Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10801 State: PUBLISHED Published: 2024-11-09T07:35:05.848Z Last Updated: 2024-11-12T18:35:06.961Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vanquish Products: WordPress User Extra Fields Problem Types: CWE-434 Description: The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_manage_file_chunk_upload() function in all versions up to, and including, 16.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. User registration must be enabled for thi
s on the affected site's server which may make remote code execution possible. User registration must be enabled for this to be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6a60e2c3-4597-4b21-ad20-6a00e483fcf1?source=cve - https://codecanyon.net/item/user-extra-fields/12949844
CVE ID: CVE-2024-10802 State: PUBLISHED Published: 2024-11-13T03:20:05.820Z Last Updated: 2024-11-13T18:40:41.161Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: hashthemes Products: Hash Elements Problem Types: CWE-862 Description: The Hash Elements plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hash_elements_get_posts_title_by_id() function in all versions up to, and including, 1.4.7. This makes it possible for unauthenticated attackers to retrieve draft post titles that should not be accessible to unauthenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www
not be accessible to unauthenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/010590bc-98fb-4afe-9c5e-80ad4c50a34e?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3186151%40hash-elements&new=3186151%40hash-elements&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10803 State: PUBLISHED Published: 2024-11-23T07:38:04.688Z Last Updated: 2024-11-26T16:31:04.149Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: FWDesign Products: MP3 Sticky Player Problem Types: CWE-22 Description: The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Please note the vendor released the patched version as the same version as the affected version. Additional Analyst Notes: -
e note the vendor released the patched version as the same version as the affected version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3bcd4675-e930-44d9-8278-c4c9e877656a?source=cve - https://codecanyon.net/item/mp3-sticky-player-wordpress-plugin/7930491
CVE ID: CVE-2024-10804 State: PUBLISHED Published: 2025-03-07T08:21:24.771Z Last Updated: 2025-03-07T17:22:39.144Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: FWDesign Products: Ultimate Video Player WordPress & WooCommerce Plugin Problem Types: CWE-22 Description: The Ultimate Video Player WordPress & WooCommerce Plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 10.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ary files on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5394abc6-836f-4b22-a7b6-79d092b93a7e?source=cve - https://codecanyon.net/item/ultimate-video-player-wordpress-plugin/8374433
CVE ID: CVE-2024-10805 State: PUBLISHED Published: 2024-11-04T22:31:04.399Z Last Updated: 2024-11-05T15:04:02.171Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: University Event Management System Problem Types: CWE-89, CWE-74, CWE-707 Description: A vulnerability was found in code-projects University Event Management System 1.0. It has been classified as critical. This affects an unknown part of the file doedit.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions a confusing product name to be
as been disclosed to the public and may be used. The initial researcher advisory mentions a confusing product name to be affected. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283029 - https://vuldb.com/?ctiid.283029 - https://vuldb.com/?submit.436546 - https://github.com/yhcyhc981/cve/blob/main/sql16.md - https://code-projects.org/
CVE ID: CVE-2024-10806 State: PUBLISHED Published: 2024-11-05T00:31:05.507Z Last Updated: 2024-11-05T16:21:25.380Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Hospital Management System Problem Types: CWE-79, CWE-74, CWE-707 Description: A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283030 - https://vuldb.com/?ctiid.283030 - https://vuldb.com/?submit.436547 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Hospital%20Management%20System%20(HMS)%204.0%20-%20(betweendates-detailsreports.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10807 State: PUBLISHED Published: 2024-11-05T01:00:08.591Z Last Updated: 2024-11-05T16:14:40.738Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Hospital Management System Problem Types: CWE-79, CWE-74, CWE-707 Description: A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283031 - https://vuldb.com/?ctiid.283031 - https://vuldb.com/?submit.436551 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Hospital%20Management%20System%20(HMS)%204.0%20-%20(search.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10808 State: PUBLISHED Published: 2024-11-05T01:00:10.548Z Last Updated: 2024-11-05T16:05:25.761Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: E-Health Care System Problem Types: CWE-89, CWE-74, CWE-707 Description: A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/req_detail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.28303
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283036 - https://vuldb.com/?ctiid.283036 - https://vuldb.com/?submit.436566 - https://github.com/koevas257/cve/blob/main/sql.md - https://code-projects.org/
CVE ID: CVE-2024-10809 State: PUBLISHED Published: 2024-11-05T01:31:04.769Z Last Updated: 2024-11-05T16:04:56.831Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: E-Health Care System Problem Types: CWE-89, CWE-74, CWE-707 Description: A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "name" to be affected. But i
to the public and may be used. The initial researcher advisory only mentions the parameter "name" to be affected. But it must be assumed that the parameter "message" is affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283037 - https://vuldb.com/?ctiid.283037 - https://vuldb.com/?submit.436759 - https://github.com/Xueweian/cve/blob/main/sql18.md - https://code-projects.org/
CVE ID: CVE-2024-10810 State: PUBLISHED Published: 2024-11-05T02:00:06.606Z Last Updated: 2024-11-05T16:04:15.348Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: E-Health Care System Problem Types: CWE-89, CWE-74, CWE-707 Description: A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/app_request.php. The manipulation of the argument app_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283038 - https://vuldb.com/?ctiid.283038 - https://vuldb.com/?submit.437018 - https://github.com/wsy149433/cve/blob/main/sql19.md - https://code-projects.org/
CVE ID: CVE-2024-10811 State: PUBLISHED Published: 2025-01-14T16:59:32.982Z Last Updated: 2025-03-08T04:55:14.273Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-36 Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
CVE ID: CVE-2024-10812 State: PUBLISHED Published: 2025-03-20T10:09:24.562Z Last Updated: 2025-03-20T18:55:20.454Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: binary-husky Products: binary-husky/gpt_academic Problem Types: CWE-601 Description: An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirected to a URL specified by user-controlled input in the 'file' parameter without proper validation or sanitization. This can be exploited by attackers to conduct phishing attacks, distribute malware, and steal user credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
attacks, distribute malware, and steal user credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/51408ebd-e0be-489d-8088-f210087dbd6a
CVE ID: CVE-2024-10813 State: PUBLISHED Published: 2024-11-23T03:25:51.400Z Last Updated: 2024-11-26T19:39:46.843Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: codersaiful Products: Product Table for WooCommerce by CodeAstrology (wooproducttable.com) Problem Types: CWE-862 Description: The Product Table for WooCommerce by CodeAstrology (wooproducttable.com) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1 via the var_dump_table parameter. This makes it possible for unauthenticated attackers var data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/th
icated attackers var data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e67f680a-8942-45fa-8458-a27c78045aa1?source=cve - https://plugins.trac.wordpress.org/browser/woo-product-table/trunk/inc/shortcode-base.php
CVE ID: CVE-2024-10814 State: PUBLISHED Published: 2024-11-09T04:32:26.420Z Last Updated: 2024-11-11T11:56:15.702Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dartiss Products: Code Embed Problem Types: CWE-918 Description: The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5 via the ce_get_file() function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP
pplication and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0e1e17c9-b9ee-495a-be49-9aa88f8023a2?source=cve - https://plugins.trac.wordpress.org/browser/simple-embed-code/trunk/includes/add-embeds.php#L145 - https://plugins.trac.wordpress.org/changeset/3182609/
CVE ID: CVE-2024-10815 State: PUBLISHED Published: 2025-01-09T06:00:04.225Z Last Updated: 2025-01-09T16:01:25.757Z Vendors: Unknown Products: PostLists Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The PostLists WordPress plugin through 2.0.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/309a445a-6261-4bd1-bac0-a78096d0c12b/
CVE ID: CVE-2024-10816 State: PUBLISHED Published: 2024-11-13T03:30:10.803Z Last Updated: 2024-11-13T15:36:51.266Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: sodah Products: LUNA RADIO PLAYER Problem Types: CWE-22 Description: The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.24.01.24 via the js/fallback.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/544f7
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/544f71f5-1798-40fd-9f55-c25dae4f557a?source=cve - https://radioplayer.luna-universe.com/update
