Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-51636 State: PUBLISHED Published: 2024-11-19T16:32:28.590Z Last Updated: 2024-12-02T13:36:03.954Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Z.com by GMO Products: GMO Social Connection Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Z.com by GMO GMO Social Connection allows Cross-Site Scripting (XSS). This issue affects GMO Social Connection: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gmo-social-connection/wordpress-plugin-name-gmo-social-connection-plugin-1-2-csrf-to-stored-cross-site-scripting-xss-vulnerabili
al-connection/wordpress-plugin-name-gmo-social-connection-plugin-1-2-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51637 State: PUBLISHED Published: 2024-11-19T16:32:28.060Z Last Updated: 2024-11-19T20:29:14.091Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Scott E. Royalty Products: Admin SMS Alert Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Scott E. Royalty Admin SMS Alert allows Stored XSS.This issue affects Admin SMS Alert: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/admin-sms-alert/wordpress-admin-sms-alert-plugin-1-1-0-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51638 State: PUBLISHED Published: 2024-11-19T16:32:27.507Z Last Updated: 2024-11-19T20:31:27.668Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sanjeev Mohindra Products: Awesome Shortcodes For Genesis Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sanjeev Mohindra Awesome Shortcodes For Genesis allows Stored XSS.This issue affects Awesome Shortcodes For Genesis: from n/a through .8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/awesome-shortcodes-for-genesis/wordpress-awesome-shortcodes-for-genesis-plugin-1-1-8-cross-site-scripting-xss-v
rability/awesome-shortcodes-for-genesis/wordpress-awesome-shortcodes-for-genesis-plugin-1-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51639 State: PUBLISHED Published: 2024-11-19T16:32:26.932Z Last Updated: 2024-11-19T20:37:50.893Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Hints Products: Naver Blog Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Hints Naver Blog allows Stored XSS.This issue affects Naver Blog: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/naver-blog-api/wordpress-naver-blog-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51640 State: PUBLISHED Published: 2024-11-19T16:32:26.405Z Last Updated: 2024-11-19T20:38:55.796Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Matt Rude Products: MDR Webmaster Tools Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Matt Rude MDR Webmaster Tools allows Stored XSS.This issue affects MDR Webmaster Tools: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mdr-webmaster-tools/wordpress-mdr-webmaster-tools-plugin-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51641 State: PUBLISHED Published: 2024-11-19T16:32:25.882Z Last Updated: 2024-11-19T20:39:28.559Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: jcmlmorav Products: Advanced PDF Generator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in jcmlmorav Advanced PDF Generator allows Stored XSS.This issue affects Advanced PDF Generator: from n/a through 0.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-pdf-generator/wordpress-advanced-pdf-generator-plugin-0-4-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51642 State: PUBLISHED Published: 2024-11-19T16:32:25.371Z Last Updated: 2024-11-19T20:42:08.731Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: webhostri Products: Seo Free Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in webhostri Seo Free allows Stored XSS.This issue affects Seo Free: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/seo-free/wordpress-seo-free-plugin-1-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51643 State: PUBLISHED Published: 2024-11-19T16:32:24.826Z Last Updated: 2024-11-19T20:45:03.826Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rajan Agaskar Products: Amazon Associate Filter Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rajan Agaskar Amazon Associate Filter allows Stored XSS.This issue affects Amazon Associate Filter: from n/a through 0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/amazon-associate-filter/wordpress-amazon-associate-filter-plugin-0-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51644 State: PUBLISHED Published: 2024-11-19T16:32:24.287Z Last Updated: 2024-11-19T20:50:52.161Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sam Wilson Products: Addressbook Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sam Wilson Addressbook allows Stored XSS.This issue affects Addressbook: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/addressbook/wordpress-addressbook-plugin-1-1-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51645 State: PUBLISHED Published: 2024-11-19T16:32:23.763Z Last Updated: 2024-11-19T20:52:14.622Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Themefuse Products: ThemeFuse Maintenance Mode Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Themefuse ThemeFuse Maintenance Mode allows Stored XSS.This issue affects ThemeFuse Maintenance Mode: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/themefuse-maintenance-mode/wordpress-themefuse-maintenance-mode-plugin-1-1-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51646 State: PUBLISHED Published: 2024-12-18T11:38:27.397Z Last Updated: 2025-08-27T21:33:04.739Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Saoshyant Products: Saoshyant Element Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saoshyant Saoshyant Element allows Reflected XSS.This issue affects Saoshyant Element: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/saoshyant-element/vulnerability/wordpress-saoshyant-element-plugin-1-2-reflected-cross-site-scripting-xss-v
press/plugin/saoshyant-element/vulnerability/wordpress-saoshyant-element-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51647 State: PUBLISHED Published: 2024-11-09T13:17:11.458Z Last Updated: 2024-11-09T15:19:57.428Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Chaser324 Products: Featured Posts Scroll Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Chaser324 Featured Posts Scroll allows Stored XSS.This issue affects Featured Posts Scroll: from n/a through 1.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/featured-posts-scroll/wordpress-featured-posts-scroll-plugin-1-25-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51648 State: PUBLISHED Published: 2024-11-19T16:32:23.233Z Last Updated: 2024-11-19T20:54:18.650Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Hands, Inc Products: e-shops Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Hands, Inc e-shops allows Reflected XSS.This issue affects e-shops: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/e-shops-cart2/wordpress-e-shops-plugin-1-0-3-csrf-to-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51649 State: PUBLISHED Published: 2024-11-19T16:32:22.704Z Last Updated: 2024-11-20T14:01:05.833Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Patrick Lumumba Products: Mobilize Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Patrick Lumumba Mobilize allows Stored XSS.This issue affects Mobilize: from n/a through 3.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mobilize/wordpress-mobilize-plugin-3-0-7-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51650 State: PUBLISHED Published: 2024-11-19T16:32:22.200Z Last Updated: 2024-11-20T14:26:12.537Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Scott @ MyDollarPlan.com Products: Random Featured Post Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Scott @ MyDollarPlan.com Random Featured Post allows Stored XSS.This issue affects Random Featured Post: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/random-featured-post-plugin/wordpress-random-featured-post-plugin-1-1-3-csrf-to-stored-cross-site-scripting-xss-vulnerabil
ndom-featured-post-plugin/wordpress-random-featured-post-plugin-1-1-3-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51651 State: PUBLISHED Published: 2025-01-07T10:49:30.530Z Last Updated: 2025-01-07T14:18:41.298Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: CubeWP Products: CubeWP Forms – All-in-One Form Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in CubeWP CubeWP Forms – All-in-One Form Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP Forms – All-in-One Form Builder: from n/a through 1.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cubewp-forms/vulnerability/wordpress-cubewp-forms-plugin-
References: - https://patchstack.com/database/wordpress/plugin/cubewp-forms/vulnerability/wordpress-cubewp-forms-plugin-1-1-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-51652 State: PUBLISHED Published: 2024-11-19T16:32:21.642Z Last Updated: 2024-11-20T14:08:48.880Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Prem Nawaz Khan, Victor Tsaran, Ron Feathers, and Marc Kocher Products: Skip To Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Prem Nawaz Khan, Victor Tsaran, Ron Feathers, and Marc Kocher Skip To allows Stored XSS.This issue affects Skip To: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/skip-to/wordpress-skip-to-plugin-2-0-0-csrf-to-stored-cross-site-scripting-xss-vulnerab
stack.com/database/vulnerability/skip-to/wordpress-skip-to-plugin-2-0-0-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51653 State: PUBLISHED Published: 2024-11-19T16:32:21.071Z Last Updated: 2024-11-20T14:09:22.896Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mario Spinaci Products: UPDATE NOTIFICATIONS Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mario Spinaci UPDATE NOTIFICATIONS allows Stored XSS.This issue affects UPDATE NOTIFICATIONS: from n/a through 0.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/update-notifications/wordpress-update-notifications-plugin-0-3-4-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51654 State: PUBLISHED Published: 2024-11-19T16:32:20.535Z Last Updated: 2024-11-20T14:10:05.830Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: APK.Support Products: APK Downloader Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in APK.Support APK Downloader allows Stored XSS.This issue affects APK Downloader: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/apk-downloader/wordpress-apk-downloader-plugin-1-0-0-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51655 State: PUBLISHED Published: 2024-11-19T16:32:19.964Z Last Updated: 2024-11-20T14:11:03.918Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Microkid Products: Custom Author URL Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Microkid Custom Author URL allows Stored XSS.This issue affects Custom Author URL: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/author-slug/wordpress-custom-author-url-plugin-2-0-1-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51656 State: PUBLISHED Published: 2024-11-19T16:32:19.400Z Last Updated: 2024-11-19T20:54:46.033Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: litefeel Products: Flash Show And Hide Box Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in litefeel Flash Show And Hide Box allows Stored XSS.This issue affects Flash Show And Hide Box: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/flash-show-and-hide-box/wordpress-flash-show-and-hide-box-plugin-1-6-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51657 State: PUBLISHED Published: 2024-11-19T16:32:18.854Z Last Updated: 2024-11-19T20:56:52.309Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Woopy Plugins Products: SmartLink Dynamic URLs Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Woopy Plugins SmartLink Dynamic URLs allows Stored XSS.This issue affects SmartLink Dynamic URLs: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/smartlink-dinamic-urls/wordpress-smartlink-dynamic-urls-plugin-1-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51658 State: PUBLISHED Published: 2024-11-14T21:37:25.068Z Last Updated: 2024-11-15T18:20:37.685Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Henrik