Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hstack.com/database/vulnerability/realty/wordpress-realty-by-bestwebsoft-plugin-1-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51787 State: PUBLISHED Published: 2024-11-09T08:22:06.426Z Last Updated: 2024-11-09T15:23:05.402Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: QuomodoSoft Products: ElementsReady Addons for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows Stored XSS.This issue affects ElementsReady Addons for Elementor: from n/a through 6.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/element-ready-lite/wordpress-elementsready-addo
ulnrichment: References: - https://patchstack.com/database/vulnerability/element-ready-lite/wordpress-elementsready-addons-for-elementor-plugin-6-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51788 State: PUBLISHED Published: 2024-11-11T05:59:25.891Z Last Updated: 2024-11-12T17:21:49.932Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Joshua Wolfe Products: The Novel Design Store Directory Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through 4.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/noveldesign-store-directory/wordpress-the-novel-design-store-director
s: - https://patchstack.com/database/vulnerability/noveldesign-store-directory/wordpress-the-novel-design-store-directory-plugin-4-3-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-51789 State: PUBLISHED Published: 2024-11-11T05:57:21.745Z Last Updated: 2024-11-12T17:25:20.861Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: UjW0L Products: Image Classify Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in UjW0L Image Classify allows Upload a Web Shell to a Web Server.This issue affects Image Classify: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/image-classify/wordpress-image-classify-plugin-1-0-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-51790 State: PUBLISHED Published: 2024-11-11T05:55:50.263Z Last Updated: 2024-11-12T17:27:34.685Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Team HB WEBSOL Products: HB AUDIO GALLERY Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Team HB WEBSOL HB AUDIO GALLERY allows Upload a Web Shell to a Web Server.This issue affects HB AUDIO GALLERY: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/hb-audio-gallery/wordpress-hb-audio-gallery-plugin-3-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-51791 State: PUBLISHED Published: 2024-11-11T05:54:39.202Z Last Updated: 2024-11-12T18:26:32.447Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Made I.T. Products: Forms Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T. Forms allows Upload a Web Shell to a Web Server.This issue affects Forms: from n/a through 2.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/forms-by-made-it/wordpress-forms-plugin-2-8-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-51792 State: PUBLISHED Published: 2024-11-11T05:53:45.718Z Last Updated: 2024-11-12T16:14:35.238Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Dang Ngoc Binh Products: Audio Record Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/audio-record/wordpress-audio-record-plugin-1-0-arbitrary-file-upload-vulnerability-2?_s_id=cve
CVE ID: CVE-2024-51793 State: PUBLISHED Published: 2024-11-11T05:52:47.285Z Last Updated: 2024-11-12T16:32:02.547Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Webful Creations Products: Computer Repair Shop Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Webful Creations Computer Repair Shop allows Upload a Web Shell to a Web Server.This issue affects Computer Repair Shop: from n/a through 3.8115. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/computer-repair-shop/wordpress-repairbuddy-plugin-3-8115-arbitrary-file-upload-vulnerability?_s_
/database/vulnerability/computer-repair-shop/wordpress-repairbuddy-plugin-3-8115-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-51794 State: PUBLISHED Published: 2024-11-19T16:32:01.760Z Last Updated: 2024-11-20T14:26:12.741Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Storely Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Storely allows Stored XSS.This issue affects Storely: from n/a through 14.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/storely/wordpress-storely-theme-14-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51795 State: PUBLISHED Published: 2024-11-19T16:32:01.115Z Last Updated: 2024-11-20T14:16:09.683Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ByteLabX Products: Pdf Embedder Fay Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ByteLabX Pdf Embedder Fay allows DOM-Based XSS.This issue affects Pdf Embedder Fay: from n/a through 1.10.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pdf-embedder-fay/wordpress-pdf-embedder-fay-plugin-1-10-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51796 State: PUBLISHED Published: 2024-11-19T16:32:00.586Z Last Updated: 2024-11-19T20:57:56.885Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPManageNinja Products: Trendy Restaurant Menu Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Trendy Restaurant Menu allows DOM-Based XSS.This issue affects Trendy Restaurant Menu: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/trendy-restaurant-menu/wordpress-trendy-restaurant-menu-plugin-1-0-0-cross-site-scr
atchstack.com/database/vulnerability/trendy-restaurant-menu/wordpress-trendy-restaurant-menu-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51797 State: PUBLISHED Published: 2024-11-19T16:31:59.931Z Last Updated: 2024-11-20T14:16:56.164Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Md. Shiddikur Rahman Products: Ultimate Accordion Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md. Shiddikur Rahman Ultimate Accordion allows DOM-Based XSS.This issue affects Ultimate Accordion: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ultimate-accordion/wordpress-ultimate-accordion-plugin-1-0-cross-site-scripting-xss
atchstack.com/database/vulnerability/ultimate-accordion/wordpress-ultimate-accordion-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51798 State: PUBLISHED Published: 2024-11-19T16:31:59.407Z Last Updated: 2024-11-19T20:21:25.669Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Surbma Products: Surbma | Font Awesome Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Surbma Surbma | Font Awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/surbma-font-awesome/wordpress-surbma-font-awesome-plugin-3-0-cross-site-scripting-xss-vulnerability?_s
ase/vulnerability/surbma-font-awesome/wordpress-surbma-font-awesome-plugin-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51799 State: PUBLISHED Published: 2024-11-19T16:31:58.871Z Last Updated: 2024-11-20T14:17:22.494Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: VBog Products: Bg Patriarchia BU Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VBog Bg Patriarchia BU allows DOM-Based XSS.This issue affects Bg Patriarchia BU: from n/a through 2.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bg-patriarchia-bu/wordpress-bg-patriarchia-bu-plugin-2-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51800 State: PUBLISHED Published: 2025-04-04T13:47:14.367Z Last Updated: 2025-04-04T14:30:52.761Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Favethemes Products: Homey Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in Favethemes Homey allows Privilege Escalation.This issue affects Homey: from n/a through 2.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/homey/vulnerability/wordpress-homey-theme-2-4-1-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2024-51801 State: PUBLISHED Published: 2024-11-19T16:31:58.284Z Last Updated: 2024-11-20T14:17:49.889Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jake Brown Products: Brand my Footer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jake Brown Brand my Footer allows DOM-Based XSS.This issue affects Brand my Footer: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/brand-my-footer/wordpress-brand-my-footer-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51802 State: PUBLISHED Published: 2024-11-19T16:31:57.717Z Last Updated: 2024-11-20T14:18:14.565Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Bread & Butter IO Inc. Products: Bread & Butter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bread & Butter IO Inc. Bread & Butter allows DOM-Based XSS.This issue affects Bread & Butter: from n/a through 7.4.857. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bread-butter/wordpress-bread-butter-plugin-7-4-857-cross-site-scripting-xss-vulnerabili
stack.com/database/vulnerability/bread-butter/wordpress-bread-butter-plugin-7-4-857-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51803 State: PUBLISHED Published: 2024-11-19T16:31:57.197Z Last Updated: 2024-11-19T20:24:47.905Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Magnetic Creative Products: Inline Click To Tweet Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magnetic Creative Inline Click To Tweet allows DOM-Based XSS.This issue affects Inline Click To Tweet: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/inline-click-to-tweet/wordpress-inline-click-to-tweet-plugin-1-0-0-cross-site-
s://patchstack.com/database/vulnerability/inline-click-to-tweet/wordpress-inline-click-to-tweet-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51804 State: PUBLISHED Published: 2024-11-19T16:31:56.612Z Last Updated: 2024-11-20T14:20:00.443Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Bob Matsuoka Products: Moka Get Posts Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Matsuoka Moka Get Posts Shortcode allows DOM-Based XSS.This issue affects Moka Get Posts Shortcode: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/moka-get-posts/wordpress-moka-get-posts-shortcode-plugin-1-0-cross-site-scripting
/patchstack.com/database/vulnerability/moka-get-posts/wordpress-moka-get-posts-shortcode-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51805 State: PUBLISHED Published: 2024-11-19T16:31:56.049Z Last Updated: 2024-11-20T14:22:17.899Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Yonatan Reinberg Products: yPHPlista Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yonatan Reinberg yPHPlista allows Stored XSS.This issue affects yPHPlista: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yphplista/wordpress-yphplista-plugin-1-1-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51806 State: PUBLISHED Published: 2024-11-19T16:31:55.503Z Last Updated: 2024-11-20T14:23:17.169Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Shingo Suzumura at Fitness Website Formula Products: Awesome Fitness Testimonials Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shingo Suzumura at Fitness Website Formula Awesome Fitness Testimonials allows Stored XSS.This issue affects Awesome Fitness Testimonials: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/awesome-fi
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/awesome-fitness-testimonials/wordpress-awesome-fitness-testimonials-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51807 State: PUBLISHED Published: 2024-11-19T16:31:54.918Z Last Updated: 2024-11-20T14:25:07.464Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Black and White Digital Ltd Products: AgendaPress – Easily Publish Meeting Agendas and Programs on WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Black and White Digital Ltd AgendaPress – Easily Publish Meeting Agendas and Programs on WordPress allows Stored XSS.This issue affects AgendaPress – Easily Publish Meeting Agendas and Programs on WordPress: from n/a through 1.0.8. Additional Analyst Notes:
gendaPress – Easily Publish Meeting Agendas and Programs on WordPress: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/agendapress/wordpress-agendapress-plugin-1-0-8-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51808 State: PUBLISHED Published: 2024-11-19T16:31:54.325Z Last Updated: 2024-11-20T14:25:41.269Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Pat O’Brien Products: codeSnips Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pat O’Brien codeSnips allows Stored XSS.This issue affects codeSnips: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/codesnips/wordpress-codesnips-plugin-1-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51809 State: PUBLISHED Published: 2024-11-19T16:31:53.723Z Last Updated: 2024-11-20T15:00:45.900Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: George Rood Products: Keymaster Chord Notation Free Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in George Rood Keymaster Chord Notation Free allows Stored XSS.This issue affects Keymaster Chord Notation Free: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/keymaster-chord-notation-free/wordpress-keymaster-chord-notation-free
s: - https://patchstack.com/database/vulnerability/keymaster-chord-notation-free/wordpress-keymaster-chord-notation-free-plugin-1-0-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51810 State: PUBLISHED Published: 2024-11-19T16:31:53.179Z Last Updated: 2024-11-20T15:01:16.286Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: George Lewe Products: Lewe Bootstrap Visuals Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in George Lewe Lewe Bootstrap Visuals allows Stored XSS.This issue affects Lewe Bootstrap Visuals: from n/a through 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shortcode-bootstrap-visuals/wordpress-lewe-bootstrap-visuals-plugin-2-2-2-stored-cross-sit
ck.com/database/vulnerability/shortcode-bootstrap-visuals/wordpress-lewe-bootstrap-visuals-plugin-2-2-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51811 State: PUBLISHED Published: 2024-11-19T16:31:52.531Z Last Updated: 2024-11-20T15:01:43.208Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Hussam Hussien Products: Popup Image Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hussam Hussien Popup Image allows Stored XSS.This issue affects Popup Image: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/popup-image/wordpress-popup-image-plugin-1-0-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51812 State: PUBLISHED Published: 2024-11-19T16:31:52.009Z Last Updated: 2024-11-20T14:27:32.780Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Wasim Products: Pro Addons For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasim Pro Addons For Elementor allows Stored XSS.This issue affects Pro Addons For Elementor: from n/a through 1.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pro-addons-for-elementor/wordpress-pro-addons-for-elementor-plugin-1-5-0-cross-site-scripting-xs
/database/vulnerability/pro-addons-for-elementor/wordpress-pro-addons-for-elementor-plugin-1-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51813 State: PUBLISHED Published: 2024-11-19T16:31:51.515Z Last Updated: 2024-11-20T14:28:02.024Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Anantaddons, Anantsites Products: Anant Addons for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anantaddons, Anantsites Anant Addons for Elementor allows DOM-Based XSS.This issue affects Anant Addons for Elementor: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/anant-addons-for-elementor/wordpress-anant-addons-f
ichment: References: - https://patchstack.com/database/vulnerability/anant-addons-for-elementor/wordpress-anant-addons-for-elementor-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51814 State: PUBLISHED Published: 2024-11-19T16:31:50.995Z Last Updated: 2024-11-20T14:26:12.848Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: 野人 Products: 活动链接推广插件 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 野人 活动链接推广插件 allows DOM-Based XSS.This issue affects 活动链接推广插件: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yr-activity-link/wordpress-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51815 State: PUBLISHED Published: 2024-12-06T13:07:16.899Z Last Updated: 2024-12-06T17:06:34.806Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: WP Sharks Products: s2Member Pro Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in WP Sharks s2Member Pro allows Code Injection.This issue affects s2Member Pro: from n/a through 241114. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/s2member/vulnerability/wordpress-s2member-excellent-for-all-kinds-of-memberships-content-restriction-paywalls-member-access-subscriptions-plugi
wordpress-s2member-excellent-for-all-kinds-of-memberships-content-restriction-paywalls-member-access-subscriptions-plugin-241114-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2024-51816 State: PUBLISHED Published: 2024-11-19T16:31:50.480Z Last Updated: 2024-11-20T14:31:30.925Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Saul Morales Pacheco Products: Banner System Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saul Morales Pacheco Banner System allows Stored XSS.This issue affects Banner System: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/banner-system/wordpress-banner-system-plugin-1-0-0-stored-cross-site-scripting-xss-vulnerability?_s
tabase/vulnerability/banner-system/wordpress-banner-system-plugin-1-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51817 State: PUBLISHED Published: 2024-11-19T16:30:37.343Z Last Updated: 2024-11-20T14:36:19.331Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: CodeZel Products: Combo WP Rewrite Slugs Problem Types: CWE-862 Description: Missing Authorization vulnerability in CodeZel Combo WP Rewrite Slugs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Combo WP Rewrite Slugs: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/combo-wp-rewrite-slugs/wordpress-combo-wp-rewrite-slugs-plugin-1-0-settings-change-vulnerability?_s_id=cve