Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-54294 State: PUBLISHED Published: 2024-12-13T14:25:07.881Z Last Updated: 2024-12-13T15:40:52.872Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: appgenixinfotech Products: Firebase OTP Authentication Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in appgenixinfotech Firebase OTP Authentication allows Authentication Bypass.This issue affects Firebase OTP Authentication: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/authentication-via-otp-using-firebase/vulnerability/wordpress-firebase-otp-a
://patchstack.com/database/wordpress/plugin/authentication-via-otp-using-firebase/vulnerability/wordpress-firebase-otp-authentication-plugin-1-0-1-account-takeover-vulnerability?_s_id=cve
CVE ID: CVE-2024-54295 State: PUBLISHED Published: 2024-12-13T14:25:08.448Z Last Updated: 2024-12-13T15:30:44.882Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: InspireUI Products: ListApp Mobile Manager Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in InspireUI ListApp Mobile Manager allows Authentication Bypass.This issue affects ListApp Mobile Manager: from n/a through 1.7.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/listapp-mobile-manager/vulnerability/wordpress-listapp-mobile-manager-plugin-1-7-7-account-takeover-vulne
rdpress/plugin/listapp-mobile-manager/vulnerability/wordpress-listapp-mobile-manager-plugin-1-7-7-account-takeover-vulnerability?_s_id=cve
CVE ID: CVE-2024-54296 State: PUBLISHED Published: 2024-12-13T14:25:09.018Z Last Updated: 2024-12-13T15:30:13.357Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Codexpert, Inc Products: CoSchool LMS Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Codexpert, Inc CoSchool LMS allows Authentication Bypass.This issue affects CoSchool LMS: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/coschool/vulnerability/wordpress-coschool-lms-plugin-1-2-account-takeover-vulnerability?_s_id=cve
CVE ID: CVE-2024-54297 State: PUBLISHED Published: 2024-12-13T14:25:09.774Z Last Updated: 2024-12-13T15:29:26.804Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: www.vbsso.com Products: vBSSO-lite Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in www.vbsso.com vBSSO-lite allows Authentication Bypass.This issue affects vBSSO-lite: from n/a through 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/vbsso-lite/vulnerability/wordpress-vbsso-lite-plugin-1-4-3-account-takeover-vulnerability?_s_id=cve
CVE ID: CVE-2024-54298 State: PUBLISHED Published: 2024-12-13T14:25:10.522Z Last Updated: 2024-12-13T15:28:09.042Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Bill Minozzi Products: Car Dealer Problem Types: CWE-862 Description: Missing Authorization vulnerability in Bill Minozzi Car Dealer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Dealer: from n/a through 4.46. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cardealer/vulnerability/wordpress-car-dealer-plugin-4-46-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-54299 State: PUBLISHED Published: 2024-12-13T14:25:11.171Z Last Updated: 2024-12-13T17:51:52.241Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Revi Products: Revi.io Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Revi Revi.io allows Reflected XSS.This issue affects Revi.io: from n/a through 5.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/revi-io-customer-and-product-reviews/vulnerability/wordpress-revi-io-plugin-5-7-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54300 State: PUBLISHED Published: 2024-12-13T14:25:11.899Z Last Updated: 2024-12-13T17:51:00.717Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Neuralabz LTD. Products: AutoWP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Neuralabz LTD. AutoWP allows Cross Site Request Forgery.This issue affects AutoWP: from n/a through 2.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/autowp-ai-content-writer-rewriter/vulnerability/wordpress-autowp-plugin-2-0-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54301 State: PUBLISHED Published: 2024-12-13T14:25:12.477Z Last Updated: 2024-12-13T17:50:10.405Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: FormFacade Products: FormFacade Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FormFacade FormFacade allows Reflected XSS.This issue affects FormFacade: from n/a through 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/formfacade/vulnerability/wordpress-formfacade-plugin-1-3-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54302 State: PUBLISHED Published: 2024-12-13T14:25:13.200Z Last Updated: 2024-12-13T17:46:21.205Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Vikas Ratudi Products: VForm Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VForm allows Reflected XSS.This issue affects VForm: from n/a through 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/v-form/vulnerability/wordpress-vform-plugin-3-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54303 State: PUBLISHED Published: 2024-12-13T14:25:13.807Z Last Updated: 2024-12-13T17:45:25.944Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ido Kobelkowsky / yalla ya! Products: Simple Payment Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky / yalla ya! Simple Payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-payment/vulnerability/wordpress-simple-payment-plugin-2-3-7-refleceted-
/patchstack.com/database/wordpress/plugin/simple-payment/vulnerability/wordpress-simple-payment-plugin-2-3-7-refleceted-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54304 State: PUBLISHED Published: 2024-12-13T14:25:14.459Z Last Updated: 2024-12-13T17:44:07.228Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Hive Support Products: Hive Support – WordPress Help Desk Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hive Support Hive Support – WordPress Help Desk allows SQL Injection.This issue affects Hive Support – WordPress Help Desk: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hive-support/vulnerability/wordpress-hive-suppor
ichment: References: - https://patchstack.com/database/wordpress/plugin/hive-support/vulnerability/wordpress-hive-support-plugin-1-1-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-54305 State: PUBLISHED Published: 2024-12-13T14:25:15.318Z Last Updated: 2024-12-13T17:41:22.223Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: woocs Products: J&T Express Malaysia Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woocs J&T Express Malaysia allows Reflected XSS.This issue affects J&T Express Malaysia: from n/a through 2.0.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jt-express/vulnerability/wordpress-j-t-express-malaysia-plugin-2-0-13-reflected-cross-site-scripting-xs
wordpress/plugin/jt-express/vulnerability/wordpress-j-t-express-malaysia-plugin-2-0-13-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54306 State: PUBLISHED Published: 2024-12-13T14:25:16.239Z Last Updated: 2024-12-13T17:39:31.463Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: KCT Products: AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in KCT AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot allows Cross Site Request Forgery.This issue affects AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot: from n/a through 1.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ai-seo-translator/vu
lyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ai-seo-translator/vulnerability/wordpress-aikct-engine-chatbot-chatgpt-gemini-gpt-4o-best-ai-chatbot-plugin-1-6-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54307 State: PUBLISHED Published: 2024-12-13T14:25:17.203Z Last Updated: 2024-12-13T17:38:34.520Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: AIpost Products: AIcomments Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AIpost AIcomments allows Cross Site Request Forgery.This issue affects AIcomments: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aicomments/vulnerability/wordpress-aicomments-plugin-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54308 State: PUBLISHED Published: 2024-12-13T14:25:18.361Z Last Updated: 2024-12-13T16:11:55.236Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: CurrencyRate.today Products: Cryptocurrency Price Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CurrencyRate.today Cryptocurrency Price Widget allows Stored XSS.This issue affects Cryptocurrency Price Widget: from n/a through 1.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cryptocurrency-price-widget/vulnerability/wordpress-crypto
eferences: - https://patchstack.com/database/wordpress/plugin/cryptocurrency-price-widget/vulnerability/wordpress-cryptocurrency-price-widget-plugin-1-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54309 State: PUBLISHED Published: 2024-12-13T14:25:19.256Z Last Updated: 2024-12-13T16:03:27.015Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: wpdebuglog Products: PostBox Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in wpdebuglog PostBox allows Retrieve Embedded Sensitive Data.This issue affects PostBox: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/postbox-email-logs/vulnerability/wordpress-postbox-plugin-1-0-4-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-54310 State: PUBLISHED Published: 2024-12-13T14:25:20.236Z Last Updated: 2024-12-13T17:37:23.278Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Aslam Khan Gouran Products: Gou Manage My Account Menu Problem Types: CWE-862 Description: Missing Authorization vulnerability in Aslam Khan Gouran Gou Manage My Account Menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Gou Manage My Account Menu: from n/a through 1.0.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gou-wc-account-tabs/vulnerability/wordpress-gou-manage-my-account-menu-plugin
//patchstack.com/database/wordpress/plugin/gou-wc-account-tabs/vulnerability/wordpress-gou-manage-my-account-menu-plugin-1-0-1-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-54311 State: PUBLISHED Published: 2024-12-13T14:25:20.874Z Last Updated: 2024-12-13T14:58:29.287Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: i.lychkov Products: Mark New Posts Problem Types: CWE-862 Description: Missing Authorization vulnerability in i.lychkov Mark New Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark New Posts: from n/a through 7.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mark-new-posts/vulnerability/wordpress-mark-new-posts-plugin-7-5-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-54312 State: PUBLISHED Published: 2024-12-13T14:25:21.484Z Last Updated: 2024-12-13T15:52:14.378Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ووکامرس فارسی Products: Persian Woocommerce SMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ووکامرس فارسی Persian Woocommerce SMS allows Reflected XSS.This issue affects Persian Woocommerce SMS: from n/a through 7.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/persian-woocommerce-sms/vulnerability/wordpress-fzonh-m-oo-mrs-persian-woocomme
patchstack.com/database/wordpress/plugin/persian-woocommerce-sms/vulnerability/wordpress-fzonh-m-oo-mrs-persian-woocommerce-sms-plugin-7-0-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54313 State: PUBLISHED Published: 2024-12-13T14:25:22.051Z Last Updated: 2024-12-13T15:27:43.973Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: FULL. Products: FULL Customer Problem Types: CWE-35 Description: Path Traversal vulnerability in FULL. FULL Customer allows Path Traversal.This issue affects FULL Customer: from n/a through 3.1.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/full-customer/vulnerability/wordpress-full-cliente-plugin-3-1-25-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2024-54314 State: PUBLISHED Published: 2024-12-13T14:25:22.653Z Last Updated: 2024-12-13T15:27:12.909Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NicheAddons Products: Primary Addon for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NicheAddons Primary Addon for Elementor allows Stored XSS.This issue affects Primary Addon for Elementor: from n/a through 1.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/primary-addon-for-elementor/vulnerability/wordpress-primary-addon-for-el
