Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-24462 State: PUBLISHED Published: 2021-08-02T10:32:08 Last Updated: 2024-08-03T19:35:18.686Z Vendors: Ays Pro Products: Photo Gallery by Ays – Responsive Image Gallery Problem Types: CWE-89 Description: The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPress plugin before 4.4.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e24dac6d-de48-42c1-bdde-4a45fb331376
CVE ID: CVE-2021-24463 State: PUBLISHED Published: 2021-08-02T10:32:09 Last Updated: 2024-08-03T19:35:19.586Z Vendors: Ays Pro Products: Image Slider by Ays- Responsive Slider and Carousel Problem Types: CWE-89 Description: The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/994e6198-f0e9-4e30-989f-b5a3dfe95ded
CVE ID: CVE-2021-24464 State: PUBLISHED Published: 2021-08-02T10:32:10 Last Updated: 2024-08-03T19:35:19.608Z Vendors: Unknown Products: YouTube Embed, Playlist and Popup by WpDevArt Problem Types: CWE-79 Description: The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/531b3fac-48b9-4821-a3aa-4db073d43aae
CVE ID: CVE-2021-24465 State: PUBLISHED Published: 2021-10-04T11:20:15 Last Updated: 2024-08-03T19:35:20.058Z Vendors: Unknown Products: Meow Gallery (+ Gallery Block) Problem Types: CWE-89 Description: The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL statement, leading to an authenticated SQL Injection issue. The injection also allows the returned values to be manipulated in a way that could lead to data disclosure and arbitrary objects to be deserialized. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulne
ry objects to be deserialized. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/08dbe202-0136-4502-87e7-5e984dc27b16
CVE ID: CVE-2021-24466 State: PUBLISHED Published: 2021-08-16T10:48:21 Last Updated: 2024-08-03T19:35:19.451Z Vendors: Unknown Products: Verse-O-Matic Problem Types: CWE-79, CWE-352 Description: The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary verses and change the settings. Due to the lack of sanitisation in the settings and verses, this could also lead to Stored Cross-Site Scripting issues Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/37c7bdbb-f27f-47d3-9886-69d2e83d7581
CVE ID: CVE-2021-24467 State: PUBLISHED Published: 2021-08-09T10:04:05 Last Updated: 2024-08-03T19:35:19.195Z Vendors: Unknown Products: Leaflet Map Problem Types: CWE-352, CWE-79 Description: The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows attackers to make a logged in admin update the settings via a Cross-Site Request Forgery attack. This could lead to Cross-Site Scripting issues by either changing the URL of the JavaScript library being used, or using malicious attributions which will be executed in all page with an embed map from the plugin Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.c
page with an embed map from the plugin Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ac32d265-066e-49ec-9042-3145cd99e2e8
CVE ID: CVE-2021-24468 State: PUBLISHED Published: 2021-08-02T10:32:11 Last Updated: 2024-08-03T19:35:18.687Z Vendors: Unknown Products: Leaflet Map Problem Types: CWE-79 Description: The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow users with a role as low as Contributors to exploit stored XSS issues Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4b7c61da-952c-492a-8ce6-3c2126942a7c
CVE ID: CVE-2021-24470 State: PUBLISHED Published: 2021-08-02T10:32:12 Last Updated: 2024-08-03T19:35:19.372Z Vendors: Unknown Products: Yada Wiki Problem Types: CWE-79 Description: The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b01a85cc-0e45-4183-a916-19476354d5d4
CVE ID: CVE-2021-24471 State: PUBLISHED Published: 2021-08-16T10:48:22 Last Updated: 2024-08-03T19:35:19.727Z Vendors: Unknown Products: YouTube Embed Problem Types: CWE-79 Description: The YouTube Embed WordPress plugin before 5.2.2 does not validate, escape or sanitise some of its shortcode attributes, leading to Stored XSS issues by 1. using w, h, controls, cc_lang, color, language, start, stop, or style parameter of youtube shortcode, 2. by using style, class, rel, target, width, height, or alt parameter of youtube_thumb shortcode, or 3. by embedding a video whose title or description contains XSS payload (if API key is configured). Additional Analyst Notes: - CVE Program Container: Refe
