Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10663 State: PUBLISHED Published: 2024-12-04T02:40:27.670Z Last Updated: 2024-12-04T21:18:46.611Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: smarettheme Products: Eleblog – Elementor Blog And Magazine Addons Problem Types: CWE-862 Description: The Eleblog – Elementor Blog And Magazine Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the goodbye_form_callback() function in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit a deactivation reason. Additional Analyst Notes: - CISA ADP
ttackers, with Subscriber-level access and above, to submit a deactivation reason. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f355d2c0-6133-4091-b900-1451ebba70c4?source=cve - https://plugins.trac.wordpress.org/browser/ele-blog/trunk/inc/class-ele-blog-quick-feedback.php#L350
CVE ID: CVE-2024-10664 State: PUBLISHED Published: 2024-12-04T07:32:25.555Z Last Updated: 2024-12-04T15:14:12.550Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: codesavory Products: Knowledge Base documentation & wiki plugin – BasePress Docs Problem Types: CWE-862 Description: The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepress_db_posts_update() function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the database. Addition
makes it possible for authenticated attackers, with Subscriber-level access and above, to update the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3aa6f3c2-0e45-4243-a26d-ba1c702fbe11?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3201489%40basepress&new=3201489%40basepress&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10665 State: PUBLISHED Published: 2024-11-20T09:31:53.653Z Last Updated: 2024-11-20T20:18:05.872Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: yaadsarig Products: Yaad Sarig Payment Gateway For WC Problem Types: CWE-862 Description: The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized modification & access of data due to a missing capability check on the yaadpay_view_log_callback() and yaadpay_delete_log_callback() functions in all versions up to, and including, 2.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and delete logs. Additional Analyst
ssible for authenticated attackers, with Subscriber-level access and above, to view and delete logs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/10409673-43dc-4c05-a996-120d753ebd6d?source=cve - https://plugins.trac.wordpress.org/browser/yaad-sarig-payment-gateway-for-wc/trunk/classes/class-wc-gateway-yaadpay.php#L2518
CVE ID: CVE-2024-10666 State: PUBLISHED Published: 2024-11-22T05:33:43.057Z Last Updated: 2024-11-22T11:34:08.394Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: bplugins Products: Easy Twitter Feed – Twitter feeds plugin for WP Problem Types: CWE-639 Description: The Easy Twitter Feed – Twitter feeds plugin for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.6 via the [etf] shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. Additional Analyst Notes:
act data from password protected, private, or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d9cd3168-3261-4e36-8fbe-2058cd821937?source=cve - https://wordpress.org/plugins/easy-twitter-feeds/
CVE ID: CVE-2024-10667 State: PUBLISHED Published: 2024-11-09T04:32:27.401Z Last Updated: 2024-11-11T11:55:37.200Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: bplugins Products: Content Slider Block Problem Types: CWE-639 Description: The Content Slider Block plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1.5 via the [csb] shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. Additional Anal
e, to extract data from password protected, private, or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c34ca97f-d974-4ad1-b4a5-93613eb43a37?source=cve - https://plugins.trac.wordpress.org/changeset/3180314/content-slider-block/tags/3.1.6/includes/CustomPost.php?old=3178657&old_path=content-slider-block%2Ftags%2F3.1.5%2Fincludes%2FCustomPost.php
CVE ID: CVE-2024-10668 State: PUBLISHED Published: 2024-11-07T15:22:24.280Z Last Updated: 2024-11-21T10:32:45.723Z Vendors: Google Products: Nearby Problem Types: CWE-434 Description: There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the fact that when a Payload Transfer frame of type FILE is sent to Quick Share, the file that is contained in this frame is written to disk in the Downloads folder. Quickshare normally deletes unkown files, however an attacker can send two Payload transfer frames of type FILE and the same payload ID. The deletion logic will only delete the first file and no
Payload transfer frames of type FILE and the same payload ID. The deletion logic will only delete the first file and not the second. We recommend upgrading past commit 5d8b9156e0c339d82d3dab0849187e8819ad92c0 or Quick Share Windows v1.0.2002.2 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/nearby/pull/2892
CVE ID: CVE-2024-10669 State: PUBLISHED Published: 2024-11-09T04:32:26.918Z Last Updated: 2024-11-11T11:55:56.161Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: bplugins Products: Countdown Timer block – Display the event&#039;s date into a timer. Problem Types: CWE-639 Description: The Countdown Timer block – Display the event&#039;s date into a timer. plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.4 via the [ctb] shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from pa
