Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-4915 State: PUBLISHED Published: 2023-09-13T02:54:13.256Z Last Updated: 2025-02-05T19:29:00.994Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: wmsedgar Products: WP User Control Problem Types: CWE-620 Unverified Password Change Description: The WP User Control plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.5.3. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (in the WP User Control Widget). The function changes the user's password after providing the email. The new password is only sent to the user's email
). The function changes the user's password after providing the email. The new password is only sent to the user's email, so the attacker does not have access to the new password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f4ca1736-7b99-49db-9367-586dbc14df41?source=cve - https://plugins.trac.wordpress.org/browser/wp-user-control/tags/1.5.3/inc/WPUserControlWidget.php#L893
CVE ID: CVE-2023-4916 State: PUBLISHED Published: 2023-09-13T02:54:11.877Z Last Updated: 2025-02-05T19:29:27.632Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: glboy Products: Login with phone number Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.6. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticated attackers to change user password via a forged request granted they can trick a site administrator into performing an action such as
change user password via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/71083db7-377b-47a1-ac8b-83d8974a2654?source=cve - https://plugins.trac.wordpress.org/browser/login-with-phone-number/trunk/login-with-phonenumber.php?rev=2965324#L2942 - https://plugins.trac.wordpress.org/browser/login-with-phone-number/trunk/login-with-phonenumber.php?rev=2967707#L2948
CVE ID: CVE-2023-4917 State: PUBLISHED Published: 2023-09-13T02:54:12.803Z Last Updated: 2025-02-05T19:29:08.894Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: vaultdweller Products: Leyka Problem Types: CWE-200 Information Exposure Description: The Leyka plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.30.3 via the 'leyka_ajax_get_env_and_options' function. This can allow authenticated attackers with subscriber-level permissions or above to extract sensitive data including Sberbank API key and password, PayPal Client Secret, and more keys and passwords. Additional Analyst Notes: - CVE Program Contain
API key and password, PayPal Client Secret, and more keys and passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dcd24b90-94ff-4625-8e3e-9c90e38683f9?source=cve - https://plugins.trac.wordpress.org/browser/leyka/tags/3.30.3/inc/leyka-ajax.php#L393
CVE ID: CVE-2023-4918 State: PUBLISHED Published: 2023-09-12T19:24:59.955Z Last Updated: 2024-09-25T19:53:21.639Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a, Red Hat Products: keycloak, Red Hat Single Sign-On 7 Problem Types: CWE-256 Description: A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself through registration flow, the "password" and "password-confirm" field from the form will occur as regular user attributes. All users and clients with proper rights and roles are able to read users attributes, allowing a malicious user with minimal access to retrieve the users passwords in clear
e able to read users attributes, allowing a malicious user with minimal access to retrieve the users passwords in clear text, jeopardizing their environment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-4918 - https://bugzilla.redhat.com/show_bug.cgi?id=2238588 - https://github.com/keycloak/keycloak/security/advisories/GHSA-5q66-v53q-pm35
CVE ID: CVE-2023-4919 State: PUBLISHED Published: 2023-10-20T06:35:17.176Z Last Updated: 2025-02-05T19:09:52.664Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: webvitaly Products: iframe Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `iframe` shortcode in versions up to, and including, 4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permission and above, to inject arbitrary web scripts in pages that will execute
cated attackers, with contributor-level permission and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This was partially patched in version 4.6 and fully patched in version 4.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3706deed-55f2-4dfb-bfed-7a14872cd15a?source=cve - https://plugins.trac.wordpress.org/browser/iframe/tags/4.5/iframe.php#L28 - https://plugins.trac.wordpress.org/browser/iframe/tags/4.5/iframe.php#L40 - https://plugins.trac.wordpress.org/changeset/2970787/iframe#file4
CVE ID: CVE-2023-4920 State: PUBLISHED Published: 2023-10-20T06:35:23.470Z Last Updated: 2025-02-05T19:07:23.525Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: realmag777 Products: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobe_save_options function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request granted they can trick
s it possible for unauthenticated attackers to modify the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additionally, input sanitization and escaping is insufficient resulting in the possibility of malicious script injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/58d25eeb-b12c-4850-8308-eaa30982b5a8?source=cve - https://plugins.trac.wordpress.org/browser/woo-bulk-editor/trunk/index.php#L805 - https://plugins.trac.wordpress.org/changeset/2970262/woo-bulk-editor/trunk/index.php?contextall=1&old=2
index.php#L805 - https://plugins.trac.wordpress.org/changeset/2970262/woo-bulk-editor/trunk/index.php?contextall=1&old=2968292&old_path=%2Fwoo-bulk-editor%2Ftrunk%2Findex.php
CVE ID: CVE-2023-4921 State: PUBLISHED Published: 2023-09-12T19:45:19.367Z Last Updated: 2025-02-13T17:18:36.002Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue(). We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8. Additional Analyst
ecking in agg_dequeue(). We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8fc134fee27f2263988ae38920bc03da416b03d8 - https://kernel.dance/8fc134fee27f2263988ae38920bc03da416b03d8 - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-4922 State: PUBLISHED Published: 2023-11-27T16:22:03.604Z Last Updated: 2024-08-02T07:44:52.210Z Vendors: Unknown Products: wpb-show-core Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/968d87c0-af60-45ea-b34e-8551313cc8df
CVE ID: CVE-2023-4923 State: PUBLISHED Published: 2023-10-20T07:29:22.008Z Last Updated: 2025-02-05T19:06:26.874Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: realmag777 Products: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobe_bulkoperations_delete function. This makes it possible for unauthenticated attackers to delete products via a forged request granted they can trick a si
This makes it possible for unauthenticated attackers to delete products via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7a4db03d-ec40-4145-aa95-fee78bda5205?source=cve - https://plugins.trac.wordpress.org/browser/woo-bulk-editor/trunk/ext/bulkoperations/bulkoperations.php#L344 - https://plugins.trac.wordpress.org/changeset/2970262/woo-bulk-editor/trunk/ext/bulkoperations/bulkoperations.php?contextall=1&old=2844667&old_path=%2Fwoo-bulk-editor%2Ftrunk%2Fext%2Fbulkoperations%2Fbu
lkoperations/bulkoperations.php?contextall=1&old=2844667&old_path=%2Fwoo-bulk-editor%2Ftrunk%2Fext%2Fbulkoperations%2Fbulkoperations.php
CVE ID: CVE-2023-4924 State: PUBLISHED Published: 2023-10-20T07:29:22.473Z Last Updated: 2025-02-05T19:06:20.203Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: realmag777 Products: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to missing capability checks on the woobe_bulkoperations_delete function. This makes it possible for authenticated attackers, with subscriber access or higher, to delete products. Additional Analyst Notes: - CVE
sible for authenticated attackers, with subscriber access or higher, to delete products. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7dfd0246-4265-4dde-8a1e-18b7042eae74?source=cve - https://plugins.trac.wordpress.org/browser/woo-bulk-editor/trunk/ext/bulkoperations/bulkoperations.php#L344 - https://plugins.trac.wordpress.org/changeset/2970262/woo-bulk-editor/trunk/ext/bulkoperations/bulkoperations.php?contextall=1&old=2844667&old_path=%2Fwoo-bulk-editor%2Ftrunk%2Fext%2Fbulkoperations%2Fbulkoperations.php
CVE ID: CVE-2023-4925 State: PUBLISHED Published: 2024-01-15T15:10:43.806Z Last Updated: 2025-06-11T16:44:25.619Z Vendors: Unknown Products: Easy Forms for Mailchimp Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0b094cba-9288-4c9c-87a9-bdce286fe8b6
CVE ID: CVE-2023-4926 State: PUBLISHED Published: 2023-10-20T07:29:26.995Z Last Updated: 2025-02-05T19:05:24.286Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: realmag777 Products: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobe_bulk_delete_products function. This makes it possible for unauthenticated attackers to delete products via a forged request granted they can trick a sit
his makes it possible for unauthenticated attackers to delete products via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ab633506-63a1-4be1-b402-c7f0bcc4ea7a?source=cve - https://plugins.trac.wordpress.org/browser/woo-bulk-editor/trunk/ext/bulk/bulk.php#L159 - https://plugins.trac.wordpress.org/changeset/2970262/woo-bulk-editor/trunk/ext/bulk/bulk.php?contextall=1&old=2844667&old_path=%2Fwoo-bulk-editor%2Ftrunk%2Fext%2Fbulk%2Fbulk.php
CVE ID: CVE-2023-4927 State: REJECTED Published: N/A Last Updated: 2025-02-08T21:32:51.106Z Description: No description available.
CVE ID: CVE-2023-4928 State: PUBLISHED Published: 2023-09-13T00:00:20.370Z Last Updated: 2024-09-25T17:12:50.022Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: instantsoft Products: instantsoft/icms2 Problem Types: CWE-89 Description: SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/cb72cc17-5a0d-4392-9a5f-a13aa773de9e - https://github.com/instantsoft/icms2/commit/3a6b148fa2c943ee7647e0cd14bf68e026b15548
CVE ID: CVE-2023-4929 State: PUBLISHED Published: 2023-10-03T13:54:49.293Z Last Updated: 2024-09-23T13:29:04.471Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Moxa Products: NPort 5000AI-M12 Series, NPort 5100 Series, NPort 5100A Series , NPort 5200 Series, NPort 5200A Series, NPort 5400 Series, NPort 5600 Series, NPort 5600-DT Series, NPort IA5000 Series, NPort IA5000A Series, NPort IA5000A-I/O Series, NPort IAW5000A-I/O Series, NPort P5150A Series Problem Types: CWE-354 Description: All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks o
fected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability
CVE ID: CVE-2023-4930 State: PUBLISHED Published: 2023-11-06T20:41:02.644Z Last Updated: 2025-02-26T21:21:14.187Z Vendors: Unknown Products: Front End PM Problem Types: CWE-200 Information Exposure Description: The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores attachments to private messages, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c73b3276-e6f1-4f22-a888-025e5d0504f2
CVE ID: CVE-2023-4931 State: PUBLISHED Published: 2023-11-27T14:12:40.130Z Last Updated: 2024-08-02T07:44:53.183Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: Plesk Products: Plesk Installer Problem Types: CWE-427 Description: Uncontrolled search path element vulnerability in Plesk Installer affects version 3.27.0.0. A local attacker could execute arbitrary code by injecting DLL files into the same folder where the application is installed, resulting in DLL hijacking in edputil.dll, samlib.dll, urlmon.dll, sspicli.dll, propsys.dll and profapi.dll files. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/n
ofapi.dll files. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/uncontrolled-search-path-element-vulnerability-plesk - https://support.plesk.com/hc/en-us/articles/17426121182103
CVE ID: CVE-2023-4932 State: PUBLISHED Published: 2023-12-12T09:48:23.274Z Last Updated: 2024-08-02T07:44:53.339Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L) Vendors: SAS Institute Products: SAS Integration Technologies Problem Types: CWE-79 Description: SAS application is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in the `_program` parameter of the the `/SASStoredProcess/do` endpoint allows arbitrary JavaScript to be executed when specially crafted URL is opened by an authenticated user. The attack is possible from a low-privileged user. Only versions 9.4_M7 and 9.4_M8 were tested and confirmed to be vulnerable, status of other
from a low-privileged user. Only versions 9.4_M7 and 9.4_M8 were tested and confirmed to be vulnerable, status of others is unknown. For above mentioned versions hot fixes were published. Additional Analyst Notes: - CVE Program Container: References: - https://support.sas.com/kb/70/265.html - https://cert.pl/en/posts/2023/12/CVE-2023-4932/ - https://cert.pl/posts/2023/12/CVE-2023-4932/
CVE ID: CVE-2023-4933 State: PUBLISHED Published: 2023-10-16T19:39:22.761Z Last Updated: 2024-08-02T07:44:52.224Z Vendors: Unknown Products: WP Job Openings Problem Types: CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory Description: The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the directories where it stores attachments to job applications, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/882f6c36-44c6-4273-81cd-2eaaf5e81fa7
CVE ID: CVE-2023-4934 State: PUBLISHED Published: 2023-09-27T07:35:04.743Z Last Updated: 2024-09-23T20:15:13.569Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Usta Products: AYBS Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Usta AYBS allows Authentication Abuse, Authentication Bypass.This issue affects AYBS: before 1.0.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0558
CVE ID: CVE-2023-4935 State: PUBLISHED Published: 2023-10-20T06:35:28.217Z Last Updated: 2025-02-05T19:07:05.756Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: realmag777 Products: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the create_profile function. This makes it possible for unauthenticated attackers to create profiles via a forged request granted they can trick a site administra
possible for unauthenticated attackers to create profiles via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/639f3941-7783-4500-aca4-5e8155db6460?source=cve - https://plugins.trac.wordpress.org/browser/woo-bulk-editor/trunk/classes/models/profiles.php#L191 - https://plugins.trac.wordpress.org/changeset/2970262/woo-bulk-editor/trunk/classes/models/profiles.php?contextall=1&old=2844667&old_path=%2Fwoo-bulk-editor%2Ftrunk%2Fclasses%2Fmodels%2Fprofiles.php
CVE ID: CVE-2023-4936 State: PUBLISHED Published: 2023-10-11T17:00:07.311Z Last Updated: 2024-09-18T18:42:24.025Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: Synaptics Products: DisplayLink USB Graphics Software for Windows Problem Types: CWE-269 Description: It is possible to sideload a compromised DLL during the installation at elevated privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synaptics.com/ - https://www.synaptics.com/products/displaylink-graphics/downloads/windows - https://www.synaptics.com/sites/default/files/nr-154525-tc-synaptics_displaylink_windows_driver_security_brief_-_oc
ws - https://www.synaptics.com/sites/default/files/nr-154525-tc-synaptics_displaylink_windows_driver_security_brief_-_oct2023.pdf
CVE ID: CVE-2023-4937 State: PUBLISHED Published: 2023-10-20T06:35:19.176Z Last Updated: 2025-02-05T19:07:55.041Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: realmag777 Products: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobe_bulkoperations_apply_default_combination function. This makes it possible for unauthenticated attackers to manipulate products via a forged request gran
bination function. This makes it possible for unauthenticated attackers to manipulate products via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/40bf51bf-efb2-4504-815b-4681d1078f77?source=cve - https://plugins.trac.wordpress.org/browser/woo-bulk-editor/trunk/ext/bulkoperations/bulkoperations.php#L286 - https://plugins.trac.wordpress.org/changeset/2970262/woo-bulk-editor/trunk/ext/bulkoperations/bulkoperations.php?contextall=1&old=2844667&old_path=%2Fwoo-bulk-editor%2Ftrunk%2Fex
ulk-editor/trunk/ext/bulkoperations/bulkoperations.php?contextall=1&old=2844667&old_path=%2Fwoo-bulk-editor%2Ftrunk%2Fext%2Fbulkoperations%2Fbulkoperations.php
CVE ID: CVE-2023-4938 State: PUBLISHED Published: 2023-10-18T07:31:17.079Z Last Updated: 2025-02-05T19:13:33.764Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: realmag777 Products: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Problem Types: CWE-862 Missing Authorization Description: The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to a missing capability check on the woobe_bulkoperations_apply_default_combination function. This makes it possible for authenticated attackers (subscriber or higher) to manipulate products. Additional Analyst Notes: - CVE