or description contains XSS payload (if API key is configured). Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a8ccb09a-9f8c-448f-b2d0-9b01c3a748ac
CVE ID: CVE-2021-24472 State: PUBLISHED Published: 2021-08-02T10:32:13 Last Updated: 2024-08-03T19:35:19.857Z Vendors: QantumThemes Products: QT KenthaRadio, OnAir2 Problem Types: CWE-918 Description: The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will have the web server fetch and display the content from any URI, this would allow for SSRF (Server Side Request Forgery) and RFI (Remote File Inclusion) vulnerabilities on the website. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/17591ac5-88fa-4ca
ite. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/17591ac5-88fa-4cae-a61a-4dcf5dc0b72a
CVE ID: CVE-2021-24473 State: PUBLISHED Published: 2021-08-02T10:32:14 Last Updated: 2024-08-03T19:35:19.539Z Vendors: Unknown Products: User Profile Picture Problem Types: CWE-639 Description: The User Profile Picture WordPress plugin before 2.6.0 was affected by an IDOR issue, allowing users with the upload_image capability (by default author and above) to change and delete the profile pictures of other users (including those with higher roles). Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/79982ea9-4733-4b1e-a43e-17629c1136de
CVE ID: CVE-2021-24474 State: PUBLISHED Published: 2021-08-02T10:32:15 Last Updated: 2024-08-03T19:35:19.667Z Vendors: Unknown Products: Awesome Weather Widget Problem Types: CWE-79 Description: The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/49bc46a8-9d55-4fa1-8e0d-0556a6336fa0
CVE ID: CVE-2021-24476 State: PUBLISHED Published: 2021-08-02T10:32:16 Last Updated: 2024-08-03T19:35:19.539Z Vendors: Unknown Products: Steam Group Viewer Problem Types: CWE-79 Description: The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d1885641-9547-4dd5-84be-ba4a160ee1f5
CVE ID: CVE-2021-24477 State: PUBLISHED Published: 2021-08-02T10:32:17 Last Updated: 2024-08-03T19:35:20.095Z Vendors: Unknown Products: Migrate Users Problem Types: CWE-79, CWE-352 Description: The Migrate Users WordPress plugin through 1.0.1 does not sanitise or escape its Delimiter option before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its options, allowing the issue to be exploited via a CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7915070f-1d9b-43c3-b01e-fec35f633a4d
CVE ID: CVE-2021-24478 State: PUBLISHED Published: 2021-08-02T10:32:18 Last Updated: 2024-08-03T19:35:19.701Z Vendors: Unknown Products: Bookshelf Problem Types: CWE-79 Description: The Bookshelf WordPress plugin through 2.0.4 does not sanitise or escape its "Paypal email address" setting before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c73818e5-0734-46c9-9703-d211b4f58664
CVE ID: CVE-2021-24479 State: PUBLISHED Published: 2021-08-02T10:32:19 Last Updated: 2024-08-03T19:35:19.406Z Vendors: Unknown Products: DrawBlog Problem Types: CWE-79 Description: The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5fd2246a-fbd9-4f2a-8b0b-a64c3f91157c
CVE ID: CVE-2021-24480 State: PUBLISHED Published: 2021-08-02T10:32:20 Last Updated: 2024-08-03T19:35:19.561Z Vendors: Unknown Products: Event Geek Problem Types: CWE-79 Description: The Event Geek WordPress plugin through 2.5.2 does not sanitise or escape its "Use your own " setting before outputting it in the page, leading to an authenticated (admin+) stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/243d417a-6fb9-4e17-9e12-a8c605f9af8a
CVE ID: CVE-2021-24481 State: PUBLISHED Published: 2021-08-02T10:32:21 Last Updated: 2024-08-03T19:35:20.126Z Vendors: Unknown Products: Any Hostname Problem Types: CWE-79 Description: The Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its "Allowed hosts" setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS payloads in it Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a4c352de-9815-4dfe-ac51-65b5bfb37438
CVE ID: CVE-2021-24482 State: PUBLISHED Published: 2021-07-19T10:53:19 Last Updated: 2024-08-03T19:35:19.579Z Vendors: Unknown Products: Related Posts for WordPress Problem Types: CWE-79 Description: The Related Posts for WordPress plugin through 2.0.4 does not sanitise its heading_text and CSS settings, allowing high privilege users (admin) to set XSS payloads in them, leading to Stored Cross-Site Scripting issues. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2f86e418-22fd-4cb8-8de1-062b17cf20a7 - https://m0ze.ru/vulnerability/%5B2021-04-18%5D-%5BWordPress%5D-%5BCWE-79%5D-Related-Posts-for-WordPress-WordPress-Plugin-v2.0.4.txt
CVE ID: CVE-2021-24483 State: PUBLISHED Published: 2021-08-02T10:32:22 Last Updated: 2024-08-03T19:35:20.112Z Vendors: Ays Pro Products: Poll Maker Problem Types: CWE-89 Description: The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0dc931c6-1fce-4d70-a658-a4bbab10dab3
CVE ID: CVE-2021-24484 State: PUBLISHED Published: 2021-08-02T10:32:23 Last Updated: 2024-08-03T19:35:19.550Z Vendors: Ays Pro Products: Secure Copy Content Protection and Content Locking Problem Types: CWE-89 Description: The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9ce0153d-4a8b-4215-b6b6-15ca68c4f52c
CVE ID: CVE-2021-24485 State: PUBLISHED Published: 2021-10-25T13:20:35 Last Updated: 2024-08-03T19:35:19.796Z Vendors: Unknown Products: Special Text Boxes Problem Types: CWE-79 Description: The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4a6b278a-4c11-4624-86bf-754212979643
CVE ID: CVE-2021-24486 State: PUBLISHED Published: 2021-08-23T11:09:56 Last Updated: 2024-08-03T19:35:19.679Z Vendors: Unknown Products: Simple Social Media Share Buttons – Social Sharing for Everyone Problem Types: CWE-79 Description: The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin before 3.2.3 did not escape the align and like_button_size parameters of its SSB shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/324e6b7b-a2ac-4c08-8b97-0967513f7328
CVE ID: CVE-2021-24487 State: PUBLISHED Published: 2021-10-25T13:20:36 Last Updated: 2024-08-03T19:35:20.144Z Vendors: Unknown Products: St-Daily-Tip Problem Types: CWE-352, CWE-79 Description: The St-Daily-Tip WordPress plugin through 4.7 does not have any CSRF check in place when saving its 'Default Text to Display if no tips' setting, and was also lacking sanitisation as well as escaping before outputting it the page. This could allow attacker to make logged in administrators set a malicious payload in it, leading to a Stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/def352f8-1bbe-4263-ad1a-1486140269f4
CVE ID: CVE-2021-24488 State: PUBLISHED Published: 2021-08-02T10:32:25 Last Updated: 2024-08-03T19:35:19.741Z Vendors: Unknown Products: Post Grid Problem Types: CWE-79 Description: The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1fc0aace-ba85-4939-9007-d150960add4a
CVE ID: CVE-2021-24489 State: PUBLISHED Published: 2021-10-25T13:20:38 Last Updated: 2024-08-03T19:35:20.198Z Vendors: Unknown Products: Request a Quote Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/36e8efe8-b29f-4c9e-9dd5-3e317aa43e0c
CVE ID: CVE-2021-24490 State: PUBLISHED Published: 2021-09-13T17:56:16 Last Updated: 2024-08-03T19:35:19.462Z Vendors: Unknown Products: Email Artillery (MASS EMAIL) Problem Types: CWE-434, CWE-352 Description: The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well. However, due to the presence of a .htaccess, denying access to everything in the folder the file is uploaded to, the malicious uploaded file will only be accessible on Web Servers such as Ngin
g in the folder the file is uploaded to, the malicious uploaded file will only be accessible on Web Servers such as Nginx/IIS Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4ea0127e-afef-41bf-a005-c57432f9f58c
CVE ID: CVE-2021-24491 State: PUBLISHED Published: 2021-09-13T17:56:17 Last Updated: 2024-08-03T19:35:20.117Z Vendors: Unknown Products: Fileviewer Problem Types: CWE-352 Description: The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload and delete files. As a result, attackers could make a logged in administrator delete and upload arbitrary files via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ddd37827-f4c1-4806-8846-d06d9fbf23dd
CVE ID: CVE-2021-24492 State: PUBLISHED Published: 2021-08-02T10:32:26 Last Updated: 2024-08-03T19:35:19.759Z Vendors: Unknown Products: Handsome Testimonials & Reviews Problem Types: CWE-89 Description: The hndtst_action_instance_callback AJAX call of the Handsome Testimonials & Reviews WordPress plugin before 2.1.1, available to any authenticated users, does not sanitise, validate or escape the hndtst_previewShortcodeInstanceId POST parameter before using it in a SQL statement, leading to an SQL Injection issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/42760007-0e59-4d45-8d64-86bc0b8dacea - https://codevigilant.com/disclosure/2021/wp
s: - https://wpscan.com/vulnerability/42760007-0e59-4d45-8d64-86bc0b8dacea - https://codevigilant.com/disclosure/2021/wp-plugin-handsome-testimonials/
CVE ID: CVE-2021-24493 State: PUBLISHED Published: 2021-09-13T17:56:19 Last Updated: 2024-08-03T19:35:20.019Z Vendors: Unknown Products: Shopp Problem Types: CWE-434 Description: The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authenticated user does not have any security measure in place to prevent upload of malicious files, such as PHP, allowing unauthenticated users to upload arbitrary files and leading to RCE Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/dcc7be04-550b-427a-a14f-a2365d96a00e
CVE ID: CVE-2021-24494 State: PUBLISHED Published: 2021-07-06T11:03:35 Last Updated: 2024-08-03T19:35:20.203Z Vendors: Delicious Brains Products: WP Offload SES Lite Problem Types: CWE-79 Description: The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email's id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin. Additional Analyst Notes: - CVE Program Container: Refe
ext of a logged in admin viewing the Activity tab of the plugin. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8f14733e-84c3-4f7c-93f8-e27c74519160
CVE ID: CVE-2021-24495 State: PUBLISHED Published: 2021-08-09T10:04:06 Last Updated: 2024-08-03T19:35:19.687Z Vendors: Unknown Products: Marmoset Viewer Problem Types: CWE-79 Description: The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d11b79a3-f762-49ab-b7c8-3174624d7638 - https://johnjhacking.com/blog/cve-2021-24495-improper-neutralization-of-input-during-web-page-generation-on-id-parameter-in-wordpress-marmoset-viewer-plugin-versions-1.9.3-
r-neutralization-of-input-during-web-page-generation-on-id-parameter-in-wordpress-marmoset-viewer-plugin-versions-1.9.3-leads-to-reflected-cross-site-scripting/
CVE ID: CVE-2021-24496 State: PUBLISHED Published: 2021-08-02T10:32:27 Last Updated: 2024-08-03T19:35:20.311Z Vendors: Unknown Products: Community Events Problem Types: CWE-79 Description: The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5fd1cb7f-a036-4c5b-9557-0ffd4ef6b834
CVE ID: CVE-2021-24497 State: PUBLISHED Published: 2021-08-23T11:09:57 Last Updated: 2024-08-03T19:35:19.784Z Vendors: Unknown Products: Giveaway Problem Types: CWE-89 Description: The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a1cf08fe-943a-4f14-beb0-25216011b538
CVE ID: CVE-2021-24498 State: PUBLISHED Published: 2021-08-02T10:32:28 Last Updated: 2024-08-03T19:35:20.011Z Vendors: Unknown Products: Calendar Event Multi View Problem Types: CWE-79 Description: The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the page (via php/edit.php), leading to a reflected Cross-Site Scripting issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3c5a5187-42b3-4f88-9b0e-4fdfa1c39e86
CVE ID: CVE-2021-24499 State: PUBLISHED Published: 2021-08-09T00:00:00 Last Updated: 2024-08-03T19:35:19.868Z Vendors: Unknown Products: Workreap Problem Types: CWE-434 Description: The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to the uploads/workreap-temp directory. Uploaded files were neither sanitized nor validated, allowing an unauthenticated visitor to upload executable code such as php scripts. Additional Analyst Notes: - CVE Program Container: References: - https:
r to upload executable code such as php scripts. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/74611d5f-afba-42ae-bc19-777cdf2808cb - https://jetpack.com/2021/07/07/multiple-vulnerabilities-in-workreap-theme/ - http://packetstormsecurity.com/files/172876/WordPress-Workreap-2.2.2-Shell-Upload.html