Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-7369 State: PUBLISHED Published: 2024-08-01T22:00:08.540Z Last Updated: 2024-08-02T14:48:30.941Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273353 was assigned to this vulnerability. Add
loit has been disclosed to the public and may be used. The identifier VDB-273353 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273353 - https://vuldb.com/?ctiid.273353 - https://vuldb.com/?submit.383517 - https://gist.github.com/topsky979/5e805f42f51224bdd52cfd099f44001d
CVE ID: CVE-2024-7370 State: PUBLISHED Published: 2024-08-01T22:31:04.366Z Last Updated: 2024-08-02T15:09:30.133Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been classified as critical. Affected is an unknown function of the file /manage_quiz.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273354 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA
e public and may be used. VDB-273354 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273354 - https://vuldb.com/?ctiid.273354 - https://vuldb.com/?submit.383518 - https://gist.github.com/topsky979/df0a5328ddb5b43ab7fa933aee500155
CVE ID: CVE-2024-7371 State: PUBLISHED Published: 2024-08-01T23:00:09.256Z Last Updated: 2024-08-06T20:28:43.589Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /quiz_view.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273355. Additional Analys
isclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273355. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273355 - https://vuldb.com/?ctiid.273355 - https://vuldb.com/?submit.383519 - https://gist.github.com/topsky979/e45c2b283d29bc0a2f3551ca9cb45999
CVE ID: CVE-2024-7372 State: PUBLISHED Published: 2024-08-01T23:31:04.235Z Last Updated: 2024-08-05T19:05:21.873Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /quiz_board.php. The manipulation of the argument quiz leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273356. Additional Analyst Notes: - CISA A
ed to the public and may be used. The identifier of this vulnerability is VDB-273356. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273356 - https://vuldb.com/?ctiid.273356 - https://vuldb.com/?submit.383520 - https://gist.github.com/topsky979/6437f7c2f86d309ca000d0a33885d7bc
CVE ID: CVE-2024-7373 State: PUBLISHED Published: 2024-08-02T00:00:10.342Z Last Updated: 2024-08-02T14:19:34.157Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Simple Realtime Quiz System 1.0. This affects an unknown part of the file /ajax.php?action=load_answered. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273357 was assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. The identifier VDB-273357 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273357 - https://vuldb.com/?ctiid.273357 - https://vuldb.com/?submit.383521 - https://gist.github.com/topsky979/9bcb8b09acce0d5a8a453dfd5093881d
CVE ID: CVE-2024-7374 State: PUBLISHED Published: 2024-08-02T00:31:03.971Z Last Updated: 2024-08-02T14:15:38.331Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Simple Realtime Quiz System 1.0. This vulnerability affects unknown code of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273358 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichm
may be used. VDB-273358 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273358 - https://vuldb.com/?ctiid.273358 - https://vuldb.com/?submit.383522 - https://gist.github.com/topsky979/94ae61ff3fc760ac985dcd5e64da06c4
CVE ID: CVE-2024-7375 State: PUBLISHED Published: 2024-08-02T01:00:09.694Z Last Updated: 2024-08-05T19:06:54.843Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Simple Realtime Quiz System 1.0. This issue affects some unknown processing of the file /my_quiz_result.php. The manipulation of the argument quiz leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273359. Additional Analyst
closed to the public and may be used. The associated identifier of this vulnerability is VDB-273359. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273359 - https://vuldb.com/?ctiid.273359 - https://vuldb.com/?submit.383523 - https://gist.github.com/topsky979/840587360c33d53efb359ff314f7ea24
CVE ID: CVE-2024-7376 State: PUBLISHED Published: 2024-08-02T01:31:04.450Z Last Updated: 2024-08-02T16:14:23.041Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple Realtime Quiz System 1.0. Affected is an unknown function of the file /print_quiz_records.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273360. Additional Analyst Notes: - CISA ADP
to the public and may be used. The identifier of this vulnerability is VDB-273360. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273360 - https://vuldb.com/?ctiid.273360 - https://vuldb.com/?submit.383524 - https://gist.github.com/topsky979/8c36e6a899fc02e8054f67b94e34f6c6
CVE ID: CVE-2024-7377 State: PUBLISHED Published: 2024-08-02T02:00:07.691Z Last Updated: 2024-08-02T15:07:38.623Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /view_result.php. The manipulation of the argument qid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273361 was assigned to this vulnerability. Additional Analys