ttps://patchstack.com/database/wordpress/plugin/primary-addon-for-elementor/vulnerability/wordpress-primary-addon-for-elementor-plugin-1-6-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54315 State: PUBLISHED Published: 2024-12-13T14:25:23.298Z Last Updated: 2024-12-13T15:26:41.556Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NicheAddons Products: Events Addon for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NicheAddons Events Addon for Elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/events-addon-for-elementor/vulnerability/wordpress-events-addon-for-elem
ttps://patchstack.com/database/wordpress/plugin/events-addon-for-elementor/vulnerability/wordpress-events-addon-for-elementor-plugin-2-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54316 State: PUBLISHED Published: 2024-12-13T14:25:23.866Z Last Updated: 2024-12-13T16:16:34.878Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NicheAddons Products: Restaurant & Cafe Addon for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows DOM-Based XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/restaurant-cafe-addon-for-elementor/vul
ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/restaurant-cafe-addon-for-elementor/vulnerability/wordpress-restaurant-cafe-addon-for-elementor-plugin-1-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54317 State: PUBLISHED Published: 2024-12-13T14:25:24.510Z Last Updated: 2024-12-13T16:15:39.033Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Google Products: Web Stories Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Google Web Stories allows Stored XSS.This issue affects Web Stories: from n/a through 1.37.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/web-stories/vulnerability/wordpress-web-stories-plugin-1-37-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54318 State: PUBLISHED Published: 2024-12-13T14:25:25.249Z Last Updated: 2024-12-13T16:15:13.236Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: nicejob Products: NiceJob Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicejob NiceJob allows Stored XSS.This issue affects NiceJob: from n/a through 3.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nicejob/vulnerability/wordpress-nicejob-plugin-3-6-5-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2024-54319 State: PUBLISHED Published: 2024-12-13T14:25:25.874Z Last Updated: 2024-12-13T16:14:38.320Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MultiNet Interactive AB Products: Kundgenerator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiNet Interactive AB Kundgenerator allows Reflected XSS.This issue affects Kundgenerator: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/kundgenerator/vulnerability/wordpress-kundgenerator-plugin-1-0-6-reflected-cross-site-scr
.com/database/wordpress/plugin/kundgenerator/vulnerability/wordpress-kundgenerator-plugin-1-0-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54320 State: PUBLISHED Published: 2024-12-13T14:25:26.440Z Last Updated: 2024-12-13T16:13:54.036Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ICDSoft Hosting Products: ICDSoft Reseller Store Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ICDSoft Hosting ICDSoft Reseller Store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through 2.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/icdsoft-reseller-store/vulnerability/wordpress-icdsoft-reseller-store-plugin-2
/patchstack.com/database/wordpress/plugin/icdsoft-reseller-store/vulnerability/wordpress-icdsoft-reseller-store-plugin-2-4-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54321 State: PUBLISHED Published: 2024-12-13T14:25:27.010Z Last Updated: 2024-12-13T16:13:22.179Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Hive Support Products: Hive Support – WordPress Help Desk Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Hive Support Hive Support – WordPress Help Desk allows Cross Site Request Forgery.This issue affects Hive Support – WordPress Help Desk: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hive-support/vulnerability/wordpress-hive-support-plugin-1-1-2-cross-site-request-f
hstack.com/database/wordpress/plugin/hive-support/vulnerability/wordpress-hive-support-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54322 State: PUBLISHED Published: 2024-12-13T14:25:27.549Z Last Updated: 2024-12-13T14:57:41.508Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ederson Peka Products: Media Downloader Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ederson Peka Media Downloader allows Reflected XSS.This issue affects Media Downloader: from n/a through 0.4.7.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/media-downloader/vulnerability/wordpress-media-downloader-plugin-0-4-7-4-reflected-cross-site-script
se/wordpress/plugin/media-downloader/vulnerability/wordpress-media-downloader-plugin-0-4-7-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54323 State: PUBLISHED Published: 2024-12-13T14:25:28.107Z Last Updated: 2024-12-13T14:57:20.501Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: WPExpertsio Products: New User Approve Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPExpertsio New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through 2.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/new-user-approve/vulnerability/wordpress-new-user-approve-plugin-2-6-2-broken-access-control-vulnerability?_s_id=
plugin/new-user-approve/vulnerability/wordpress-new-user-approve-plugin-2-6-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-54324 State: PUBLISHED Published: 2024-12-13T14:25:28.652Z Last Updated: 2024-12-13T14:56:52.984Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Cloud Inn Products: SMSify Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloud Inn SMSify allows Reflected XSS.This issue affects SMSify: from n/a through 6.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smsify/vulnerability/wordpress-smsify-plugin-6-0-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve