Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hstack.com/database/vulnerability/customify-sites/wordpress-customify-site-library-plugin-0-0-9-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2024-33645 State: PUBLISHED Published: 2024-04-29T04:58:25.118Z Last Updated: 2024-08-02T02:36:04.548Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Eftakhairul Islam & Sirajus Salayhin Products: Easy Set Favicon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eftakhairul Islam & Sirajus Salayhin Easy Set Favicon allows Reflected XSS.This issue affects Easy Set Favicon: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-set-favicon/wordpress-easy-se
- CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-set-favicon/wordpress-easy-set-favicon-plugin-1-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33646 State: PUBLISHED Published: 2024-04-29T04:57:12.121Z Last Updated: 2024-08-02T02:36:04.572Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Toast Plugins Products: Sticky Anything Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Sticky Anything allows Cross-Site Scripting (XSS).This issue affects Sticky Anything: from n/a through 2.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/toast-stick-anything/wordpress-sticky-anything-plugin-2-1-5-broken-access-control-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33647 State: PUBLISHED Published: 2024-05-14T10:03:08.350Z Last Updated: 2025-08-27T21:13:00.144Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Siemens Products: Polarion ALM Problem Types: CWE-284 Description: A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in the affected application lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-925850.html
CVE ID: CVE-2024-33648 State: PUBLISHED Published: 2024-04-29T04:54:32.290Z Last Updated: 2024-08-02T02:36:04.465Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wzy Media Products: Recencio Book Reviews Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wzy Media Recencio Book Reviews allows Stored XSS.This issue affects Recencio Book Reviews: from n/a through 1.66.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/recencio-book-reviews/wordpress-recencio-book-reviews-plugin-1-66-0-cro
- https://patchstack.com/database/vulnerability/recencio-book-reviews/wordpress-recencio-book-reviews-plugin-1-66-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33649 State: PUBLISHED Published: 2024-04-29T04:53:14.581Z Last Updated: 2024-08-02T02:36:04.537Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WpOpal Products: Opal Widgets For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpOpal Opal Widgets For Elementor allows Stored XSS.This issue affects Opal Widgets For Elementor: from n/a through 1.6.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/opal-widgets-for-elementor/wordpress-opal-widgets-for-elementor
erences: - https://patchstack.com/database/vulnerability/opal-widgets-for-elementor/wordpress-opal-widgets-for-elementor-plugin-1-6-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33650 State: PUBLISHED Published: 2024-04-26T07:11:33.390Z Last Updated: 2024-08-02T02:36:04.532Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Cryout Creations Products: Serious Slider Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Cryout Creations Serious Slider.This issue affects Serious Slider: from n/a through 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cryout-serious-slider/wordpress-serious-slider-plugin-1-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33651 State: PUBLISHED Published: 2024-04-26T07:09:47.441Z Last Updated: 2024-08-02T02:36:04.507Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Matthew Fries Products: MF Gig Calendar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Matthew Fries MF Gig Calendar.This issue affects MF Gig Calendar : from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mf-gig-calendar/wordpress-mf-gig-calendar-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33652 State: PUBLISHED Published: 2024-04-29T08:09:36.085Z Last Updated: 2024-08-02T02:36:04.463Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Real Big Plugins Products: Client Dash Problem Types: CWE-862 Description: Missing Authorization vulnerability in Real Big Plugins Client Dash.This issue affects Client Dash: from n/a through 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/client-dash/wordpress-client-dash-plugin-2-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33653 State: PUBLISHED Published: 2024-07-09T12:05:02.168Z Last Updated: 2024-08-02T02:36:04.550Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-064222.html
CVE ID: CVE-2024-33654 State: PUBLISHED Published: 2024-07-09T12:05:03.457Z Last Updated: 2024-08-02T02:36:04.512Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/
CVE ID: CVE-2024-33655 State: PUBLISHED Published: 2024-06-06T00:00:00.000Z Last Updated: 2025-11-04T22:06:13.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst (which can be considered traffic amplification in some cases), aka the "DNSBomb" issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://datatracker.ietf.org/doc/html/rfc1035 - https://nlnetlabs.nl/projects/unbound/security-advisories/ - https://