disclosed to the public and may be used. The identifier VDB-273361 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273361 - https://vuldb.com/?ctiid.273361 - https://vuldb.com/?submit.383525 - https://gist.github.com/topsky979/4415a08deadd16356484d5ff540e60f9
CVE ID: CVE-2024-7378 State: PUBLISHED Published: 2024-08-02T02:31:03.838Z Last Updated: 2024-08-02T14:05:16.229Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Realtime Quiz System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_question.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273362 is the identifier assigned to this vulnerability. Additional Analyst Notes:
d to the public and may be used. VDB-273362 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.273362 - https://vuldb.com/?ctiid.273362 - https://vuldb.com/?submit.383526 - https://gist.github.com/topsky979/d4cb58afc5fb41f647b1021d1364d846
CVE ID: CVE-2024-7380 State: PUBLISHED Published: 2024-09-05T11:00:14.660Z Last Updated: 2024-09-05T18:16:05.107Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: creativform Products: Geo Controller Problem Types: CWE-862 Description: The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability checks on the ajax__geolocate_menu and ajax__geolocate_remove_menu functions in all versions up to, and including, 8.6.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create or delete WordPress menus. Additional Analyst Notes: - CISA ADP Vulnrichment: References
vel access and above, to create or delete WordPress menus. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/280e1b4d-08be-4e77-abcb-5f9079111595?source=cve - https://plugins.trac.wordpress.org/browser/cf-geoplugin/tags/8.6.9/inc/classes/Menus.php#L519 - https://plugins.trac.wordpress.org/browser/cf-geoplugin/tags/8.6.9/inc/classes/Menus.php#L606
CVE ID: CVE-2024-7381 State: PUBLISHED Published: 2024-09-05T11:00:15.152Z Last Updated: 2024-09-05T18:11:31.024Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: creativform Products: Geo Controller Problem Types: CWE-862 Description: The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization and capability checks on the ajax__shortcode_cache function in all versions up to, and including, 8.6.9. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the target site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/t
ailable on the target site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4ed7b13a-eec3-4035-8815-15228fb05af1?source=cve - https://plugins.trac.wordpress.org/browser/cf-geoplugin/tags/8.6.9/inc/classes/Shortcodes.php#L1932
CVE ID: CVE-2024-7382 State: PUBLISHED Published: 2024-08-09T09:30:10.620Z Last Updated: 2024-08-09T12:42:11.532Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: Linkify Text Problem Types: CWE-200 Description: The Linkify Text plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.9.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own and requires another vuln
on, which can be used to aid other attacks. The information displayed is not useful on its own and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/107548a1-3b5b-4838-815b-32b86e1b7ff5?source=cve - https://plugins.trac.wordpress.org/browser/linkify-text/tags/1.9.1/tests/bootstrap.php#L8
CVE ID: CVE-2024-7383 State: PUBLISHED Published: 2024-08-05T13:19:13.933Z Last Updated: 2025-11-08T07:13:53.292Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8 Advanced Virtualization Problem Types: CWE-295 Description: A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:675
traffic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:6757 - https://access.redhat.com/errata/RHSA-2024:6964 - https://access.redhat.com/security/cve/CVE-2024-7383 - https://bugzilla.redhat.com/show_bug.cgi?id=2302865 - https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/message/LHR3BW6RJ7K4BJBQIYV3GTZLSY27VZO2 - https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/ENZY4LHLARA3N4C3JUNLPYUCXHFO7BWQ/
CVE ID: CVE-2024-7384 State: PUBLISHED Published: 2024-08-22T02:02:02.326Z Last Updated: 2024-08-22T14:26:47.662Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: acyba Products: AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress Problem Types: CWE-434 Description: The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the acym_extractArchive function in all versions up to, and including, 9.7.2. This makes it possible for authenticated attackers, with Subscriber-level access and above
up to, and including, 9.7.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0c747bc9-582c-4b9f-85a4-469c446d50f5?source=cve - https://plugins.trac.wordpress.org/browser/acymailing/trunk/back/libraries/wordpress/file.php#L47 - https://wordpress.org/plugins/acymailing/#developers - https://www.acymailing.com/changelog/ - https://plugins.trac.wordpress.org/changeset?old_path=%2Facymailing&old=3118953&new_path=%2Facymailing&new=
