Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
edirected to the homepage on login. Version 3.24.1 contains a fix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2022-138_lorawan-stack/ - https://github.com/TheThingsNetwork/lorawan-stack/commit/f06776028bdb3994847fc6067613dc61a2b3559e - https://github.com/TheThingsNetwork/lorawan-stack/blob/ecdef730f176c02f7c9afce98b0457ae64de5bfc/pkg/webui/account/views/login/index.js#L90-L90 - https://github.com/TheThingsNetwork/lorawan-stack/blob/ecdef730f176c02f7c9afce98b0457ae64de5bfc/pkg/webui/account/views/token-login/index.js#L74-L74 - https://github.com/TheThingsNetwork/lorawan-stack/releases/tag/v3.24.1
CVE ID: CVE-2023-26495 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-02-11T16:17:49.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.opendesign.com/security-advisories
CVE ID: CVE-2023-26496 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:24:08.841Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to improper checking of the parameter length while parsing the fmtp attribute in the SDP (Session Description Protocol) module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/processor/modem/ - http
CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/processor/modem/ - https://semiconductor.samsung.com/processor/mobile-processor/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-26497 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-26T18:31:19.945Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corruption can occur when processing Session Description Negotiation for Video Configuration Attribute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/processor/modem/ - https://semiconductor.samsung.com/processor/mobile-pr
References: - https://semiconductor.samsung.com/processor/modem/ - https://semiconductor.samsung.com/processor/mobile-processor/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-26498 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:23:13.347Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corruption can occur due to improper checking of the number of properties while parsing the chatroom attribute in the SDP (Session Description Protocol) module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/processor/modem/ -
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/processor/modem/ - https://semiconductor.samsung.com/processor/mobile-processor/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-26509 State: PUBLISHED Published: 2023-07-03T00:00:00 Last Updated: 2024-11-27T17:21:54.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: AnyDesk 7.0.8 allows remote Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://anydesk.com/en/downloads/windows - https://anydesk.com/cve/2023-26509/ - https://gist.github.com/Fastor01/161211a8aef1278d942c551fd2065ca5
CVE ID: CVE-2023-26510 State: PUBLISHED Published: 2023-03-05T00:00:00.000Z Last Updated: 2025-03-06T15:57:24.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghost 5.35.0 allows authorization bypass: contributors can view draft posts of other users, which is arguably inconsistent with a security policy in which a contributor's draft can only be read by editors until published by an editor. NOTE: the vendor's position is that this behavior has no security impact. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ghost.org/docs/security/ - https://gist.github.com/yurahod/2e11eabbe4b92ef1d44b08e37023ecfb - https://gist.github.com/y
/ghost.org/docs/security/ - https://gist.github.com/yurahod/2e11eabbe4b92ef1d44b08e37023ecfb - https://gist.github.com/yurahod/828d5e6a077c12f3f74c6485d1c7f0e7
CVE ID: CVE-2023-26511 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T20:15:55.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote attackers to gain access to the admin panel Propiusadmin.php, which allows taking control of the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.propius.de/ms_security.html
CVE ID: CVE-2023-26512 State: PUBLISHED Published: 2023-07-17T07:16:12.413Z Last Updated: 2024-10-02T18:06:06.619Z Vendors: Apache Software Foundation Products: Apache EventMesh (incubating) RabbitMQ connector Problem Types: CWE-502 Description: CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh (incubating) V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master branch in project repo to fix this issue, we will release the new version as soon as possible. Additional Analyst Notes: - CVE Program Container: - CISA AD
issue, we will release the new version as soon as possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/zb1d62wh8o8pvntrnx4t1hj8vz0pm39p
CVE ID: CVE-2023-26513 State: PUBLISHED Published: 2023-03-20T12:20:17.346Z Last Updated: 2025-02-13T14:32:39.905Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Apache Software Foundation Products: Apache Sling Resource Merger Problem Types: CWE-834 Description: Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger.This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/xpcpo1y88ldss5hgmvogsf6h3735l5zb