CVE ID: CVE-2024-10818 State: PUBLISHED Published: 2025-05-15T20:06:46.531Z Last Updated: 2025-05-20T19:37:05.128Z Vendors: Unknown Products: JSFiddle Shortcode Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The JSFiddle Shortcode WordPress plugin before 1.1.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/aafd152c-1a05-4191-a1bc-b802d801ca03/
CVE ID: CVE-2024-10819 State: PUBLISHED Published: 2025-03-20T10:10:26.197Z Last Updated: 2025-10-15T12:50:10.368Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: binary-husky Products: binary-husky/gpt_academic Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) vulnerability in version 3.83 of binary-husky/gpt_academic allows an attacker to trick a user into uploading files without their consent, exploiting their session. This can lead to unauthorized file uploads and potential system compromise. The uploaded file can contain malicious scripts, leading to stored Cross-Site Scripting (XSS) attacks. Through stored XSS, an attacker can steal
ntain malicious scripts, leading to stored Cross-Site Scripting (XSS) attacks. Through stored XSS, an attacker can steal information about the victim and perform any action on their behalf. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/45270c4b-a500-4374-a90b-37b604a3ace0
CVE ID: CVE-2024-10820 State: PUBLISHED Published: 2024-11-13T03:20:07.691Z Last Updated: 2024-11-13T16:08:35.476Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unknown Products: WooCommerce Upload Files Problem Types: CWE-434 Description: The WooCommerce Upload Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 84.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b9371b37-53c5-4a4f-a500-c6d58d4d3c5a?source=cve - https://codecanyon.net/item/woocommerce-upload-files/11442983
CVE ID: CVE-2024-10821 State: PUBLISHED Published: 2025-03-20T10:09:17.805Z Last Updated: 2025-10-15T12:50:10.809Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: invoke-ai Products: invoke-ai/invokeai Problem Types: CWE-835 Description: A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server (version v5.0.1) allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries, leading to an infinite loop and a complete denial of service for all users. The affected endpoint is `/api/v1/images/upload`. A
to an infinite loop and a complete denial of service for all users. The affected endpoint is `/api/v1/images/upload`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/0ac24835-c4c0-4f11-938a-d5641dfb80b2
CVE ID: CVE-2024-10824 State: PUBLISHED Published: 2024-11-07T21:15:11.200Z Last Updated: 2024-11-08T15:48:41.503Z Vendors: GitHub Products: Enterprise Server Problem Types: CWE-862 Description: An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed unauthorized internal users to access sensitive secret scanning alert data intended only for business owners. This issue could be exploited only by organization members with a personal access token (PAT) and required that secret scanning be enabled on user-owned repositories. This vulnerability affected GitHub Enterprise Server versions after 3.13.0 but prior to 3.14.0 and was fixed in version 3.13.2. Additi
lity affected GitHub Enterprise Server versions after 3.13.0 but prior to 3.14.0 and was fixed in version 3.13.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.2
CVE ID: CVE-2024-10825 State: PUBLISHED Published: 2024-11-15T06:48:04.243Z Last Updated: 2024-11-15T18:08:30.727Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: johndarrel Products: Hide My WP Ghost – Security & Firewall Problem Types: CWE-79 Description: The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an
ect arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c467a634-d5cf-4e80-9a64-009cdad2a684?source=cve - https://plugins.trac.wordpress.org/browser/hide-my-wp/tags/5.3.01/classes/Tools.php#L633 - https://plugins.trac.wordpress.org/browser/hide-my-wp/tags/5.3.01/classes/Tools.php#L638 - https://plugins.trac.wordpress.org/changeset/3186489/hide-my-wp/trunk/classes/Tools.php
CVE ID: CVE-2024-10826 State: PUBLISHED Published: 2024-11-06T16:09:21.643Z Last Updated: 2024-11-06T17:03:00.737Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/370217726
CVE ID: CVE-2024-10827 State: PUBLISHED Published: 2024-11-06T16:09:21.943Z Last Updated: 2024-11-06T17:04:20.660Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/11/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/375065084
CVE ID: CVE-2024-10828 State: PUBLISHED Published: 2024-11-13T03:20:06.973Z Last Updated: 2024-11-13T16:18:19.133Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: algolplus Products: Advanced Order Export For WooCommerce Problem Types: CWE-502 Description: The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete a
or unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a1c6eed6-7b3f-4b37-85f8-6613527daa54?source=cve - https://plugins.trac.wordpress.org/browser/woo-order-export-lite/trunk/classes/core/trait-woe-core-extractor.php#L996 - https://plugins.trac.wordpress.org/browser/woo-order-export-lite/trunk/classes/PHPExcel/Shared/XMLWriter.php#L83