Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41693 State: PUBLISHED Published: 2023-10-03T13:11:49.667Z Last Updated: 2024-09-20T13:14:01.975Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: edward_plainview Products: MyCryptoCheckout Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview MyCryptoCheckout plugin <= 2.125 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mycryptocheckout/wordpress-mycryptocheckout-plugin-2-125-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41694 State: PUBLISHED Published: 2023-10-10T07:36:22.752Z Last Updated: 2025-02-19T21:21:43.245Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Realbig Team Products: Realbig For WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Realbig Team Realbig For WordPress plugin <= 1.0.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/realbig-media/wordpress-realbig-plugin-1-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41695 State: PUBLISHED Published: 2024-12-13T14:24:15.986Z Last Updated: 2024-12-16T17:57:43.453Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Analytify Products: Analytify Problem Types: CWE-862 Description: Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through 5.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-analytify/vulnerability/wordpress-analytify-google-analytics-dashboard-for-wordpress-plugin-5-1-0-broken-access-control-csrf-vulnerability
ility/wordpress-analytify-google-analytics-dashboard-for-wordpress-plugin-5-1-0-broken-access-control-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41696 State: REJECTED Published: 2024-03-26T08:30:35.771Z Last Updated: 2024-03-26T08:33:22.606Z Description: No description available.
CVE ID: CVE-2023-41697 State: PUBLISHED Published: 2023-10-10T07:39:29.394Z Last Updated: 2024-09-17T19:50:41.498Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Nikunj Soni Products: Easy WP Cleaner Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Nikunj Soni Easy WP Cleaner plugin <= 1.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-wp-cleaner/wordpress-easy-wp-cleaner-plugin-1-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41699 State: PUBLISHED Published: 2023-11-15T19:54:23.590Z Last Updated: 2024-08-29T17:37:00.722Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Payara Platform Products: Payara Server, Micro and Embedded Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (Servlet Implementation modules) allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11. Additional Analyst Notes: - CVE Program Contai
re 4.1.2.191.46, from 6.0.0 before 6.8.0, from 6.2023.1 before 6.2023.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.8.0.html - https://docs.payara.fish/community/docs/Release%20Notes/Release%20Notes%206.2023.11.html
CVE ID: CVE-2023-41703 State: PUBLISHED Published: 2024-02-12T08:15:21.605Z Last Updated: 2025-11-04T18:16:45.902Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Open-Xchange GmbH Products: OX App Suite Problem Types: CWE-79 Description: User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avoid potentially malicious content. No publicly available exploits are known. Additional Analyst Notes: - CISA ADP Vulnrichment: - C
ally malicious content. No publicly available exploits are known. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6259_7.10.6_2023-12-11.pdf - https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0007.json
CVE ID: CVE-2023-41704 State: PUBLISHED Published: 2024-02-12T08:15:22.352Z Last Updated: 2025-11-04T18:16:47.090Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Open-Xchange GmbH Products: OX App Suite Problem Types: CWE-79 Description: Processing of CID references at E-Mail can be abused to inject malicious script code that passes the sanitization engine. Malicious script code could be injected to a users sessions when interacting with E-Mails. Please deploy the provided updates and patch releases. CID handing has been improved and resulting content is checked for malicious content. No publicly available exploits are known. Additional Analyst Notes: - CVE P
ng content is checked for malicious content. No publicly available exploits are known. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6259_7.10.6_2023-12-11.pdf - https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0007.json
CVE ID: CVE-2023-41705 State: PUBLISHED Published: 2024-02-12T08:15:23.158Z Last Updated: 2025-11-04T18:16:48.285Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Open-Xchange GmbH Products: OX App Suite Problem Types: CWE-400 Description: Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of DAV user-agents now gets monitored, and the related request is terminated if a resource threshold is reached. No publicly available exploits are known. Additional Analyst Notes: - CVE Program Container: - CISA A
eshold is reached. No publicly available exploits are known. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6259_7.10.6_2023-12-11.pdf - https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0007.json
CVE ID: CVE-2023-41706 State: PUBLISHED Published: 2024-02-12T08:15:24.085Z Last Updated: 2025-11-04T18:16:49.570Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Open-Xchange GmbH Products: OX App Suite Problem Types: CWE-400 Description: Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource threshold is reached. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing of user-defined drive search expressions is not limited No publicly available exploits are known. Additional Analyst Notes: - CISA ADP Vulnrichment
h expressions is not limited No publicly available exploits are known. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6259_7.10.6_2023-12-11.pdf - https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0007.json
CVE ID: CVE-2023-41707 State: PUBLISHED Published: 2024-02-12T08:15:24.923Z Last Updated: 2025-11-04T18:16:50.752Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Open-Xchange GmbH Products: OX App Suite Problem Types: CWE-400 Description: Processing of user-defined mail search expressions is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of mail search expressions now gets monitored, and the related request is terminated if a resource threshold is reached. No publicly available exploits are known. Additional Analyst Notes: - CISA ADP Vulnrichment:
ource threshold is reached. No publicly available exploits are known. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6259_7.10.6_2023-12-11.pdf - https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0007.json
CVE ID: CVE-2023-41708 State: PUBLISHED Published: 2024-02-12T08:15:25.802Z Last Updated: 2025-11-04T18:16:51.949Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Open-Xchange GmbH Products: OX App Suite Problem Types: CWE-79 Description: References to the "app loader" functionality could contain redirects to unexpected locations. Attackers could forge app references that bypass existing safeguards to inject malicious script code. Please deploy the provided updates and patch releases. References to apps are now controlled more strict to avoid relative references. No publicly available exploits are known. Additional Analyst Notes: - CVE Program Container: - C
id relative references. No publicly available exploits are known. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6259_7.10.6_2023-12-11.pdf - https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0007.json
CVE ID: CVE-2023-41710 State: PUBLISHED Published: 2024-01-08T09:04:38.608Z Last Updated: 2025-11-04T18:16:53.152Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Open-Xchange GmbH Products: OX App Suite Problem Types: CWE-79 Description: User-defined script code could be stored for a upsell related shop URL. This code was not correctly sanitized when adding it to DOM. Attackers could lure victims to user accounts with malicious script code and make them execute it in the context of a trusted domain. We added sanitization for this content. No publicly available exploits are known. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
CVE ID: CVE-2023-41711 State: PUBLISHED Published: 2023-10-17T22:20:36.619Z Last Updated: 2024-09-13T15:38:30.661Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-121 Description: SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012
CVE ID: CVE-2023-41712 State: PUBLISHED Published: 2023-10-17T22:26:09.949Z Last Updated: 2024-09-13T15:36:27.303Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-121 Description: SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012
CVE ID: CVE-2023-41713 State: PUBLISHED Published: 2023-10-17T22:28:50.229Z Last Updated: 2024-09-13T19:32:58.092Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-259 Description: SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012
CVE ID: CVE-2023-41715 State: PUBLISHED Published: 2023-10-17T22:33:57.440Z Last Updated: 2025-05-02T18:19:50.910Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-269 Description: SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012
CVE ID: CVE-2023-41717 State: PUBLISHED Published: 2023-08-31T00:00:00 Last Updated: 2024-10-01T18:06:50.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/federella/CVE-2023-41717
CVE ID: CVE-2023-41718 State: PUBLISHED Published: 2023-11-14T23:18:08.415Z Last Updated: 2025-01-07T18:54:16.477Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Secure Access Description: When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release
CVE ID: CVE-2023-41719 State: PUBLISHED Published: 2023-12-14T01:56:44.867Z Last Updated: 2024-08-02T19:01:35.464Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure Description: A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-patch-release-Ivanti-Connect-Secure-22-6R2-and-22-6R2-1?language=en_US
CVE ID: CVE-2023-41720 State: PUBLISHED Published: 2023-12-14T01:56:44.839Z Last Updated: 2024-08-02T19:01:35.479Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure Description: A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure (ICS) appliance can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated execution privileges on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-patch-release-Iv
onal Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-patch-release-Ivanti-Connect-Secure-22-6R2-and-22-6R2-1?language=en_US
CVE ID: CVE-2023-41721 State: PUBLISHED Published: 2023-10-25T00:24:34.072Z Last Updated: 2024-09-13T16:28:08.626Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Ubiquiti Products: UniFi Network Application Description: Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to the network. Affected Products: UDM UDM-PRO UDM-SE UDR UDW Mitigation: Update UniFi Network to Version 7.5.187 or later. Additional Analyst Note
oducts: UDM UDM-PRO UDM-SE UDR UDW Mitigation: Update UniFi Network to Version 7.5.187 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-036-036/81367bc9-2a64-4435-95dc-bbe482457615
CVE ID: CVE-2023-41723 State: PUBLISHED Published: 2023-11-07T06:17:31.606Z Last Updated: 2024-10-29T18:29:59.593Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Veeam Products: One Description: A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability is reduced because the user with the Read-Only role is only able to view the schedule and cannot make changes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veeam.com/kb4508
CVE ID: CVE-2023-41724 State: PUBLISHED Published: 2024-03-31T01:45:42.684Z Last Updated: 2025-03-25T14:36:27.737Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Sentry Description: A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.ivanti.com/s/article/CVE-2023-41724-Remote-Code-Execution-for-Ivanti-Standalone-Sentry
CVE ID: CVE-2023-41725 State: PUBLISHED Published: 2023-11-03T18:13:19.979Z Last Updated: 2024-09-05T14:55:18.991Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.1.236_release_notes.txt
CVE ID: CVE-2023-41726 State: PUBLISHED Published: 2023-11-03T18:13:19.997Z Last Updated: 2024-09-06T18:25:28.360Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.1.236_release_notes.txt
CVE ID: CVE-2023-41727 State: PUBLISHED Published: 2023-12-19T15:43:26.326Z Last Updated: 2025-05-06T18:53:20.334Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Wavelink Description: An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt
CVE ID: CVE-2023-41728 State: PUBLISHED Published: 2023-10-02T07:35:23.559Z Last Updated: 2024-08-02T19:01:35.446Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Rescue Themes Products: Rescue Shortcodes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/rescue-shortcodes/wordpress-rescue-shortcodes-plugin-2-5-cross-site-scripting-
s://patchstack.com/database/vulnerability/rescue-shortcodes/wordpress-rescue-shortcodes-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41729 State: PUBLISHED Published: 2023-10-02T07:39:34.189Z Last Updated: 2024-09-20T13:20:49.121Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: SendPress Products: SendPress Newsletters Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sendpress/wordpress-sendpress-newsletters-plugin-1-22-3-31-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-41730 State: PUBLISHED Published: 2023-10-10T07:47:10.885Z Last Updated: 2024-09-17T19:46:40.285Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SendPress Products: SendPress Newsletters Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sendpress/wordpress-sendpress-newsletters-plugin-1-22-3-31-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2023-41731 State: PUBLISHED Published: 2023-10-02T07:43:41.950Z Last Updated: 2024-08-02T19:01:35.458Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: I Thirteen Web Solution Products: WordPress publish post email notification Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress publish post email notification plugin <= 1.0.2.2 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/publish-post-email-notification/wordpress-wordpress-publish-post-email-notification-plugin-1-0-2-2-cross-site-scripting-x
ublish-post-email-notification/wordpress-wordpress-publish-post-email-notification-plugin-1-0-2-2-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-41732 State: PUBLISHED Published: 2023-10-06T14:44:42.631Z Last Updated: 2024-09-19T14:58:07.224Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: CodePeople Products: CP Blocks Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Blocks plugin <= 1.0.20 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cp-blocks/wordpress-cp-blocks-plugin-1-0-20-csrf-leading-to-plugin-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2023-41733 State: PUBLISHED Published: 2023-10-02T07:49:09.471Z Last Updated: 2024-09-20T13:36:19.047Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: YYDevelopment Products: Back To The Top Button Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in YYDevelopment Back To The Top Button plugin <= 2.1.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/back-to-the-top-button/wordpress-back-to-the-top-button-plugin-2-1-5-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-41734 State: PUBLISHED Published: 2023-10-02T07:54:22.794Z Last Updated: 2024-09-20T15:17:56.822Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: nigauri Products: Insert Estimated Reading Time Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nigauri Insert Estimated Reading Time plugin <= 1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/insert-estimated-reading-time/wordpress-insert-estimated-reading-time-plugin-1-2-cross-site-scripting-xss?_s_id=cve