Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37958 State: PUBLISHED Published: 2023-07-12T15:52:57.821Z Last Updated: 2024-11-07T14:53:04.547Z Vendors: Jenkins Project Products: Jenkins Sumologic Publisher Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3117 - http://www.openwall.com/lists/oss-security/2023/07/12/2
CVE ID: CVE-2023-37959 State: PUBLISHED Published: 2023-07-12T15:52:58.559Z Last Updated: 2024-11-07T14:52:14.316Z Vendors: Jenkins Project Products: Jenkins Sumologic Publisher Plugin Description: A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3117 - http://www.openwall.com/lists/oss-security/2023/07/12/2
CVE ID: CVE-2023-37960 State: PUBLISHED Published: 2023-07-12T15:52:59.290Z Last Updated: 2024-11-07T14:50:39.853Z Vendors: Jenkins Project Products: Jenkins MathWorks Polyspace Plugin Description: Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3124 - http://www.openwall.com/lists/oss-security/2023/07/12/2
CVE ID: CVE-2023-37961 State: PUBLISHED Published: 2023-07-12T15:52:59.990Z Last Updated: 2024-11-07T14:49:47.568Z Vendors: Jenkins Project Products: Jenkins Assembla Auth Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into logging in to the attacker's account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2988 - http://www.openwall.com/lists/oss-security/2023/07/12/2
CVE ID: CVE-2023-37962 State: PUBLISHED Published: 2023-07-12T15:53:00.734Z Last Updated: 2024-11-06T19:39:33.944Z Vendors: Jenkins Project Products: Jenkins Benchmark Evaluator Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers to connect to an attacker-specified URL and to check for the existence of directories, `.csv`, and `.ycsb` files on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3119 - http://www.openwall.com/lists/oss-security/2023/07/12/2
CVE ID: CVE-2023-37963 State: PUBLISHED Published: 2023-07-12T15:53:01.486Z Last Updated: 2024-11-06T19:38:16.029Z Vendors: Jenkins Project Products: Jenkins Benchmark Evaluator Plugin Description: A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and to check for the existence of directories, `.csv`, and `.ycsb` files on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3119 - http://www.openwall.com/lists/oss-security/2023/07/12/2
CVE ID: CVE-2023-37964 State: PUBLISHED Published: 2023-07-12T15:53:02.291Z Last Updated: 2024-11-06T19:34:35.580Z Vendors: Jenkins Project Products: Jenkins ElasticBox CI Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3131 - http://www.openwall.com/lists/oss-security/2023/07/12/2
CVE ID: CVE-2023-37965 State: PUBLISHED Published: 2023-07-12T15:53:03.069Z Last Updated: 2024-11-06T19:31:15.711Z Vendors: Jenkins Project Products: Jenkins ElasticBox CI Plugin Description: A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3131 - http://www.openwall.com/lists/oss-security/2023/07/12/2
CVE ID: CVE-2023-37966 State: PUBLISHED Published: 2023-10-31T14:57:14.203Z Last Updated: 2024-09-05T17:42:00.512Z Vendors: Solwin Infotech Products: User Activity Log Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech User Activity Log user-activity-log allows SQL Injection.This issue affects User Activity Log: from n/a through 1.6.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/user-activity-log/wordpress-user-activity-log-plugin-1-6-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-37967 State: PUBLISHED Published: 2024-12-13T14:23:50.154Z Last Updated: 2024-12-13T18:32:30.733Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Designinvento Products: DirectoryPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through 3.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/directorypress/vulnerability/wordpress-directorypress-plugin-3-6-2-unauthenticated-broken-access-control-vulnerabil
ugin/directorypress/vulnerability/wordpress-directorypress-plugin-3-6-2-unauthenticated-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37968 State: PUBLISHED Published: 2023-07-17T14:56:54.274Z Last Updated: 2025-02-19T21:27:56.524Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Faboba Products: Falang multilanguage for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Faboba Falang multilanguage for WordPress plugin <= 1.3.39 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/falang/wordpress-falang-multilanguage-plugin-1-3-39-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-37969 State: PUBLISHED Published: 2024-12-13T14:23:50.866Z Last Updated: 2024-12-13T20:43:24.195Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: The African Boss Products: Checkout with Zelle on Woocommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout with Zelle on Woocommerce: from n/a through 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wc-zelle/vulnerability/wordpress-checkout-with-zell
ment: References: - https://patchstack.com/database/wordpress/plugin/wc-zelle/vulnerability/wordpress-checkout-with-zelle-on-woocommerce-plugin-3-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37970 State: PUBLISHED Published: 2023-07-27T14:30:03.127Z Last Updated: 2024-09-25T16:57:31.589Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Matthew Fries Products: MF Gig Calendar Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Matthew Fries MF Gig Calendar plugin <= 1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mf-gig-calendar/wordpress-mf-gig-calendar-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37971 State: PUBLISHED Published: 2024-12-13T14:23:51.433Z Last Updated: 2024-12-13T20:42:23.194Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: MultiVendorX Products: WooCommerce Product Stock Alert Problem Types: CWE-862 Description: Missing Authorization vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Product Stock Alert: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-product-stock-alert/vulnerability/wordpress-woocommerc