Hoff Products: WP Course Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Henrik Hoff WP Course Manager allows Stored XSS.This issue affects WP Course Manager: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-course-manager/wordpress-wp-course-manager-plugin-1-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51659 State: PUBLISHED Published: 2024-11-14T21:35:40.787Z Last Updated: 2024-11-15T16:38:25.384Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: GeekRMX Products: Twitter @Anywhere Plus Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus allows Stored XSS.This issue affects Twitter @Anywhere Plus: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/twitter-anywhere-plus/wordpress-twitter-atanywhere-plus-plugin-2-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51660 State: PUBLISHED Published: 2024-11-19T16:30:38.408Z Last Updated: 2024-11-20T14:36:19.110Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Zakaria Binsaifullah Products: Easy Accordion Gutenberg Block Problem Types: CWE-862 Description: Missing Authorization vulnerability in Zakaria Binsaifullah Easy Accordion Gutenberg Block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Accordion Gutenberg Block: from n/a through 1.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-accordion-block/wordpress-easy-accordion-gutenberg-
nt: References: - https://patchstack.com/database/vulnerability/easy-accordion-block/wordpress-easy-accordion-gutenberg-block-plugin-1-2-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-51661 State: PUBLISHED Published: 2024-11-04T11:06:58.488Z Last Updated: 2024-11-04T15:20:24.795Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: David Lingren Products: Media Library Assistant Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media Library Assistant allows Command Injection.This issue affects Media Library Assistant: from n/a through 3.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/media-library-assistant/wordpress-media-library-assistant-plugin-3-19
s: - https://patchstack.com/database/vulnerability/media-library-assistant/wordpress-media-library-assistant-plugin-3-19-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2024-51662 State: PUBLISHED Published: 2024-11-09T13:12:56.131Z Last Updated: 2024-11-09T15:20:17.074Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Modernaweb Studio Products: Black Widgets For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/black-widgets/wordpress-black-widgets-for-elementor-plug
nt: References: - https://patchstack.com/database/vulnerability/black-widgets/wordpress-black-widgets-for-elementor-plugin-1-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51663 State: PUBLISHED Published: 2024-11-09T13:11:56.973Z Last Updated: 2024-11-09T15:20:38.289Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Bricksable Products: Bricksable for Bricks Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bricksable Bricksable for Bricks Builder allows Stored XSS.This issue affects Bricksable for Bricks Builder: from n/a through 1.6.59. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bricksable/wordpress-bricksable-for-bricks-builder-plugin-1-6-5
erences: - https://patchstack.com/database/vulnerability/bricksable/wordpress-bricksable-for-bricks-builder-plugin-1-6-59-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51664 State: PUBLISHED Published: 2024-11-09T13:09:44.696Z Last Updated: 2024-11-09T15:21:05.826Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Mark Kinchin Products: Beds24 Online Booking Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/beds24-online-booking/wordpress-beds24-online-booking-plugin-2-0-25-cross-site-scri
atchstack.com/database/vulnerability/beds24-online-booking/wordpress-beds24-online-booking-plugin-2-0-25-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51665 State: PUBLISHED Published: 2024-11-04T13:36:36.349Z Last Updated: 2024-11-04T17:24:34.828Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Noor alam Products: Magical Addons For Elementor Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Noor alam Magical Addons For Elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/magical-addons-for-elementor/wordpress-magical-addons-for-elementor-plugin-1-2-1-server-side-request-forgery
lnerability/magical-addons-for-elementor/wordpress-magical-addons-for-elementor-plugin-1-2-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-51666 State: PUBLISHED Published: 2025-05-15T18:27:23.440Z Last Updated: 2025-05-15T19:02:09.720Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Automattic Products: Tours Problem Types: CWE-862 Description: Missing Authorization vulnerability in Automattic Tours.This issue affects Tours: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tours/vulnerability/wordpress-tours-plugin-1-0-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-51667 State: PUBLISHED Published: 2024-12-31T13:52:05.823Z Last Updated: 2024-12-31T15:04:50.565Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: David de Boer Products: Paytium Problem Types: CWE-862 Description: Missing Authorization vulnerability in David de Boer Paytium.This issue affects Paytium: from n/a through 4.4.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/paytium/vulnerability/wordpress-paytium-plugin-4-4-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-51668 State: PUBLISHED Published: 2024-11-09T13:08:33.537Z Last Updated: 2024-11-09T15:21:27.056Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Mark Tilly Products: MyCurator Content Curation Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mark Tilly MyCurator Content Curation allows Stored XSS.This issue affects MyCurator Content Curation: from n/a through 3.78. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mycurator/wordpress-mycurator-content-curation-plugin-3-78-cross-site-scri
https://patchstack.com/database/vulnerability/mycurator/wordpress-mycurator-content-curation-plugin-3-78-cross-site-scripting-xss-vulnerability?_s_id=cve