Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-11261 State: PUBLISHED Published: 2024-11-15T22:00:09.841Z Last Updated: 2024-11-19T16:24:44.092Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Student Record Management System Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Affected is an unknown function of the file StudentRecordManagementSystem.cpp of the component Number of Students Menu. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - C
ng locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.284718 - https://vuldb.com/?ctiid.284718 - https://vuldb.com/?submit.443906 - https://github.com/Hacker0xone/CVE/issues/12 - https://www.sourcecodester.com/
CVE ID: CVE-2024-11262 State: PUBLISHED Published: 2024-11-15T22:31:04.443Z Last Updated: 2024-11-19T16:25:32.708Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Student Record Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as critical. Affected by this vulnerability is the function main of the component View All Student Marks. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst No
launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.284719 - https://vuldb.com/?ctiid.284719 - https://vuldb.com/?submit.443950 - https://github.com/Hacker0xone/CVE/issues/13 - https://www.sourcecodester.com/
CVE ID: CVE-2024-11263 State: PUBLISHED Published: 2024-11-15T22:53:58.593Z Last Updated: 2024-11-18T17:45:21.489Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-270 Description: When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjf3-7x72-pqm9
CVE ID: CVE-2024-11264 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:02.110Z Description: No description available.
CVE ID: CVE-2024-11265 State: PUBLISHED Published: 2024-11-23T05:40:11.875Z Last Updated: 2024-11-26T19:14:07.306Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: codepopular Products: Increase Maximum Upload File Size | Increase Execution Time Problem Types: CWE-200 Description: The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.3. This is due to returning image upload error messages with full path information. This makes it possible for authenticated attackers, with author-level permissions and above, to retrieve the full path of the web applic
ssible for authenticated attackers, with author-level permissions and above, to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e49e7cdf-93ca-415f-ba83-986cbb869220?source=cve - https://plugins.trac.wordpress.org/browser/wp-maximum-upload-file-size/tags/1.1.2/inc/class-wmufs-chunk-files.php#L228 - https://plugins.trac.wordpress.org/browser/wp-maximum-upload-file-size/trunk/inc/class-wmufs-chunk-file
files.php#L228 - https://plugins.trac.wordpress.org/browser/wp-maximum-upload-file-size/trunk/inc/class-wmufs-chunk-files.php#L247 - https://plugins.trac.wordpress.org/changeset/3191874/
CVE ID: CVE-2024-11266 State: PUBLISHED Published: 2025-05-15T20:06:48.506Z Last Updated: 2025-05-20T19:36:05.227Z Vendors: Unknown Products: Geocache Stat Bar Widget Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Geocache Stat Bar Widget WordPress plugin through 0.911 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/361a4635-7e7d-483c-b2ce-a857d60d91ea/
CVE ID: CVE-2024-11267 State: PUBLISHED Published: 2025-05-15T20:06:48.708Z Last Updated: 2025-05-20T19:34:46.725Z Vendors: Unknown Products: JSP Store Locator Problem Types: CWE-89 SQL Injection Description: The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing user with Contributor to perform SQL injection attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fcbdc11a-a194-46e4-8c22-11010b98fdab/
CVE ID: CVE-2024-11268 State: PUBLISHED Published: 2024-12-09T17:42:15.362Z Last Updated: 2025-08-26T16:51:06.761Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Autodesk Products: Revit Problem Types: CWE-125 Description: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash or could lead to an arbitrary memory leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0024
CVE ID: CVE-2024-11269 State: PUBLISHED Published: 2025-05-15T20:06:49.100Z Last Updated: 2025-05-20T19:34:35.793Z Vendors: Unknown Products: AHAthat Plugin Problem Types: CWE-89 SQL Injection Description: The AHAthat Plugin WordPress plugin through 1.6 does not sanitize and escape a parameter before using it in a SQL statement, allowing Admin to perform SQL injection attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3ad89687-adb0-4c45-938c-0c18fda7f36f/
CVE ID: CVE-2024-11270 State: PUBLISHED Published: 2025-01-08T04:17:59.763Z Last Updated: 2025-01-08T15:09:55.978Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wpwebinarsystem Products: WordPress Webinar Plugin – WebinarPress Problem Types: CWE-862 Description: The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files that can lead to remote code e
uthenticated attackers, with subscriber-level access and above, to create arbitrary files that can lead to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f1c2cb3f-2f9e-40c5-9e5f-5b85a53e5868?source=cve - https://plugins.trac.wordpress.org/changeset/3216237/wp-webinarsystem/trunk/includes/class-webinarsysteem-ajax.php
CVE ID: CVE-2024-11271 State: PUBLISHED Published: 2025-01-08T04:17:58.930Z Last Updated: 2025-01-08T14:34:13.686Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wpwebinarsystem Products: WordPress Webinar Plugin – WebinarPress Problem Types: CWE-862 Description: The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify webinars. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence
ss and above, to modify webinars. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/88508dbd-b7a0-441d-918b-f4cb7a7cd000?source=cve - https://plugins.trac.wordpress.org/changeset/3216237/wp-webinarsystem/trunk/includes/class-webinarsysteem-ajax.php
CVE ID: CVE-2024-11272 State: PUBLISHED Published: 2025-03-25T06:00:09.948Z Last Updated: 2025-03-25T13:57:50.281Z Vendors: Unknown Products: Contact Form & SMTP Plugin for WordPress by PirateForms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d7a76794-bc7
e setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d7a76794-bc7d-42d6-9e7d-d7b845a7f461/
CVE ID: CVE-2024-11273 State: PUBLISHED Published: 2025-03-25T06:00:10.410Z Last Updated: 2025-03-25T13:57:42.934Z Vendors: Unknown Products: Contact Form & SMTP Plugin for WordPress by PirateForms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d1049a83-129
e setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d1049a83-1298-4c8c-aeac-0055110d38fb/
CVE ID: CVE-2024-11274 State: PUBLISHED Published: 2024-12-12T12:02:20.019Z Last Updated: 2024-12-12T15:44:45.428Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-601 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/504707 - https://hackerone.com/reports/2813673
CVE ID: CVE-2024-11275 State: PUBLISHED Published: 2024-12-13T08:24:52.066Z Last Updated: 2024-12-13T21:15:20.452Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: arraytics Products: WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin Problem Types: CWE-639 Description: The WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the /wp-json/timetics/v1/customers/ REST API endpoint in all versions up to, and including, 1.0.27. This makes it possible for authenticated attackers, with Timetics Customer acc
ll versions up to, and including, 1.0.27. This makes it possible for authenticated attackers, with Timetics Customer access and above, to delete arbitrary users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d68e250e-d850-4100-81db-3e3c48a3a4a1?source=cve - https://plugins.trac.wordpress.org/browser/timetics/trunk/core/customers/api-customer.php#L308 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3206505%40timetics&new=3206505%40timetics&sfp_email=&sfph_mail=#file199
CVE ID: CVE-2024-11276 State: PUBLISHED Published: 2024-12-06T08:24:53.619Z Last Updated: 2024-12-06T14:18:26.279Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: edgarrojas Products: PDF Builder for WooCommerce. Create invoices,packing slips and more Problem Types: CWE-79 Description: The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.2.136 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute
ut escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5f21a86b-52f4-4563-afce-32f1949ce5a1?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3202588%40woo-pdf-invoice-builder&new=3202588%40woo-pdf-invoice-builder&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11277 State: PUBLISHED Published: 2024-11-20T06:42:53.621Z Last Updated: 2024-11-20T15:16:27.531Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: aaron13100 Products: 404 Solution Problem Types: CWE-79 Description: The 404 Solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 2.35.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA A
y can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/259f9ea3-ac24-4bea-8d0d-c635a68d9c98?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3191597%40404-solution&new=3191597%40404-solution&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11278 State: PUBLISHED Published: 2024-11-20T04:31:28.809Z Last Updated: 2024-11-20T15:16:27.747Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: gdragon Products: GD bbPress Attachments Problem Types: CWE-79 Description: The GD bbPress Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.7.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Anal
that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6f598cfc-4d41-4d22-95f0-47efdb7d07a2?source=cve - https://plugins.trac.wordpress.org/browser/gd-bbpress-attachments/trunk/code/front.php#L280 - https://plugins.trac.wordpress.org/changeset/3189863/gd-bbpress-attachments/trunk/code/front.php
CVE ID: CVE-2024-11279 State: PUBLISHED Published: 2024-12-12T03:23:06.246Z Last Updated: 2024-12-12T15:11:05.911Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: vberkel Products: Schema App Structured Data Problem Types: CWE-79 Description: The Schema App Structured Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.2.4. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additio
n pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/48db673c-f978-45f4-9d7b-eddd81cee62e?source=cve - https://wordpress.org/plugins/schema-app-structured-data-for-schemaorg/
CVE ID: CVE-2024-11280 State: PUBLISHED Published: 2024-12-17T11:24:29.909Z Last Updated: 2024-12-17T17:29:04.305Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: yuryonfolio Products: PPWP – Password Protect Pages Problem Types: CWE-200 Description: The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
ricted to higher-level roles such as administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d9ac0d84-dff4-4a03-a530-cac47ffaf2bb?source=cve - https://plugins.trac.wordpress.org/changeset/3208393/password-protect-page
CVE ID: CVE-2024-11281 State: PUBLISHED Published: 2024-12-25T06:42:12.979Z Last Updated: 2024-12-26T19:56:40.194Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Webkul Products: WooCommerce Point of Sale Problem Types: CWE-862 Description: The WooCommerce Point of Sale plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0. This is due to insufficient validation on the 'logged_in_user_id' value when option values are empty and the ability for attackers to change the email of arbitrary user accounts. This makes it possible for unauthenticated attackers to change the email of arbitrary user accounts, includin
accounts. This makes it possible for unauthenticated attackers to change the email of arbitrary user accounts, including administrators, and reset their password to gain access to the account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2a0671b1-1414-4315-8a2d-bd1aabe091a4?source=cve - https://codecanyon.net/item/wordpress-woocommerce-pos-system-point-of-sale/21254976
CVE ID: CVE-2024-11282 State: PUBLISHED Published: 2025-01-07T06:40:55.512Z Last Updated: 2025-01-07T16:55:48.572Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wpchill Products: Passster – Password Protect Pages and Content Problem Types: CWE-200 Description: The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.10 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator. Additional Analyst Notes: - CISA ADP Vu
rom posts that have been restricted to higher-level roles such as administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/11782a65-30b9-400e-8fe0-ab9f05ba5e42?source=cve - https://plugins.trac.wordpress.org/changeset/3211004/content-protector
CVE ID: CVE-2024-11283 State: PUBLISHED Published: 2025-03-14T04:22:34.127Z Last Updated: 2025-03-14T13:50:01.460Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: WP JobHunt Problem Types: CWE-289 Description: The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1. This is due to wp_ajax_google_api_login_callback function not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to access arbitrary candidate accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/
idate accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cfa487fb-c014-47f1-9537-73881ede30b4?source=cve - https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636
CVE ID: CVE-2024-11284 State: PUBLISHED Published: 2025-03-14T04:22:32.912Z Last Updated: 2025-03-14T13:59:46.348Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: WP JobHunt Problem Types: CWE-639 Description: The WP JobHunt plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.9. This is due to the plugin not properly validating a user's identity prior to updating their password through the account_settings_save_callback() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain acc
unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8afe386e-1e4f-4668-8309-6d47dedb008a?source=cve - https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636
CVE ID: CVE-2024-11285 State: PUBLISHED Published: 2025-03-14T04:22:31.482Z Last Updated: 2025-03-14T15:15:32.900Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: WP JobHunt Problem Types: CWE-639 Description: The WP JobHunt plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 7.1. This is due to the plugin not properly validating a user's identity prior to updating their details like email via the account_settings_callback() function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to r
r unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0e61c98d-a6f4-4ac0-b9f9-2b936c030413?source=cve - https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636
CVE ID: CVE-2024-11286 State: PUBLISHED Published: 2025-03-14T04:22:33.776Z Last Updated: 2025-03-14T13:57:05.975Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: WP JobHunt Problem Types: CWE-288 Description: The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the cs_parse_request() function. This makes it possible for unauthenticated attackers to to log in to any user's account, including administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https