s: - https://patchstack.com/database/wordpress/plugin/woocommerce-product-stock-alert/vulnerability/wordpress-woocommerce-product-stock-alert-plugin-2-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37972 State: PUBLISHED Published: 2023-11-30T15:07:38.542Z Last Updated: 2024-08-02T17:23:27.889Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: MultiVendorX Products: Product Stock Manager & Notifier for WooCommerce Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MultiVendorX Product Stock Manager & Notifier for WooCommerce.This issue affects Product Stock Manager & Notifier for WooCommerce: from n/a through 2.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-product-stock-alert/wordpress-woocommerce
ainer: References: - https://patchstack.com/database/vulnerability/woocommerce-product-stock-alert/wordpress-woocommerce-product-stock-alert-plugin-2-0-1-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2023-37973 State: PUBLISHED Published: 2023-07-18T12:27:46.160Z Last Updated: 2024-09-26T15:12:35.638Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: David Pokorny Products: Replace Word Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in David Pokorny Replace Word plugin <= 2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/replace-word/wordpress-replace-word-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-37974 State: PUBLISHED Published: 2023-07-17T15:00:51.913Z Last Updated: 2024-09-30T14:37:27.026Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Justin Klein Products: WP Social AutoConnect Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Justin Klein WP Social AutoConnect plugin <= 4.6.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-fb-autoconnect/wordpress-wp-social-autoconnect-plugin-4-6-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-37975 State: PUBLISHED Published: 2023-07-27T14:25:32.576Z Last Updated: 2024-09-25T16:52:55.927Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: RadiusTheme Products: Variation Swatches for WooCommerce Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RadiusTheme Variation Swatches for WooCommerce plugin <= 2.3.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-product-variation-swatches/wordpress-variation-swatches-for-woocommerce-plugin-2-3-7-reflected-cross-site-scripting-xss-vulnerability?_s_i
swatches/wordpress-variation-swatches-for-woocommerce-plugin-2-3-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37976 State: PUBLISHED Published: 2023-07-27T14:21:51.648Z Last Updated: 2024-09-25T16:57:39.253Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Radio Forge Products: Radio Forge Muses Player with Skins Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Radio Forge Muses Player with Skins plugin <= 2.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/radio-forge/wordpress-radio-forge-muses-player-with-skins-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37977 State: PUBLISHED Published: 2023-07-27T14:16:11.339Z Last Updated: 2024-08-02T17:23:27.881Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPFunnels Team Products: Drag & Drop Sales Funnel Builder for WordPress – WPFunnels Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFunnels Team Drag & Drop Sales Funnel Builder for WordPress – WPFunnels plugin <= 2.7.16 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wpfunnels/wordpress-wpfunnels-plugin-2-7-16-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37978 State: PUBLISHED Published: 2023-11-13T02:37:47.340Z Last Updated: 2024-08-28T18:05:01.736Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Dimitar Ivanov Products: HTTP Headers Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Dimitar Ivanov HTTP Headers.This issue affects HTTP Headers: from n/a through 1.18.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/http-headers/wordpress-http-headers-plugin-1-18-11-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-37979 State: PUBLISHED Published: 2023-07-27T14:08:06.204Z Last Updated: 2025-02-13T17:01:41.751Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Saturday Drive Products: Ninja Forms Contact Form Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin <= 3.6.25 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ninja-forms/wordpress-ninja-forms-plugin-3-6-25-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve - https://patchstack.com/articles/multiple-high-
lugin-3-6-25-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve - https://patchstack.com/articles/multiple-high-severity-vulnerabilities-in-ninja-forms-plugin?_s_id=cve - http://packetstormsecurity.com/files/173983/WordPress-Ninja-Forms-3.6.25-Cross-Site-Scripting.html
CVE ID: CVE-2023-37980 State: PUBLISHED Published: 2023-07-27T13:59:23.095Z Last Updated: 2025-02-19T21:27:45.891Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Gravity Master Products: Custom Field For WP Job Manager Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gravity Master Custom Field For WP Job Manager plugin <= 1.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/custom-field-for-wp-job-manager/wordpress-custom-field-for-wp-job-manager-plugin-1-1-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-37981 State: PUBLISHED Published: 2023-07-27T13:50:13.640Z Last Updated: 2024-09-25T16:58:06.066Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPKube Products: Authors List Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPKube Authors List plugin <= 2.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/authors-list/wordpress-authors-list-plugin-2-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37982 State: PUBLISHED Published: 2023-12-19T20:07:31.264Z Last Updated: 2024-08-02T17:23:27.772Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: CRM Perks Products: Integration for Salesforce and Contact Form 7, WPForms, Elementor, Ninja Forms Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Salesforce and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com