CVE ID: CVE-2023-26514 State: PUBLISHED Published: 2023-11-12T23:37:08.322Z Last Updated: 2025-01-08T21:40:56.033Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WPGrim Products: Dynamic XML Sitemaps Generator for Google Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin <= 1.3.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/xml-sitemap-generator-for-google/wordpress-xml-sitemap-generator-for-google-plugin-1-2-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-26515 State: PUBLISHED Published: 2023-06-16T10:41:07.287Z Last Updated: 2024-10-10T18:55:42.252Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Ko Takagi Products: Simple Slug Translate Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ko Takagi Simple Slug Translate plugin <= 2.7.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-slug-translate/wordpress-simple-slug-translate-plugin-2-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-26516 State: PUBLISHED Published: 2023-11-12T23:48:59.035Z Last Updated: 2024-08-02T14:49:18.167Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: WPIndeed Products: Debug Assistant Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/debug-assistant/wordpress-debug-assistant-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-26517 State: PUBLISHED Published: 2023-05-06T06:59:59.170Z Last Updated: 2025-01-09T15:26:36.144Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Jeff Starr Products: Dashboard Widgets Suite Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeff Starr Dashboard Widgets Suite plugin <= 3.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dashboard-widgets-suite/wordpress-dashboard-widgets-suite-plugin-3-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-26518 State: PUBLISHED Published: 2023-11-12T23:43:23.822Z Last Updated: 2024-08-29T13:23:19.038Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: AccessPress Themes Products: WP TFeed Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes WP TFeed plugin <= 1.6.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/accesspress-twitter-feed/wordpress-wp-tfeed-plugin-1-6-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-26519 State: PUBLISHED Published: 2023-05-06T06:53:00.806Z Last Updated: 2025-01-09T15:26:54.180Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Alex Benfica Products: Publish to Schedule Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex Benfica Publish to Schedule plugin <= 4.5.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/publish-to-schedule/wordpress-publish-to-schedule-plugin-4-5-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-26520 State: PUBLISHED Published: 2024-12-09T11:31:26.100Z Last Updated: 2024-12-09T18:43:40.081Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Max Chirkov Products: Advanced Text Widget Problem Types: CWE-862 Description: Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-text-widget/vulnerability/wordpress-advanced-text-widget-plugin-2-1-2-broken-access-control
se/wordpress/plugin/advanced-text-widget/vulnerability/wordpress-advanced-text-widget-plugin-2-1-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-26521 State: PUBLISHED Published: 2024-06-03T21:37:52.972Z Last Updated: 2024-08-02T11:53:53.614Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CodePeople Products: Search in Place Problem Types: CWE-862 Description: Missing Authorization vulnerability in CodePeople Search in Place allows Functionality Misuse.This issue affects Search in Place: from n/a through 1.0.104. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/search-in-place/wordpress-search-in-place-plugin-1-0-104-missing-authorization-leading-to-feedback-submission-vulnerability?_s_id=cve
CVE ID: CVE-2023-26522 State: PUBLISHED Published: 2024-12-09T11:31:25.258Z Last Updated: 2024-12-09T18:43:47.714Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: OneWebsite Products: WP Repost Problem Types: CWE-862 Description: Missing Authorization vulnerability in OneWebsite WP Repost allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Repost: from n/a through 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-repost/vulnerability/wordpress-wp-repost-plugin-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-26523 State: PUBLISHED Published: 2024-06-03T21:42:10.490Z Last Updated: 2024-08-02T11:53:53.929Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CodePeople Products: Calculated Fields Form Problem Types: CWE-862 Description: Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a through 1.1.120. Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/calculated-fields-form/wordpress-calculated-fields-form-plugin-1-1-120-missing-authorization-leading-to-feedback-submission-v
lated-fields-form/wordpress-calculated-fields-form-plugin-1-1-120-missing-authorization-leading-to-feedback-submission-vulnerability?_s_id=cve
CVE ID: CVE-2023-26524 State: PUBLISHED Published: 2023-11-12T23:55:18.599Z Last Updated: 2025-01-08T21:39:21.359Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: ExpressTech Products: Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-0-10-cross-sit
https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-0-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-26525 State: PUBLISHED Published: 2023-12-20T17:27:23.278Z Last Updated: 2024-08-02T11:53:54.241Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: weDevs Products: Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy: from n/a through 3.7.12. Additional Analys
ommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy: from n/a through 3.7.12. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/dokan-lite/wordpress-dokan-plugin-3-7-12-authenticated-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-26526 State: PUBLISHED Published: 2024-05-17T06:41:23.723Z Last Updated: 2024-08-02T11:53:54.589Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Nota-Info Products: Bookly Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Nota-Info Bookly allows Path Traversal, Manipulating Web Input to File System Calls.This issue affects Bookly: from n/a through 21.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bookly-responsive-appointment-booking-tool/wordpress-bookly-plugin-21-7-1-a
ttps://patchstack.com/database/vulnerability/bookly-responsive-appointment-booking-tool/wordpress-bookly-plugin-21-7-1-authenticated-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2023-26527 State: PUBLISHED Published: 2023-06-16T11:02:05.596Z Last Updated: 2024-10-10T18:55:27.543Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WPIndeed Products: Debug Assistant Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/debug-assistant/wordpress-debug-assistant-plugin-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-26528 State: PUBLISHED Published: 2023-06-13T14:17:24.082Z Last Updated: 2024-10-22T21:10:26.656Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: jinit9906 Products: Shipyaari Shipping Management Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in jinit9906 Shipyaari Shipping Management plugin <= 1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/manage-shipyaari-shipping/wordpress-shipyaari-shipping-management-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-26529 State: PUBLISHED Published: 2023-04-03T12:30:33.249Z Last Updated: 2025-01-10T19:12:23.190Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: DupeOff.com Products: DupeOff Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DupeOff.Com DupeOff plugin <= 1.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dupeoff/wordpress-dupeoff-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-26530 State: PUBLISHED Published: 2023-08-17T10:41:51.787Z Last Updated: 2024-08-02T13:39:58.565Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Paul Kehrer Products: Updraft Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paul Kehrer Updraft plugin <= 0.6.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/updraft/wordpress-updraft-plugin-0-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-26531 State: PUBLISHED Published: 2023-11-12T23:58:57.681Z Last Updated: 2024-08-02T11:53:53.899Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: 闪电博 Products: 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in 闪电博 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 allows Cross Site Request Forgery.This issue affects 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条: from n/a through 4.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/baidu-submit-link/wordpre
richment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/baidu-submit-link/wordpress-baidu-google-bing-indexnow-yandex-plugin-4-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-26532 State: PUBLISHED Published: 2023-11-22T14:00:45.963Z Last Updated: 2024-08-02T11:53:54.336Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: AccessPress Themes Products: Social Auto Poster Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes Social Auto Poster plugin <= 2.1.4 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/accesspress-facebook-auto-post/wordpress-social-auto-poster-plugin-2-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-26533 State: PUBLISHED Published: 2023-11-30T15:40:21.362Z Last Updated: 2024-08-02T11:53:52.922Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Gesundheit Bewegt GmbH Products: Zippy Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/zippy/wordpress-zippy-plugin-1-6-1-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2023-26534 State: PUBLISHED Published: 2023-06-22T11:51:06.104Z Last Updated: 2025-02-19T21:28:50.592Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: OneWebsite Products: WP Repost Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in OneWebsite WP Repost plugin <= 0.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-repost/wordpress-wp-repost-plugin-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-26535 State: PUBLISHED Published: 2023-11-22T14:05:27.112Z Last Updated: 2024-08-28T14:30:07.379Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WPPOOL Products: Sheets To WP Table Live Sync Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPPOOL Sheets To WP Table Live Sync plugin <= 2.12.15 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sheets-to-wp-table-live-sync/wordpress-sheets-to-wp-table-live-sync-plugin-2-12-15-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-26536 State: PUBLISHED Published: 2023-04-05T07:35:11.064Z Last Updated: 2025-02-19T21:35:36.783Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jonk @ Follow me Darling Products: Sp*tify Play Button for WordPress Problem Types: CWE-79 Description: Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.05 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/spotify-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-05-cross-site-scripting-xss
ility/spotify-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-05-cross-site-scripting-xss-vulnerability?_s_id=cve