ed. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/24ccc2cb-3c5d-48cd-bc40-2717145b4912?source=cve - https://plugins.trac.wordpress.org/changeset?old_path=/countdown-time/tags/1.2.4&new_path=/countdown-time/tags/1.2.5&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10670 State: PUBLISHED Published: 2024-11-28T09:47:11.212Z Last Updated: 2024-11-29T17:19:51.340Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: nicheaddons Products: Primary Addon for Elementor Problem Types: CWE-639 Description: The Primary Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.6.2 via the [prim_elementor_template] shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created with Elementor that they sho
ith Contributor-level access and above, to extract data from private or draft posts created with Elementor that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/636bd8ce-4737-4117-9581-42c7dcb3ad22?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3197298%40primary-addon-for-elementor&new=3197298%40primary-addon-for-elementor&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10671 State: PUBLISHED Published: 2024-11-21T05:33:51.413Z Last Updated: 2024-11-21T11:40:10.841Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: bplugins Products: Button Block – Get fully customizable & multi-functional buttons Problem Types: CWE-639 Description: The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.4 via the [btn_block] shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from pa
ed. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/99c7eead-2cf2-4663-9328-671274f3c436?source=cve - https://plugins.trac.wordpress.org/changeset/3188802/button-block/tags/1.1.5/inc/class-button-block-common.php?old=3176453&old_path=button-block%2Ftags%2F1.1.4%2Finc%2Fclass-button-block-common.php
CVE ID: CVE-2024-10672 State: PUBLISHED Published: 2024-11-12T03:24:58.158Z Last Updated: 2024-11-12T11:20:03.679Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: themeisle Products: Multiple Page Generator Plugin – MPG Problem Types: CWE-73 Description: The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with editor-level access and above, to delete limited files on the server. Additional Analyst Notes: - CISA ADP Vulnrichmen
h editor-level access and above, to delete limited files on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8c21de03-4d62-4ecf-a2f1-57e0e416792b?source=cve - https://plugins.trac.wordpress.org/browser/multiple-pages-generator-by-porthas/tags/3.4.8/controllers/ProjectController.php#L147 - https://plugins.trac.wordpress.org/browser/multiple-pages-generator-by-porthas/tags/3.4.8/controllers/ProjectController.php#L139 - https://plugins.trac.wordpress.org/changeset/3183330/multiple-pages-generator-by-porthas/tags/4.0.3/controllers/ProjectController.php
CVE ID: CVE-2024-10673 State: PUBLISHED Published: 2024-11-09T03:17:53.611Z Last Updated: 2024-11-12T18:44:39.645Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: themehunk Products: Top Store Problem Types: CWE-862 Description: The Top Store theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the top_store_install_and_activate_callback() function in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins which can contain other exploitable vulnerabilities to elevate privileges and gain remo
ve, to install arbitrary plugins which can contain other exploitable vulnerabilities to elevate privileges and gain remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/80510ade-cb58-45b3-89f2-2cbbc5640cae?source=cve - https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=247826%40top-store&new=247826%40top-store&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10674 State: PUBLISHED Published: 2024-11-09T03:18:14.401Z Last Updated: 2024-11-12T18:43:10.958Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: themehunk Products: Th Shop Mania Problem Types: CWE-862 Description: The Th Shop Mania theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the th_shop_mania_install_and_activate_callback() function in all versions up to, and including, 1.4.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins which can be leveraged to exploit other vulnerabilities and achieve remote
cess and above, to install arbitrary plugins which can be leveraged to exploit other vulnerabilities and achieve remote code execution and privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b7832d37-19a9-491b-879e-4a22f2ba46ec?source=cve - https://themes.svn.wordpress.org/th-shop-mania/1.4.9/lib/notification/notify.php - https://themes.trac.wordpress.org/browser/th-shop-mania/1.4.9/lib/notification/notify.php - https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=247810%40th-shop-mania&new=247810%40th-shop-mania&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10675 State: PUBLISHED Published: 2024-11-21T08:31:12.175Z Last Updated: 2024-11-21T11:30:08.460Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: cservit Products: affiliate-toolkit – WP Affiliate Plugin with Amazon Problem Types: CWE-79 Description: The affiliate-toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via a URL in all versions up to, and including, 3.6.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a
web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f45afce1-cb37-4e7e-90b2-6ae1b6400376?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3192067%40affiliate-toolkit-starter&new=3192067%40affiliate-toolkit-starter&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10676 State: PUBLISHED Published: 2024-11-09T09:26:18.273Z Last Updated: 2024-11-09T15:19:29.426Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Wojciech Borowicz Products: Conversion Helper Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wojciech Borowicz Conversion Helper allows Reflected XSS.This issue affects Conversion Helper: from n/a through 1.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/conversion-helper/wordpress-conversion-helper-plugin-1-12-reflected-cross-site-scripti
hstack.com/database/vulnerability/conversion-helper/wordpress-conversion-helper-plugin-1-12-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-10677 State: PUBLISHED Published: 2025-05-15T20:06:45.794Z Last Updated: 2025-05-20T19:37:15.097Z Vendors: Unknown Products: BTEV Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The BTEV WordPress plugin through 2.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b1bd4216-798a-4e45-a0ba-3699f0af3c7a/
CVE ID: CVE-2024-10678 State: PUBLISHED Published: 2024-12-13T06:00:02.380Z Last Updated: 2024-12-16T19:00:45.536Z Vendors: Unknown Products: Ultimate Blocks Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9342c6a1-4f9a-45f3-911d-0dfee4657243/
CVE ID: CVE-2024-10679 State: PUBLISHED Published: 2025-03-25T06:00:09.267Z Last Updated: 2025-03-25T13:58:11.607Z Vendors: Unknown Products: Quiz and Survey Master (QSM) Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/001391eb-f181-441d-b777-d9ce098ba143/
CVE ID: CVE-2024-10680 State: PUBLISHED Published: 2025-04-16T06:00:09.412Z Last Updated: 2025-04-17T13:22:59.593Z Vendors: Unknown Products: Form Maker by 10Web Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Form Maker by 10Web WordPress plugin before 1.15.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/240948d7-ece0-437f-b926-62937bdbd9db/
CVE ID: CVE-2024-10681 State: PUBLISHED Published: 2024-12-06T09:23:00.490Z Last Updated: 2024-12-06T17:30:56.211Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: reputeinfosystems Products: ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup Problem Types: CWE-94 Description: The The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.0.51. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode.
to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ee0eead2-3eab-4a2a-bfe4-c0d8f91dc0a5?source=cve - https://plugins.trac.wordpress.org/changeset/3199747/armember-membership/trunk/core/classes/class.arm_shortcodes.php
CVE ID: CVE-2024-10682 State: PUBLISHED Published: 2024-11-21T02:06:19.173Z Last Updated: 2024-11-21T11:40:10.610Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: mikewire_rocksolid Products: Announcement & Notification Banner – Bulletin Problem Types: CWE-79 Description: The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg and remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.11.7. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully tri
ossible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/08033270-5547-437b-95e6-e004b78df5e4?source=cve - https://plugins.trac.wordpress.org/browser/bulletin-announcements/tags/3.11.5/classes/class-bulletinwp-bulletins-table.php#L145 - https://plugins.trac.wordpress.org/browser/bulletin-announcements/tags/3.11.5/classes/class-bulletinwp-bulletins-table.php#L148 - https://plugins.trac.wordpress.org/browser/bulletin-announcements/tags/3.11.5/class
ulletinwp-bulletins-table.php#L148 - https://plugins.trac.wordpress.org/browser/bulletin-announcements/tags/3.11.5/classes/class-bulletinwp-bulletins-table.php#L152
CVE ID: CVE-2024-10683 State: PUBLISHED Published: 2024-11-09T06:41:25.295Z Last Updated: 2024-11-09T15:42:52.173Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: scottpaterson Products: Contact Form 7 – PayPal & Stripe Add-on Problem Types: CWE-79 Description: The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.3.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into perfo
ticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This is only exploitable when the leave a review notice is present in the dashboard. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/49e741c9-0cc7-4a62-a920-4fd997bee280?source=cve - https://plugins.trac.wordpress.org/browser/contact-form-7-paypal-add-on/tags/2.3.1/includes/admin/notices.php#L46 - https://plugins.trac.wordpress.org/browser/contact-form-7-paypal-add-on/tags/2.3.1/includes/admin/notices.php#L48 - https://plugins.trac.wordpress.org/changeset/3
/contact-form-7-paypal-add-on/tags/2.3.1/includes/admin/notices.php#L48 - https://plugins.trac.wordpress.org/changeset/3182753/
CVE ID: CVE-2024-10684 State: PUBLISHED Published: 2024-11-13T02:33:19.984Z Last Updated: 2024-11-13T14:39:58.708Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: kognetiks Products: Kognetiks Chatbot for WordPress Problem Types: CWE-79 Description: The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dir' parameter in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clic
arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d6fcd334-4d9a-4c11-ab11-b96cdda698c4?source=cve - https://plugins.trac.wordpress.org/changeset/3183413/chatbot-chatgpt/trunk/includes/settings/chatbot-settings-support.php