a Forms: from n/a through 1.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cf7-salesforce/wordpress-integration-for-contact-form-7-and-salesforce-plugin-1-3-3-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-37983 State: PUBLISHED Published: 2023-08-10T12:52:23.465Z Last Updated: 2024-09-25T15:03:08.173Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Noël Jackson Products: Art Direction Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Noël Jackson Art Direction plugin <= 0.2.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/art-direction/wordpress-art-direction-plugin-0-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37984 State: PUBLISHED Published: 2024-12-13T14:23:51.989Z Last Updated: 2024-12-13T20:36:46.328Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ExpressTech Products: Quiz And Survey Master Problem Types: CWE-862 Description: Missing Authorization vulnerability in ExpressTech Quiz And Survey Master allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through 8.1.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quiz-master-next/vulnerability/wordpress-quiz-and-survey-master-plugin-8-1-10-broken-access-co
database/wordpress/plugin/quiz-master-next/vulnerability/wordpress-quiz-and-survey-master-plugin-8-1-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37985 State: PUBLISHED Published: 2023-07-17T15:04:41.524Z Last Updated: 2024-09-30T13:08:55.557Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: FiveStarPlugins Products: Restaurant Menu and Food Ordering by Five Star Plugins Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in FiveStarPlugins Restaurant Menu and Food Ordering plugin <= 2.4.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/food-and-drink-menu/wordpress-restaurant-menu-and-food-ordering-by-five-star-plugins-plugin-2-4-6-cross-site-request-forger
d-and-drink-menu/wordpress-restaurant-menu-and-food-ordering-by-five-star-plugins-plugin-2-4-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-37986 State: PUBLISHED Published: 2023-09-01T11:09:08.311Z Last Updated: 2024-09-24T19:07:06.403Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: miniOrange Products: YourMembership Single Sign On – YM SSO Login Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange YourMembership Single Sign On – YM SSO Login plugin <= 1.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/login-with-yourmembership/wordpress-yourmembership-single-sign-on-plugin-1-1-3-cross-site-scripting-xss-vulnerability?
y/login-with-yourmembership/wordpress-yourmembership-single-sign-on-plugin-1-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37987 State: PUBLISHED Published: 2024-12-13T14:23:52.527Z Last Updated: 2024-12-13T20:36:39.889Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: miniOrange Products: YourMembership Single Sign On Problem Types: CWE-862 Description: Missing Authorization vulnerability in miniOrange YourMembership Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YourMembership Single Sign On: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/login-with-yourmembership/vulnerability/wordpress-yourmembership-single-sign
://patchstack.com/database/wordpress/plugin/login-with-yourmembership/vulnerability/wordpress-yourmembership-single-sign-on-plugin-1-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37988 State: PUBLISHED Published: 2023-08-10T10:39:26.542Z Last Updated: 2025-02-13T17:01:42.617Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Creative Solutions Products: Contact Form Generator Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Creative Solutions Contact Form Generator plugin <= 2.5.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/contact-form-generator/wordpress-contact-form-generator-plugin-2-5-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve - http://packetstormsecu
-contact-form-generator-plugin-2-5-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve - http://packetstormsecurity.com/files/174896/WordPress-Contact-Form-Generator-2.5.5-Cross-Site-Scripting.html
CVE ID: CVE-2023-37989 State: PUBLISHED Published: 2024-12-13T14:23:53.059Z Last Updated: 2024-12-13T20:36:34.223Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Easyship Products: Easyship WooCommerce Shipping Rates Problem Types: CWE-862 Description: Missing Authorization vulnerability in Easyship Easyship WooCommerce Shipping Rates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easyship WooCommerce Shipping Rates: from n/a through 0.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easyship-woocommerce-shipping-rates/vulnerability/wordpress-ea
ences: - https://patchstack.com/database/wordpress/plugin/easyship-woocommerce-shipping-rates/vulnerability/wordpress-easyship-woocommerce-shipping-rates-plugin-0-8-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37990 State: PUBLISHED Published: 2023-10-03T10:19:07.949Z Last Updated: 2024-09-20T19:03:08.673Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Mike Products: Perelink Pro Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mike Perelink Pro plugin <= 2.1.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/perelink/wordpress-perelink-pro-plugin-2-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve