: 2025-02-28T04:21:56.133Z Last Updated: 2025-02-28T14:05:46.526Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: portfoliohub Products: WordPress Portfolio Builder – Portfolio Gallery Problem Types: CWE-79 Description: The WordPress Portfolio Builder – Portfolio Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfhub_portfolio' and 'pfhub_portfolio_portfolio' shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-l
and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/36dcf1c4-1e0a-4ab6-a1b3-a9fe3aaddd0b?source=cve - https://plugins.trac.wordpress.org/browser/uber-grid/trunk/src/Frontend.php#L542 - https://plugins.trac.wordpress.org/browser/uber-grid/trunk/src/Frontend.php#L39
CVE ID: CVE-2025-1758 State: PUBLISHED Published: 2025-03-19T15:28:09.883Z Last Updated: 2025-03-19T17:32:53.423Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Progress Products: LoadMaster Problem Types: CWE-121 Description: Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.1.35.4 and above Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.progress.com/bundle/release-notes_loadmaster-7-2-61-1/page/Security-Updates.html
CVE ID: CVE-2025-1759 State: PUBLISHED Published: 2025-08-18T13:58:39.964Z Last Updated: 2025-08-18T14:13:46.976Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-244 Description: IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7242354
CVE ID: CVE-2025-1761 State: PUBLISHED Published: 2025-09-08T22:13:50.248Z Last Updated: 2025-09-09T13:30:27.403Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-824 Description: IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7244230
CVE ID: CVE-2025-1762 State: PUBLISHED Published: 2025-03-28T06:00:03.726Z Last Updated: 2025-03-28T14:43:22.369Z Vendors: Unknown Products: Event Tickets with Ticket Scanner Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d5cefdee-2ba0-465d-b176-0dff39fc322c/
CVE ID: CVE-2025-1763 State: PUBLISHED Published: 2025-05-30T11:02:36.384Z Last Updated: 2025-05-30T12:50:13.554Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/521718 - https://hackerone.com/reports/3016600
CVE ID: CVE-2025-1764 State: PUBLISHED Published: 2025-03-14T05:24:01.947Z Last Updated: 2025-03-14T13:44:27.868Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: hiddenpearls Products: LoginPress | wp-login Custom Login Page Customizer Problem Types: CWE-352 Description: The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request granted th
possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. The 'WPBRIGADE_SDK__DEV_MODE' constant must be set to 'true' to exploit the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9df6a2b4-2dc4-43dd-8282-5c05b0fa13f6?source=cve - https://plugins.svn.wordpress.org/loginpress/
intel/vulnerabilities/id/9df6a2b4-2dc4-43dd-8282-5c05b0fa13f6?source=cve - https://plugins.svn.wordpress.org/loginpress/trunk/lib/wpb-sdk/views/wpb-debug.php - https://pt.wordpress.org/plugins/loginpress/ - https://plugins.trac.wordpress.org/changeset/3253283/
CVE ID: CVE-2025-1766 State: PUBLISHED Published: 2025-03-20T05:22:35.308Z Last Updated: 2025-03-20T15:10:55.571Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: themewinter Products: Eventin – Event Manager, Events Calendar, Event Tickets and Registrations Problem Types: CWE-862 Description: The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'payment_complete' function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated attackers to update the status of ticket payments to 'completed', possibl
24. This makes it possible for unauthenticated attackers to update the status of ticket payments to 'completed', possibly resulting in financial loss. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f2bcaff9-bf04-4d8e-9422-c433264067ff?source=cve - http://plugins.trac.wordpress.org/browser/wp-event-solution/tags/4.0.24/core/Order/PaymentController.php#L97 - https://plugins.trac.wordpress.org/changeset/3257023/