- https://datatracker.ietf.org/doc/html/rfc1035 - https://nlnetlabs.nl/projects/unbound/security-advisories/ - https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-120 - https://www.isc.org/blogs/2024-dnsbomb/ - https://nlnetlabs.nl/downloads/unbound/CVE-2024-33655.txt - https://github.com/NLnetLabs/unbound/commit/c3206f4568f60c486be6d165b1f2b5b254fea3de - https://alas.aws.amazon.com/ALAS-2024-1934.html - https://meterpreter.org/researchers-uncover-dnsbomb-a-new-pdos-attack-exploiting-legitimate-dns-features/ - https://sp2024.ieee-security.org/accepted-papers.html - https://gitlab.isc.org/isc-projects/bind9/-/issues/4398 - https://lists.fedoraproject.org/archives
ccepted-papers.html - https://gitlab.isc.org/isc-projects/bind9/-/issues/4398 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QITY2QBX2OCBTZIXD2A5ES62STFIA4AL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TBXPRJ2Q235YUZKYDRWOSYNDFBJQWJ3/
CVE ID: CVE-2024-33656 State: PUBLISHED Published: 2024-08-21T16:16:43.954Z Last Updated: 2024-08-21T17:08:28.329Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AMI Products: AptioV Problem Types: CWE-269 Description: The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS security mechanisms Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024003.pdf
CVE ID: CVE-2024-33657 State: PUBLISHED Published: 2024-08-21T16:17:12.383Z Last Updated: 2024-08-22T00:40:11.707Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AMI Products: AptioV Problem Types: CWE-20 Description: This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, potentially leading to denial-of-service attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024003.pdf
CVE ID: CVE-2024-33658 State: PUBLISHED Published: 2024-11-12T15:01:05.234Z Last Updated: 2024-11-21T16:21:37.633Z Vendors: AMI Products: AptioV Problem Types: CWE-119 Description: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local. Successful exploitation of this vulnerability may lead to privilege escalation and potentially arbitrary code execution, and impact Integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024004.pdf
CVE ID: CVE-2024-33659 State: PUBLISHED Published: 2025-02-11T15:00:11.196Z Last Updated: 2025-02-11T15:36:38.156Z Vendors: AMI Products: AptioV Problem Types: CWE-20 Description: AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, and Availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2025/AMI-SA-2025002.pdf
CVE ID: CVE-2024-33660 State: PUBLISHED Published: 2024-11-12T15:00:51.675Z Last Updated: 2024-11-21T16:22:25.320Z Vendors: AMI Products: AptioV Problem Types: CWE-494 Description: An exploit is possible where an actor with physical access can manipulate SPI flash without being detected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024004.pdf
CVE ID: CVE-2024-33661 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-08-02T02:36:04.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer before 2.20.0 allows redirects when the target is not index.yaml. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.portainer.io/ - https://github.com/portainer/portainer/pull/11236 - https://github.com/portainer/portainer/pull/11233 - https://github.com/portainer/portainer/compare/2.19.4...2.20.0
CVE ID: CVE-2024-33662 State: PUBLISHED Published: 2024-10-02T00:00:00 Last Updated: 2024-12-04T16:45:43.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.portainer.io - https://github.com/portainer/portainer/compare/2.20.1...2.20.2 - https://github.com/portainer/portainer/issues/11737
CVE ID: CVE-2024-33663 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-09-03T19:34:19.749577 Vendors: n/a Products: n/a Problem Types: n/a Description: python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mpdavis/python-jose/issues/346 - https://www.vicarius.io/vsociety/posts/algorithm-confusion-in-python-jose-cve-2024-33663
CVE ID: CVE-2024-33664 State: PUBLISHED Published: 2024-04-25T00:00:00 Last Updated: 2024-09-05T15:28:29.569946 Vendors: n/a Products: n/a Problem Types: n/a Description: python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mpdavis/python-jose/issues/344 - https://github.com/mpdavis/python-jose/pull/345 - https://www.vicarius.io/vsociety/posts/jwt-bomb-in-python-jose-cve-2024-33664
CVE ID: CVE-2024-33665 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-10-29T20:43:15.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/angular-translate/angular-translate/issues/1418 - https://stackblitz.com/github/neverendingsupport/angular-translate-xss-2024?file=public%2Findex.html - http://docs.herodevs.com/docs/2024-Angular
thub/neverendingsupport/angular-translate-xss-2024?file=public%2Findex.html - http://docs.herodevs.com/docs/2024-Angular-Translate-XSS - https://github.com/angular-translate/angular-translate/issues/1418#issuecomment-252498855
CVE ID: CVE-2024-33666 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:36:04.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should be available only to agents. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2024-01
CVE ID: CVE-2024-33667 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-11-25T18:52:02.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zammad.com/en/advisories/zaa-2024-03
CVE ID: CVE-2024-33668 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:36:04.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2024-02
CVE ID: CVE-2024-33669 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:36:04.567Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:H/AV:N/A:N/C:H/I:N/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple requests to HaveIBeenPwned while a password is being typed, which results in an information leak. This allows an attacker capable of observing Passbolt's HTTPS queries to the Pwned Password API to more easily brute force passwords that are manually typed by the user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www
typed by the user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.passbolt.com - https://haveibeenpwned.com - https://blog.quarkslab.com/passbolt-a-bold-use-of-haveibeenpwned.html - https://www.passbolt.com/security/more - https://help.passbolt.com/incidents/pwned-password-service-information-leak
CVE ID: CVE-2024-33670 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:36:04.533Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom content being displayed when a user visits the crafted URL. Although the injected content is not executed as JavaScript due to Content Security Policy (CSP) restrictions, it may still impact the appearance and user interaction of the page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.passbolt.com/security/more -
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.passbolt.com/security/more - https://www.passbolt.com/incidents - https://help.passbolt.com/incidents/reflective-html-injection-vulnerability
CVE ID: CVE-2024-33671 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-27T15:49:52.581Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AC:L/AV:L/A:H/C:N/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leveraged to perform arbitrary file deletion on protected files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/support/en_US/security/VTS24-002#H1
CVE ID: CVE-2024-33672 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:36:04.596Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AC:L/AV:L/A:H/C:N/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to perform arbitrary file deletion on protected files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.veritas.com/support/en_US/security/VTS24-001
CVE ID: CVE-2024-33673 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-21T20:34:56.798Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/support/en_US/security/VTS24-002#H2
CVE ID: CVE-2024-33677 State: PUBLISHED Published: 2024-04-26T10:43:46.815Z Last Updated: 2024-08-02T02:36:04.515Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Renzo Johnson Products: Contact Form 7 Extension For Mailchimp Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/contact-form-7-mailchimp-extension/wordpress-contact-form-7-extension-for-mailch
//patchstack.com/database/vulnerability/contact-form-7-mailchimp-extension/wordpress-contact-form-7-extension-for-mailchimp-plugin-0-5-70-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33678 State: PUBLISHED Published: 2024-04-26T10:42:22.097Z Last Updated: 2024-08-02T02:36:04.579Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: ClickCease Products: ClickCease Click Fraud Protection Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ClickCease ClickCease Click Fraud Protection.This issue affects ClickCease Click Fraud Protection: from n/a through 3.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/clickcease-click-fraud-protection/wordpress-clickcease-click-fraud-protection-plugin-3-2-4-cross-site-
ase/vulnerability/clickcease-click-fraud-protection/wordpress-clickcease-click-fraud-protection-plugin-3-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33679 State: PUBLISHED Published: 2024-04-26T10:40:54.411Z Last Updated: 2024-08-02T02:36:04.468Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: FameThemes Products: FameTheme Demo Importer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in FameThemes FameTheme Demo Importer.This issue affects FameTheme Demo Importer: from n/a through 1.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/famethemes-demo-importer/wordpress-fametheme-demo-importer-plugin-1-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-33680 State: PUBLISHED Published: 2024-04-26T10:37:01.657Z Last Updated: 2024-08-02T02:36:04.567Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: MainWP Products: MainWP Child Reports Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in MainWP MainWP Child Reports.This issue affects MainWP Child Reports: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mainwp-child-reports/wordpress-mainwp-child-reports-plugin-2-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve