Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-2306 State: PUBLISHED Published: 2025-05-16T12:10:13.895Z Last Updated: 2025-05-16T13:02:39.876Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SYNCPILOT Products: LIVE CONTRACT Problem Types: CWE-284 Description: An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows users to download sensitive documents without authentication, if the URL is known. The attack requires the attacker to know the documents UUIDv4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cirosec.de/sa/sa-2025-004
CVE ID: CVE-2025-2308 State: PUBLISHED Published: 2025-03-14T20:31:04.336Z Last Updated: 2025-05-08T08:58:56.350Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: HDF5 Problem Types: CWE-122, CWE-119 Description: A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Z__scaleoffset_decompress_one_byte of the component Scale-Offset Filter. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release. Additional Analyst Notes: - CISA ADP Vulnrichme
may be used. The vendor plans to fix this issue in an upcoming release. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299721 - https://vuldb.com/?ctiid.299721 - https://vuldb.com/?submit.514531 - https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc2.md
CVE ID: CVE-2025-2309 State: PUBLISHED Published: 2025-03-14T21:00:07.781Z Last Updated: 2025-05-08T08:58:58.349Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: HDF5 Problem Types: CWE-122, CWE-119 Description: A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5T__bit_copy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release. Additional Analyst Notes: - CISA ADP Vulnrichme
may be used. The vendor plans to fix this issue in an upcoming release. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299722 - https://vuldb.com/?ctiid.299722 - https://vuldb.com/?submit.514532 - https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc3.md
CVE ID: CVE-2025-2310 State: PUBLISHED Published: 2025-03-14T21:00:09.852Z Last Updated: 2025-05-08T08:59:00.157Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: HDF5 Problem Types: CWE-122, CWE-119 Description: A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute Decoder. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor plans to fix this issue in an upcoming release. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
r plans to fix this issue in an upcoming release. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299723 - https://vuldb.com/?ctiid.299723 - https://vuldb.com/?submit.514533 - https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc4.md
CVE ID: CVE-2025-2311 State: PUBLISHED Published: 2025-03-20T11:55:51.628Z Last Updated: 2025-03-21T06:38:05.955Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Sechard Information Technologies Products: SecHard Problem Types: CWE-648, CWE-319, CWE-522 Description: Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring.This issue affects SecHard: before 3.3.0.20220411. Additional Analyst Notes: - CISA ADP Vulnrichm
a API Event Monitoring.This issue affects SecHard: before 3.3.0.20220411. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0074
CVE ID: CVE-2025-2312 State: PUBLISHED Published: 2025-03-25T18:08:02.848Z Last Updated: 2025-03-25T18:23:15.943Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: cifs-utils Products: cifs-utils Problem Types: CWE-488 Description: A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.samba.org/?p=cifs-utils.git;a=commit;h=89b679228cc1be9739d54203d2828
- CISA ADP Vulnrichment: References: - https://git.samba.org/?p=cifs-utils.git;a=commit;h=89b679228cc1be9739d54203d28289b03352c174 - https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb?id=db363b0a1d9e6b9dc556296f1b1007aeb496a8cf
CVE ID: CVE-2025-2313 State: PUBLISHED Published: 2025-08-27T10:18:51.431Z Last Updated: 2025-08-27T16:20:16.733Z Vendors: CGM Products: CGM CLININET Problem Types: CWE-94 Description: In the Print.pl service, the "uhcPrintServerPrint" function allows execution of arbitrary code via the "CopyCounter" parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE ID: CVE-2025-2314 State: PUBLISHED Published: 2025-04-16T01:45:01.798Z Last Updated: 2025-04-16T14:35:43.392Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cozmoslabs Products: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor Problem Types: CWE-79 Description: The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.13.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenti
to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue was partially patched in version 3.13.6 of the plugin, and fully patched in 3.13.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9ccf2b56-0355-43e6-a616-d06196e90972?source=cve - https://plugins.trac.wordpress.org/browser/profile-builder/tags/3.13.4/front-end/logout.php#L9 - https://plugins.trac.wordpress.org/changeset/3268402/
CVE ID: CVE-2025-2317 State: PUBLISHED Published: 2025-04-04T05:22:43.213Z Last Updated: 2025-04-04T13:10:42.749Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: woobewoo Products: Product Filter by WBW Problem Types: CWE-89 Description: The Product Filter by WBW plugin for WordPress is vulnerable to time-based SQL Injection via the filtersDataBackend parameter in all versions up to, and including, 2.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to ex
ible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/329aae11-a141-4c61-8198-1cd8e4e6bfea?source=cve - https://plugins.trac.wordpress.org/browser/woo-product-filter/tags/2.7.8/modules/meta/models/meta_values.php#L163 - https://plugins.trac.wordpress.org/browser/woo-product-filter/tags/2.7.8/modules/meta/models/meta_values.php#L174
CVE ID: CVE-2025-2319 State: PUBLISHED Published: 2025-03-25T08:22:16.524Z Last Updated: 2025-03-25T13:15:33.792Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: scheeeli Products: EZ SQL Reports Shortcode Widget and DB Backup Problem Types: CWE-352 Description: The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.11.13 to 5.25.08. This is due to missing or incorrect nonce validation on the 'ELISQLREPORTS_menu' function. This makes it possible for unauthenticated attackers to execute code on the server via a forged request granted they can trick a site administrator into performing an
ckers to execute code on the server via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Version 5.25.10 adds a nonce check, which makes this vulnerability exploitable by admins only. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/eade6ab0-ff79-4107-83ce-e85b37d97442?source=cve - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/5.25.08/index.php - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/5.21.35/index.php - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/4.17.42/index.php - https://plugins.trac.wordpress.
.php - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/4.17.42/index.php - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/4.17.38/index.php - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/4.16.38/index.php - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/4.11.37/index.php - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/4..11.33/index.php - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/4..11.15/index.php - https://plugins.trac.wordpress.org/browser/elisqlreports/tags/4..11.13/index.php
CVE ID: CVE-2025-2320 State: PUBLISHED Published: 2025-03-14T22:00:09.313Z Last Updated: 2025-03-17T15:20:06.922Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 274056675 Products: springboot-openai-chatgpt Problem Types: CWE-285, CWE-266 Description: A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to prov
he exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299749 - https://vuldb.com/?ctiid.299749 - https://vuldb.com/?submit.505689 - https://www.cnblogs.com/aibot/p/18732226
CVE ID: CVE-2025-2321 State: PUBLISHED Published: 2025-03-15T12:00:10.514Z Last Updated: 2025-03-18T16:19:00.726Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 274056675 Products: springboot-openai-chatgpt Problem Types: CWE-840 Description: A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the argument chatUserID leads to business logic errors. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product.
oit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299750 - https://vuldb.com/?ctiid.299750 - https://vuldb.com/?submit.505690 - https://www.cnblogs.com/aibot/p/18732250
CVE ID: CVE-2025-2322 State: PUBLISHED Published: 2025-03-15T13:31:07.674Z Last Updated: 2025-03-18T16:18:34.430Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 274056675 Products: springboot-openai-chatgpt Problem Types: CWE-798, CWE-259 Description: A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioni
te the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299751 - https://vuldb.com/?ctiid.299751 - https://vuldb.com/?submit.505694 - https://www.cnblogs.com/aibot/p/18732299
CVE ID: CVE-2025-2323 State: PUBLISHED Published: 2025-03-15T17:00:39.713Z Last Updated: 2025-03-17T16:53:21.732Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: 274056675 Products: springboot-openai-chatgpt Problem Types: CWE-841, CWE-840 Description: A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been declared as problematic. This vulnerability affects the function updateQuestionCou of the file /api/mjkj-chat/chat/mng/update/questionCou of the component Number of Question Handler. The manipulation leads to enforcement of behavioral workflow. The attack can be initiated remotely. The exploit has been disclosed to the public
o enforcement of behavioral workflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299752 - https://vuldb.com/?ctiid.299752 - https://vuldb.com/?submit.505695 - https://www.cnblogs.com/aibot/p/18732309
CVE ID: CVE-2025-2324 State: PUBLISHED Published: 2025-03-19T15:23:03.486Z Last Updated: 2025-03-19T20:17:04.235Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Progress Products: MOVEit Transfer Problem Types: CWE-269 Description: Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, from 2024.1.0 before 2024.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.progress.com/s/article/MOVEit-Transfer-Vulnerability-CVE-2025-2324
ISA ADP Vulnrichment: References: - https://community.progress.com/s/article/MOVEit-Transfer-Vulnerability-CVE-2025-2324-March-18-2025
CVE ID: CVE-2025-2325 State: PUBLISHED Published: 2025-03-15T06:40:01.724Z Last Updated: 2025-03-17T16:52:12.763Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: boopathi0001 Products: WP Test Email Problem Types: CWE-79 Description: The WP Test Email plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Logs in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www
whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7a0a9ff8-ed93-4de9-ba49-730b2253c6a4?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3251086%40wp-test-email&new=3251086%40wp-test-email&sfp_email=&sfph_mail=
CVE ID: CVE-2025-2326 State: REJECTED Published: N/A Last Updated: 2025-03-24T14:11:27.256Z Description: No description available.
CVE ID: CVE-2025-2327 State: PUBLISHED Published: 2025-06-16T16:23:35.481Z Last Updated: 2025-06-16T16:36:57.499Z Vendors: Pure Storage Products: FlashArray Problem Types: CWE-532 Description: A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.purestorage.com/category/m_pure_storage_product_security
CVE ID: CVE-2025-2328 State: PUBLISHED Published: 2025-03-28T06:51:45.382Z Last Updated: 2025-03-28T14:35:20.434Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: glenwpcoder Products: Drag and Drop Multiple File Upload for Contact Form 7 Problem Types: CWE-22 Description: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'dnd_remove_uploaded_files' function in all versions up to, and including, 1.3.8.7. This makes it possible for unauthenticated attackers to add arbitrary file paths (such as ../../../../wp-config.php) to uploaded files on the s
for unauthenticated attackers to add arbitrary file paths (such as ../../../../wp-config.php) to uploaded files on the server, which can easily lead to remote code execution when an Administrator deletes the message. Exploiting this vulnerability requires the Flamingo plugin to be installed and activated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0f6cca7a-b8ff-4ca5-b813-e611eac07695?source=cve - https://plugins.trac.wordpress.org/browser/drag-and-drop-multiple-file-upload-contact-form-7/trunk/inc/dnd-upload-cf7.php#L153 - https://plugins.trac.wordpress.org/changeset/3261964/
CVE ID: CVE-2025-2329 State: PUBLISHED Published: 2025-07-25T15:49:40.236Z Last Updated: 2025-08-04T18:31:49.556Z Vendors: silabs.com Products: OpenThread Problem Types: CWE-908 Description: In high traffic environments, a Silicon Labs OpenThread RCP (see impacted versions) fails to clear the SPI transmit buffer and may send a corrupt packet over SPI to its host, causing the host to reset the RCP which results in a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/simplicity_sdk/releases - https://github.com/SiliconLabs/gecko_sdk/releases - https://community.silabs.com/069Vm00000SNyueIAD
CVE ID: CVE-2025-2330 State: PUBLISHED Published: 2025-07-02T09:23:24.595Z Last Updated: 2025-07-02T13:14:21.969Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themesgrove Products: All-in-One Addons for Elementor – WidgetKit Problem Types: CWE-79 Description: The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button+modal' widget in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web s
. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/83d5337b-8c06-41ee-b18c-2c39150a7f30?source=cve - https://plugins.trac.wordpress.org/browser/widgetkit-for-elementor/trunk/elements/button-modal/template/view.php#L86 - https://wordpress.org/plugins/widgetkit-for-elementor/#developers - https://plugins.trac.wordpress.org/changeset/3283765/widgetkit-for-elementor/tags/2.5.5/elements/button-modal/template/view.php
CVE ID: CVE-2025-2331 State: PUBLISHED Published: 2025-03-22T11:18:41.524Z Last Updated: 2025-03-24T19:20:44.727Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: givewp Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-200 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.22.1 via a misconfigured capability check in the 'permissionsCheck' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including reports detailing donors and don
attackers, with Subscriber-level access and above, to extract sensitive data including reports detailing donors and donation amounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b4d9acfb-bb9d-4b00-b439-c7ccea751f8d?source=cve - https://plugins.trac.wordpress.org/browser/give/trunk/src/API/Endpoints/Reports/Endpoint.php?rev=3252319#L68 - https://plugins.trac.wordpress.org/browser/give/trunk/src/API/Endpoints/Reports/Endpoint.php?rev=3252319#L117 - https://plugins.trac.wordpress.org/browser/give/trunk/src/API/Endpoints/Reports/Endpoint.php?rev=3252319#L227 - https://plugins.trac.wordpress.org/changeset/3258797/
CVE ID: CVE-2025-2332 State: PUBLISHED Published: 2025-03-27T05:22:29.738Z Last Updated: 2025-03-27T14:38:39.477Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: smackcoders Products: Export All Posts, Products, Orders, Refunds & Users Problem Types: CWE-502 Description: The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.13 via deserialization of untrusted input in the 'returnMetaValueAsCustomerInput' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which mean
r unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9546ab46-737c-4bd3-9542-8ab1b776b3ea?source=cve - https://plugins.trac.wordpress.org/browser/wp-ult
l/vulnerabilities/id/9546ab46-737c-4bd3-9542-8ab1b776b3ea?source=cve - https://plugins.trac.wordpress.org/browser/wp-ultimate-exporter/trunk/exportExtensions/ExportExtension.php#L3332 - https://plugins.trac.wordpress.org/changeset/3257504/