Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-2252 State: PUBLISHED Published: 2024-01-16T15:55:41.055Z Last Updated: 2025-06-02T15:09:55.739Z Vendors: Unknown Products: Directorist Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9da6eede-10d0-4609-8b97-4a5d38fa8e69/
CVE ID: CVE-2023-2253 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-07T21:30:03.775Z Vendors: n/a Products: distribution/distribution Problem Types: CWE-475 Description: A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/sho
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2189886 - https://lists.debian.org/debian-lts-announce/2023/06/msg00035.html
CVE ID: CVE-2023-2254 State: PUBLISHED Published: 2023-08-16T11:03:29.573Z Last Updated: 2024-08-02T06:19:14.085Z Vendors: Unknown Products: Ko-fi Button Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unfiltered_html capability is disallowed (for example in multisite setup), and we consider it a low risk. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8886ec5f-8465-448f-adbd-68a3e84c5dec
CVE ID: CVE-2023-2255 State: PUBLISHED Published: 2023-05-25T00:00:00 Last Updated: 2024-08-02T06:19:14.082Z Vendors: The Document Foundation Products: LibreOffice Problem Types: CWE-264 Description: Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Found
This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/CVE-2023-2255 - https://www.debian.org/security/2023/dsa-5415 - https://lists.debian.org/debian-lts-announce/2023/08/msg00014.html - https://security.gentoo.org/glsa/202311-15
CVE ID: CVE-2023-2256 State: PUBLISHED Published: 2023-05-30T07:49:09.041Z Last Updated: 2025-01-10T17:38:12.370Z Vendors: Unknown Products: Product Addons & Fields for WooCommerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1187e041-3be2-4613-8d56-c2394fcc75fb
CVE ID: CVE-2023-2257 State: PUBLISHED Published: 2023-04-24T18:48:52.039Z Last Updated: 2025-02-04T16:02:43.531Z Vendors: Devolutions Products: Workspace Desktop Description: Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub Business space without being prompted to enter the password via an unimplemented "Force Login" security feature. This vulnerability occurs only if "Force Login" feature is enabled on the Hub Business instance and that an attacker has access to a locked Workspace desktop application configured with a Hub Business space. Additio
and that an attacker has access to a locked Workspace desktop application configured with a Hub Business space. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0011
CVE ID: CVE-2023-2258 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T17:11:55.816Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: alfio-event Products: alfio-event/alf.io Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/alfio-event/alf.io/commit/94e2923a317452e337393789c9f3192dfc1ddac2 - https://huntr.dev/bounties/31eaf0fe-4d91-4022-aa9b-802bc6eafb8f
CVE ID: CVE-2023-2259 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:49:08.353Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: alfio-event Products: alfio-event/alf.io Problem Types: CWE-1336 Description: Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e753bce0-ce82-463b-b344-2f67b39b60ff - https://github.com/alfio-event/alf.io/commit/94e2923a317452e337393789c9f3192dfc1ddac2
CVE ID: CVE-2023-2260 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:26:08.865Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: alfio-event Products: alfio-event/alf.io Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/649badc8-c935-4a84-8aa8-d3269ac54377 - https://github.com/alfio-event/alf.io/commit/c9a16ab93d42b2beb06d529b57890121f85be6ef
CVE ID: CVE-2023-2261 State: PUBLISHED Published: 2023-06-09T12:32:01.124Z Last Updated: 2024-12-20T23:32:27.826Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: wpwhitesecurity Products: WP Activity Log, WP Activity Log Premium Problem Types: CWE-862 Missing Authorization Description: The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handle_ajax_call function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers, with subscriber-level access or higher, to obtain a list of users with accounts on the site. This includes ids, usernames and emails. Additi
l access or higher, to obtain a list of users with accounts on the site. This includes ids, usernames and emails. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f51f0919-498e-4f86-a933-1b7f2c4a10a4?source=cve - https://plugins.trac.wordpress.org/browser/wp-security-audit-log/trunk/vendor/wpwhitesecurity/select2-wpwhitesecurity/load.php#L70 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2911239%40wp-security-audit-log%2Ftrunk&old=2897171%40wp-security-audit-log%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2023-2262 State: PUBLISHED Published: 2023-09-20T15:20:23.700Z Last Updated: 2024-09-25T15:44:30.367Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rockwell Automation, Rockwell Auotmation Products: 1756-EN2T Series A, B, C, 1756-EN2T Series D, 1756-EN2TK Series A, B, C, 1756-EN2TXT Series A, B, C, 1756-EN2TXT Series D, 1756-EN2TP Series A, 1756-EN2TPK Series A, 1756-EN2TPXT Series A, 1756-EN2TR Series A, B, 1756-EN2TR Series C, 1756-EN2TRK Series A, B, 1756-EN2TRK Series C, 1756-EN2TRXT Series A, B, 1756-EN2TRXT Series C, 1756-EN2F Series A, B, 1756-EN2F Series C, 1756-EN2FK Series A, B, 1756-EN2FK Series C, 1756-EN3TR Series A, 1756-EN3TR S
756-EN2F Series A, B, 1756-EN2F Series C, 1756-EN2FK Series A, B, 1756-EN2FK Series C, 1756-EN3TR Series A, 1756-EN3TR Series B, 1756-EN3TRK Series A, 1756-EN3TRK Series B Problem Types: CWE-121 Description: A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140786
CVE ID: CVE-2023-2263 State: PUBLISHED Published: 2023-07-18T15:01:24.115Z Last Updated: 2024-10-25T15:32:04.973Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Rockwell Automation Products: Kinetix 5700 DC Bus Power Supply Series A Problem Types: CWE-400 Description: The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhel
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140029
CVE ID: CVE-2023-2264 State: PUBLISHED Published: 2023-11-30T16:55:28.541Z Last Updated: 2025-06-03T02:31:35.503Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-411L Problem Types: CWE-20 Description: An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior. See product Instruction Manual Appendix A dated 20230830 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-not
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/
CVE ID: CVE-2023-2265 State: PUBLISHED Published: 2023-11-30T16:55:55.901Z Last Updated: 2024-08-02T06:19:14.136Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-411L Problem Types: CWE-1021 Description: An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more details. Additional Analyst Notes: - CVE Program Container: References: - https://selinc.com/support/security-noti
more details. Additional Analyst Notes: - CVE Program Container: References: - https://selinc.com/support/security-notifications/external-reports/
CVE ID: CVE-2023-2266 State: PUBLISHED Published: 2023-11-30T16:57:34.955Z Last Updated: 2024-08-02T06:19:14.119Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-411L Problem Types: CWE-79 Description: An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details. Additional Analyst Notes: - CVE Program Container: References: - https://selinc.com/support/security-notifi
ore details. Additional Analyst Notes: - CVE Program Container: References: - https://selinc.com/support/security-notifications/external-reports/
CVE ID: CVE-2023-2267 State: PUBLISHED Published: 2023-11-30T16:58:44.063Z Last Updated: 2024-08-02T06:19:14.317Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-411L Problem Types: CWE-20 Description: An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details. Additional Analyst Notes: - CVE Program Container: References: - https://selinc.com/support/security-notifications/external-reports/
CVE ID: CVE-2023-2268 State: PUBLISHED Published: 2023-07-15T18:37:04.977Z Last Updated: 2024-10-30T15:33:09.719Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Plane Products: Plane Problem Types: CWE-862 Description: Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/giardino/ - https://github.com/makeplane/plane
CVE ID: CVE-2023-2269 State: PUBLISHED Published: 2023-04-25T00:00:00 Last Updated: 2024-08-02T06:19:14.583Z Vendors: n/a Products: Kernel Problem Types: CWE-413 Description: A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/ - https://lists.fedoraproject.org/archives/list/packag
lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXHBLWYNSUBS77TYPOJTADPDXKBH2F4U/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBLBKW2WM5YSTS6OGEU5SYHXSJ5EWSTV/ - https://www.debian.org/security/2023/dsa-5448 - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://www.debian.org/security/2023/dsa-5480 - https://security.netapp.com/advisory/ntap-20230929-0004/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
CVE ID: CVE-2023-2270 State: PUBLISHED Published: 2023-06-15T04:29:55.133Z Last Updated: 2024-08-28T20:30:16.499Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Netskope Products: Netskope Client Problem Types: CWE-22 Description: The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execute commands. The connection handling function of Netskope client before R100 in this service utilized a relative path to download and unzip configuration files on the machine. This relative path provided a way for local users to write arbitrary files at a location which is accessible to only highe
is relative path provided a way for local users to write arbitrary files at a location which is accessible to only higher privileged users. This can be exploited by local users to execute code with NT\SYSTEM privileges on the end machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2023-001
CVE ID: CVE-2023-2271 State: PUBLISHED Published: 2023-08-16T11:03:22.861Z Last Updated: 2024-10-08T19:16:03.902Z Vendors: Unknown Products: Tiempo.com Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Tiempo.com WordPress plugin through 0.1.2 does not have CSRF check when deleting its shortcode, which could allow attackers to make logged in admins delete arbitrary shortcode via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/31512f33-c310-4b36-b665-19293097cc8b
CVE ID: CVE-2023-2272 State: PUBLISHED Published: 2023-08-16T11:03:24.487Z Last Updated: 2024-10-08T19:10:31.209Z Vendors: Unknown Products: Tiempo.com Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dba60216-2753-40b7-8f2b-6caeba684b2e
CVE ID: CVE-2023-2273 State: PUBLISHED Published: 2023-04-26T08:55:36.868Z Last Updated: 2025-01-31T16:13:24.347Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Rapid7 Products: Insight Agent Problem Types: CWE-22 Description: Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path. This can result in a Path Traversal vulnerability and allow an attacker to write arbitrary files. This issue is remediated in version 3.3.0 via safe guards that reject inputs that attempt to do path traversal. Additional An
issue is remediated in version 3.3.0 via safe guards that reject inputs that attempt to do path traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.rapid7.com/release-notes/insightagent/20230425/
CVE ID: CVE-2023-2274 State: REJECTED Published: N/A Last Updated: 2025-07-25T23:27:41.530Z Description: No description available.
CVE ID: CVE-2023-2275 State: PUBLISHED Published: 2023-06-09T05:33:28.997Z Last Updated: 2024-12-20T23:36:48.837Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: wclovers Products: WooCommerce Multivendor Marketplace – REST API Problem Types: CWE-862 Missing Authorization Description: The WooCommerce Multivendor Marketplace – REST API plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability check on the 'get_item', 'get_order_notes' and 'add_order_note' functions in versions up to, and including, 1.5.3. This makes it possible for authenticated attackers with subscriber privileges or above, to view the
nd including, 1.5.3. This makes it possible for authenticated attackers with subscriber privileges or above, to view the order details and order notes, and add order notes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b0520601-7e5c-412d-a8da-df1bf8ce28df?source=cve - https://plugins.trac.wordpress.org/browser/wcfm-marketplace-rest-api/tags/1.5.3/includes/api/class-api-order-controller.php#L151 - https://plugins.trac.wordpress.org/browser/wcfm-marketplace-rest-api/tags/1.5.3/includes/api/class-api-order-controller.php#L167 - https://plugins.trac.wordpress.org/browser/wcfm-marketplace-rest-ap
3/includes/api/class-api-order-controller.php#L167 - https://plugins.trac.wordpress.org/browser/wcfm-marketplace-rest-api/tags/1.5.3/includes/api/class-api-order-controller.php#L175 - https://plugins.trac.wordpress.org/changeset/2904331/
CVE ID: CVE-2023-2276 State: PUBLISHED Published: 2023-05-20T03:35:57.027Z Last Updated: 2025-01-13T16:48:09.887Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wclovers Products: WCFM Membership – WooCommerce Memberships for Multivendor Marketplace Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.10.7. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This
lugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for unauthenticated attackers to change user passwords and potentially take over administrator accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/42222c64-6492-4774-b5bc-8e62a1a328cf?source=cve - https://plugins.trac.wordpress.org/browser/wc-multivendor-membership/tags/2.10.7/controllers/wcfmvm-controller-memberships-registration.php#L124 - https://plugins.trac.wordpress.org/changeset/2907455/ - https://lana.codes/lanavdb/3a841453-d083-4f97-a7f1-b398
p#L124 - https://plugins.trac.wordpress.org/changeset/2907455/ - https://lana.codes/lanavdb/3a841453-d083-4f97-a7f1-b398c7304284/
CVE ID: CVE-2023-2277 State: PUBLISHED Published: 2023-06-13T01:48:06.807Z Last Updated: 2024-12-03T16:36:14.825Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: listingthemes Products: WP Directory Kit Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the 'insert' function. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious JavaScript via a forged request, granted they can trick a site administrator into
plugin's settings and inject malicious JavaScript via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/82c6ed2f-20e8-46d1-a460-16d32b7536cd?source=cve - https://plugins.trac.wordpress.org/browser/wpdirectorykit/tags/1.1.8/application/views/wdk_resultitem/resultitem_edit.php#L34 - https://plugins.trac.wordpress.org/changeset/2904689/wpdirectorykit/trunk/application/controllers/Wdk_resultitem.php
CVE ID: CVE-2023-2278 State: PUBLISHED Published: 2023-06-13T01:48:07.256Z Last Updated: 2024-12-03T16:34:11.403Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: listingthemes Products: WP Directory Kit Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the 'wdk_public_action' function. This allows unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls