Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e parameter in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in feedback form responses that will execute whenever a high-privileged user tries to view them. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bce9ba42-f574-47c1-9ea5-1e56f9da8e71?source=cve - https://plugins.trac.wordpress.org/browser/userfeedback-lite/tags/1.0.15/includes/frontend/class-userfeedback-frontend.php#L257
CVE ID: CVE-2024-5905 State: PUBLISHED Published: 2024-06-12T16:20:35.039Z Last Updated: 2024-08-01T21:25:03.270Z Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-346 Description: A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to disrupt Cortex XDR agent protection mechanisms using this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-5905
CVE ID: CVE-2024-5906 State: PUBLISHED Published: 2024-06-12T16:22:38.881Z Last Updated: 2024-08-01T21:25:03.163Z Vendors: Palo Alto Networks Products: Prisma Cloud Compute Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://secu
that other user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-5906
CVE ID: CVE-2024-5907 State: PUBLISHED Published: 2024-06-12T16:26:39.742Z Last Updated: 2024-08-01T21:25:03.047Z Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-269 Description: A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-5907
CVE ID: CVE-2024-5908 State: PUBLISHED Published: 2024-06-12T16:28:08.131Z Last Updated: 2024-08-09T19:08:25.260Z Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-532 Description: A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these encrypted credentials are exposed to recipients of the application logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
f the application logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-5908
CVE ID: CVE-2024-5909 State: PUBLISHED Published: 2024-06-12T16:29:23.822Z Last Updated: 2024-08-01T21:25:03.192Z Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-269 Description: A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-5909
CVE ID: CVE-2024-5910 State: PUBLISHED Published: 2024-07-10T18:39:26.006Z Last Updated: 2025-10-21T22:55:49.276Z Vendors: Palo Alto Networks Products: Expedition Problem Types: CWE-306 Description: Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-5910
CVE ID: CVE-2024-5911 State: PUBLISHED Published: 2024-07-10T18:40:02.209Z Last Updated: 2024-08-01T21:25:03.109Z Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-434 Description: An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetwo
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-5911
CVE ID: CVE-2024-5912 State: PUBLISHED Published: 2024-07-10T18:40:16.240Z Last Updated: 2024-08-01T21:25:03.178Z Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-347 Description: An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-5912
CVE ID: CVE-2024-5913 State: PUBLISHED Published: 2024-07-10T18:40:29.769Z Last Updated: 2024-08-06T04:19:19.068Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-20 Description: An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-5913
CVE ID: CVE-2024-5914 State: PUBLISHED Published: 2024-08-14T16:40:00.276Z Last Updated: 2024-08-14T18:17:47.424Z Vendors: Palo Alto Networks Products: Cortex XSOAR CommonScripts Problem Types: CWE-77 Description: A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-5914
CVE ID: CVE-2024-5915 State: PUBLISHED Published: 2024-08-14T16:40:41.840Z Last Updated: 2024-08-20T13:20:36.459Z Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-732 Description: A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-5915
CVE ID: CVE-2024-5916 State: PUBLISHED Published: 2024-08-14T16:41:15.812Z Last Updated: 2025-04-30T18:33:26.243Z Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-313 Description: An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-5916
CVE ID: CVE-2024-5917 State: PUBLISHED Published: 2024-11-14T09:39:40.266Z Last Updated: 2025-01-15T22:24:12.795Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS Problem Types: CWE-918 Description: A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-5917
CVE ID: CVE-2024-5918 State: PUBLISHED Published: 2024-11-14T09:38:29.319Z Last Updated: 2024-11-14T19:35:53.159Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-295 Description: An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect portal or GlobalProtect gateway as a different legitimate user. This attack is possible only if you "Allow Authentication with User Credentials OR Client Certificate." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-
icate." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-5918
CVE ID: CVE-2024-5919 State: PUBLISHED Published: 2024-11-14T09:36:46.390Z Last Updated: 2024-11-14T19:41:04.355Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-611 Description: A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the firewall management interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-5919
CVE ID: CVE-2024-5920 State: PUBLISHED Published: 2024-11-14T09:40:14.513Z Last Updated: 2025-04-30T18:39:21.484Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://secu
legitimate PAN-OS administrator's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-5920
CVE ID: CVE-2024-5921 State: PUBLISHED Published: 2024-11-27T03:50:13.596Z Last Updated: 2025-02-20T22:30:01.359Z Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-295 Description: An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint. Please subscribe to our RSS feed https://security.paloaltonetworks.com/r
e malicious root certificates on that endpoint. Please subscribe to our RSS feed https://security.paloaltonetworks.com/rss.xml to be alerted to new updates to this and other advisories. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-5921 - https://blog.amberwolf.com/blog/2024/november/palo-alto-globalprotect---code-execution-and-privilege-escalation-via-malicious-vpn-server-cve-2024-5921/ - https://github.com/AmberWolfCyber/NachoVPN
CVE ID: CVE-2024-5922 State: PUBLISHED Published: 2024-06-28T08:33:29.855Z Last Updated: 2024-08-01T21:25:03.188Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tislam100 Products: Scylla lite Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Scylla lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 1.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbi
ut escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c57bffc8-1ee5-4380-a78f-f4fc8c606861?source=cve - https://themes.trac.wordpress.org/browser/scylla-lite/1.8.3/lib/includes/shortcodes.php#L139
CVE ID: CVE-2024-5924 State: PUBLISHED Published: 2024-06-13T19:40:13.179Z Last Updated: 2024-08-01T21:25:03.164Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dropbox Products: Dropbox Desktop Problem Types: CWE-693 Description: Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Dropbox Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of shared folders. When syncing files from a share
r open a malicious file. The specific flaw exists within the handling of shared folders. When syncing files from a shared folder belonging to an untrusted account, the Dropbox desktop application does not apply the Mark-of-the-Web to the local files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-23991. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-677/
CVE ID: CVE-2024-5925 State: PUBLISHED Published: 2024-06-28T08:33:28.861Z Last Updated: 2024-08-01T21:25:03.176Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tislam100 Products: Theron Lite Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Theron Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitr
escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b4737bb2-1bb4-4986-9df5-5978fc46f2ec?source=cve - https://themes.trac.wordpress.org/browser/theron-lite/2.0/lib/includes/shortcodes.php#L76
CVE ID: CVE-2024-5926 State: PUBLISHED Published: 2024-06-30T00:00:13.962Z Last Updated: 2024-08-01T21:25:03.166Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) Vendors: stitionai Products: stitionai/devika Problem Types: CWE-29 Description: A path traversal vulnerability in the get-project-files functionality of stitionai/devika allows attackers to read arbitrary files from the filesystem and cause a Denial of Service (DoS). This issue is present in all versions of the application. The vulnerability arises due to insufficient path sanitization for the 'project-name' parameter, enabling attackers to specify paths that traverse the filesystem. By setting 'project-n
or the 'project-name' parameter, enabling attackers to specify paths that traverse the filesystem. By setting 'project-name' to the root directory, an attacker can cause the application to attempt to read the entire filesystem, leading to a DoS condition. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/19af24fe-9b90-4638-8fbc-b18def6985d7
CVE ID: CVE-2024-5927 State: REJECTED Published: N/A Last Updated: 2024-06-13T10:18:57.400Z Description: No description available.
CVE ID: CVE-2024-5928 State: PUBLISHED Published: 2024-08-21T16:12:11.872Z Last Updated: 2024-08-21T17:43:04.680Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: VIPRE Products: Advanced Security Problem Types: CWE-59 Description: VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Patch Management Agent. By creating a symbolic link, an att
loit this vulnerability. The specific flaw exists within the Patch Management Agent. By creating a symbolic link, an attacker can abuse the agent to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22315. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-817/ - https://success.vipre.com/en_US/home-windows-release-notes/home-windows-release-notes-20240227
CVE ID: CVE-2024-5929 State: PUBLISHED Published: 2024-08-21T16:12:17.122Z Last Updated: 2024-08-21T17:42:18.984Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: VIPRE Products: Advanced Security Problem Types: CWE-427 Description: VIPRE Advanced Security PMAgent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Patch Management Agent. The issue result
tem in order to exploit this vulnerability. The specific flaw exists within the Patch Management Agent. The issue results from loading a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22316. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-818/ - https://success.vipre.com/en_US/home-windows-release-notes/home-windows-release-notes-20240227
CVE ID: CVE-2024-5930 State: PUBLISHED Published: 2024-08-21T16:12:21.066Z Last Updated: 2024-08-21T17:41:30.614Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: VIPRE Products: Advanced Security Problem Types: CWE-732 Description: VIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Anti Malware Service. The issue results from inco
der to exploit this vulnerability. The specific flaw exists within the Anti Malware Service. The issue results from incorrect permissions on a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22345. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-819/ - https://success.vipre.com/en_US/home-windows-release-notes/home-windows-release-notes-20240227
CVE ID: CVE-2024-5931 State: PUBLISHED Published: 2024-09-13T19:41:57.713Z Last Updated: 2025-09-17T05:08:13.479Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-1284, CWE-121 Description: BT: Unchecked user input in bap_broadcast_assistant Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-r8h3-64gp-wv7f
CVE ID: CVE-2024-5932 State: PUBLISHED Published: 2024-08-20T02:03:16.108Z Last Updated: 2024-08-20T13:40:12.334Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: webdevmattcrom Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-502 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and
attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/93e2d007-8157-42c5-92ad-704dc80749a3?source=cve - https://plugins.trac.wordpress.org/browser/give/tags/3.12.0/includes/login-register.php#L235 - https://plugins.trac.wordpress.org/browser/give/tags/3.12.0/includes/process-donation.php#L420 - https://plugins.trac.wordpress.org/browser/give/tags/3.12.0/vendor/vendor-prefixed/fakerphp/faker/src/Faker/ValidGenerator.php#L80 - https://plugins.trac.wordpress.org/browser/give/tags/3
vendor-prefixed/fakerphp/faker/src/Faker/ValidGenerator.php#L80 - https://plugins.trac.wordpress.org/browser/give/tags/3.12.0/vendor/tecnickcom/tcpdf/tcpdf.php#L7861 - https://plugins.trac.wordpress.org/browser/give/tags/3.12.0/src/DonorDashboards/Tabs/EditProfileTab/AvatarRoute.php#L51 - https://plugins.trac.wordpress.org/changeset/3132247/ - https://www.wordfence.com/blog/2024/08/4998-bounty-awarded-and-100000-wordpress-sites-protected-against-unauthenticated-remote-code-execution-vulnerability-patched-in-givewp-wordpress-plugin/