changelog/ - https://plugins.trac.wordpress.org/changeset?old_path=%2Facymailing&old=3118953&new_path=%2Facymailing&new=3137644&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/changeset/3137644/
CVE ID: CVE-2024-7385 State: PUBLISHED Published: 2024-09-25T03:27:41.059Z Last Updated: 2024-09-25T14:01:58.911Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: ashishajani Products: WordPress Simple HTML Sitemap Problem Types: CWE-89 Description: The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already e
for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f529b981-623f-4bd3-9155-ebfab4c65d1d?source=cve - https://plugins.trac.wordpress.org/browser/wp-simple-html-sitemap/tags/3.1/inc/wshs_saved.php#L47 - https://plugins.trac.wordpress.org/changeset/3155037/wp-simple-html-sitemap/trunk/inc/wshs_saved.php
CVE ID: CVE-2024-7386 State: PUBLISHED Published: 2024-09-25T02:04:58.768Z Last Updated: 2024-09-25T16:16:08.153Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: codename065 Products: Premium Packages – Sell Digital Products Securely Problem Types: CWE-352 Description: The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.9.1. This is due to missing nonce validation on the addRefund() function. This makes it possible for unauthenticated attackers to perform actions such as initiating refunds via a forged request granted they can trick a site administrator
attackers to perform actions such as initiating refunds via a forged request granted they can trick a site administrator or shop manager into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0a714536-c6fd-495b-b774-104657329a74?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3156970%40wpdm-premium-packages&new=3156970%40wpdm-premium-packages&sfp_email=&sfph_mail=
CVE ID: CVE-2024-7387 State: PUBLISHED Published: 2024-09-16T23:58:35.176Z Last Updated: 2025-11-11T15:21:33.858Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17 Problem Types: CWE-250 Description: A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the
d injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:3718 - https://access.redhat.com/errata/RHSA-2024:6685 - https://access.redhat.com/errata/RHSA-2024:6687 - https://access.redhat.c
ps://access.redhat.com/errata/RHSA-2024:6685 - https://access.redhat.com/errata/RHSA-2024:6687 - https://access.redhat.com/errata/RHSA-2024:6689 - https://access.redhat.com/errata/RHSA-2024:6691 - https://access.redhat.com/errata/RHSA-2024:6705 - https://access.redhat.com/security/cve/CVE-2024-7387 - https://bugzilla.redhat.com/show_bug.cgi?id=2302259 - https://stuxxn.github.io/advisory/2024/10/02/openshift-build-docker-priv-esc.html
CVE ID: CVE-2024-7388 State: PUBLISHED Published: 2024-08-13T01:59:27.523Z Last Updated: 2024-08-13T13:30:35.113Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: gfazioli Products: WP Bannerize Pro Problem Types: CWE-79 Description: The WP Bannerize Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via banner alt data in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site
rbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ba08dbad-15f9-43cf-b0d7-a2a4604cb4af?source=cve - https://plugins.trac.wordpress.org/changeset/3133241/wp-bannerize-pro/trunk/plugin/CustomPostTypes/WPBannerizeCustomPostType.php
CVE ID: CVE-2024-7389 State: PUBLISHED Published: 2024-08-02T04:29:55.281Z Last Updated: 2024-08-19T07:52:55.076Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: wpmudev Products: Forminator – Contact Form, Payment Form & Custom Form Builder Problem Types: CWE-522 Description: The Forminator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.29.1 via class-forminator-addon-hubspot-wp-api.php. This makes it possible for unauthenticated attackers to extract the HubSpot integration developer API key and make unauthorized changes to the plugin's HubSpot integration or expose personally identifiable informat
per API key and make unauthorized changes to the plugin's HubSpot integration or expose personally identifiable information from plugin users using the HubSpot integration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0d04b822-a48a-485e-b9b5-f5a213307c71?source=cve - https://developers.hubspot.com/docs/api/webhooks#scopes - https://developers.hubspot.com/docs/api/webhooks#manage-settings-via-api - https://plugins.trac.wordpress.org/changeset/3047085/forminator/trunk/addons/pro/hubspot/lib/class-forminator-addon-hubspot-wp-api.php
CVE ID: CVE-2024-7390 State: PUBLISHED Published: 2024-08-21T05:30:20.660Z Last Updated: 2024-08-21T17:27:04.401Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: starkinfo Products: WP Testimonial Widget Problem Types: CWE-862 Description: The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnSaveTestimonailOrder function in all versions up to, and including, 3.0. This makes it possible for unauthenticated attackers to change the order of testimonials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/67eef869-a57f-40b5-b289-9353bf5b680a?source=cve - https://plugins.trac.wordpress.org/browser/wp-testimonial-widget/trunk/functions.php#L358