Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-3818 State: PUBLISHED Published: 2025-04-19T19:31:19.855Z Last Updated: 2025-05-29T13:11:18.512Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: webpy Products: web.py Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB._process_insert_query of the file web/db.py. The manipulation of the argument seqname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.305724 - h
ditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.305724 - https://vuldb.com/?ctiid.305724 - https://vuldb.com/?submit.555649 - https://noppgwz8if.feishu.cn/docx/TxjpddUpTokyBwxibSgcTRr7nUf
CVE ID: CVE-2025-3819 State: PUBLISHED Published: 2025-04-19T20:00:12.212Z Last Updated: 2025-04-21T02:20:13.318Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Men Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305725 - https://vuldb.com/?ctiid.305725 - https://vuldb.com/?submit.555687 - https://github.com/wcndy13/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-3820 State: PUBLISHED Published: 2025-04-19T20:31:06.957Z Last Updated: 2025-04-21T14:41:40.160Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: W12, i24 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUplinkCheckSet of the file /bin/httpd. The manipulation of the argument hostIp1/hostIp2 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305726 - https://vuldb.com/?ctiid.305726 - https://vuldb.com/?submit.555728 - https://github.com/02Tn/vul/issues/4 - https://www.tenda.com.cn/
CVE ID: CVE-2025-3821 State: PUBLISHED Published: 2025-04-20T04:00:12.833Z Last Updated: 2025-04-21T02:09:28.769Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file add-admin.php. The manipulation of the argument txtpassword/txtfullname/txtemail leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analys
g. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305728 - https://vuldb.com/?ctiid.305728 - https://vuldb.com/?submit.555918 - https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/xss_from_input_with_post.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3822 State: PUBLISHED Published: 2025-04-20T06:31:05.079Z Last Updated: 2025-04-21T02:06:50.418Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirm_password/txtnew_password/txtold_password leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be
s to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305729 - https://vuldb.com/?ctiid.305729 - https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/xss_from_input_with_post.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3823 State: PUBLISHED Published: 2025-04-20T10:31:05.566Z Last Updated: 2025-04-21T13:24:36.550Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file add-stock.php. The manipulation of the argument txttotalcost/txtproductID/txtprice/txtexpirydate leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additio
ing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305730 - https://vuldb.com/?ctiid.305730 - https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/xss_from_input_with_post.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3824 State: PUBLISHED Published: 2025-04-20T11:00:09.140Z Last Updated: 2025-04-21T13:13:18.590Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file add-product.php. The manipulation of the argument txtprice/txtproduct_name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analy
ing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305731 - https://vuldb.com/?ctiid.305731 - https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/xss_from_input_with_post.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3825 State: PUBLISHED Published: 2025-04-20T11:31:05.264Z Last Updated: 2025-04-21T02:05:04.645Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this issue is some unknown functionality of the file add-category.php. The manipulation of the argument txtcategory_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional A
ripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305732 - https://vuldb.com/?ctiid.305732 - https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/xss_from_input_with_post.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3826 State: PUBLISHED Published: 2025-04-20T13:00:12.321Z Last Updated: 2025-04-21T02:02:43.919Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsupplier_name/txtaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst
sible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305733 - https://vuldb.com/?ctiid.305733 - https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/xss_from_input_with_post.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3827 State: PUBLISHED Published: 2025-04-20T15:00:10.618Z Last Updated: 2025-04-21T02:00:24.365Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Men Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305734 - https://vuldb.com/?ctiid.305734 - https://vuldb.com/?submit.555928 - https://github.com/NuoNuo-L/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-3828 State: PUBLISHED Published: 2025-04-20T15:31:05.684Z Last Updated: 2025-04-21T01:59:41.047Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Men Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/view-appointment.php?viewid=11. The manipulation of the argument remark leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CIS
een disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305735 - https://vuldb.com/?ctiid.305735 - https://vuldb.com/?submit.555929 - https://github.com/NuoNuo-L/cve/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-3829 State: PUBLISHED Published: 2025-04-20T16:00:07.222Z Last Updated: 2025-04-21T01:58:46.953Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Men Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305736 - https://vuldb.com/?ctiid.305736 - https://vuldb.com/?submit.555930 - https://github.com/NuoNuo-L/cve/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-3830 State: PUBLISHED Published: 2025-04-20T16:31:04.628Z Last Updated: 2025-04-21T01:57:55.504Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: kuangstudy Products: KuangSimpleBBS Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in kuangstudy KuangSimpleBBS 1.0. It has been declared as critical. Affected by this vulnerability is the function fileUpload of the file src/main/java/com/kuang/controller/QuestionController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP V
launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305737 - https://vuldb.com/?ctiid.305737 - https://vuldb.com/?submit.556133 - https://github.com/caigo8/CVE-md/blob/main/KuangSimpeBBS/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
CVE ID: CVE-2025-3831 State: PUBLISHED Published: 2025-08-12T14:48:26.195Z Last Updated: 2025-08-12T15:02:44.904Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: checkpoint Products: Check Point Harmony SASE Problem Types: CWE-200, CWE-798 Description: Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.checkpoint.com/results/sk/sk183761
CVE ID: CVE-2025-3832 State: PUBLISHED Published: 2025-04-24T08:23:50.608Z Last Updated: 2025-04-24T13:53:02.572Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jeremyshapiro Products: FuseDesk Problem Types: CWE-79 Description: The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘successredirect’ parameter in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes
ect arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/baf12413-eb45-44c3-a6c9-f5a048d6500d?source=cve - https://plugins.trac.wordpress.org/browser/fusedesk/trunk/fusedesk.php#L516 - https://wordpress.org/plugins/fusedesk/#developers
CVE ID: CVE-2025-3833 State: PUBLISHED Published: 2025-05-14T11:00:27.309Z Last Updated: 2025-05-14T13:30:00.739Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: ManageEngine Products: ADSelfService Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-3833.html
CVE ID: CVE-2025-3834 State: PUBLISHED Published: 2025-05-14T11:05:34.690Z Last Updated: 2025-05-14T13:28:48.403Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2025-3834.html
CVE ID: CVE-2025-3835 State: PUBLISHED Published: 2025-06-09T10:29:18.379Z Last Updated: 2025-06-14T03:56:13.798Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: ManageEngine Products: Exchange Reporter Plus Problem Types: CWE-434 Description: Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/exchange-reports/advisory/CVE-2025-3835.html
CVE ID: CVE-2025-3836 State: PUBLISHED Published: 2025-05-22T10:38:26.473Z Last Updated: 2025-05-22T18:21:44.623Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2025-3836.html
CVE ID: CVE-2025-3837 State: PUBLISHED Published: 2025-04-21T09:20:14.110Z Last Updated: 2025-04-21T13:05:14.280Z Vendors: Saviynt Products: OVA based Connect Problem Types: CWE-20 Description: An improper input validation vulnerability is identified in the End of Life (EOL) OVA based connect component which is deployed for installation purposes in the customer internal network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. Under certain circumstances, an actor can manipulate a specific request parameter and inject code execution payload which could lead to a remote code execution on the infrastructure hosting this component. Additional A
execution payload which could lead to a remote code execution on the infrastructure hosting this component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://saviynt.com/trust-compliance-security
CVE ID: CVE-2025-3838 State: PUBLISHED Published: 2025-04-21T09:33:33.390Z Last Updated: 2025-04-21T12:47:37.813Z Vendors: Saviynt Products: OVA based Connect Problem Types: CWE-863, CWE-327 Description: An Improper Authorization vulnerability was identified in the EOL OVA based connect component which is deployed for installation purposes in the customer internal network. Under certain conditions, this could allow a bad actor to gain unauthorized access to the local db containing weakly hashed credentials of the installer. This EOL component was deprecated in September 2023 with end of support extended till January 2024. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
3 with end of support extended till January 2024. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://saviynt.com/trust-compliance-security
CVE ID: CVE-2025-3840 State: PUBLISHED Published: 2025-04-21T09:39:16.343Z Last Updated: 2025-04-21T12:38:16.967Z Vendors: Saviynt Products: OVA based Connect Problem Types: CWE-79 Description: An improper neutralization of input vulnerability was identified in the End of Life (EOL) OVA based connect installer component which is deployed for installation purposes in a customer network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. An actor can manipulate the action parameter of the login form to inject malicious scripts which would lead to a XSS attack under certain conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References
which would lead to a XSS attack under certain conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://saviynt.com/trust-compliance-security
CVE ID: CVE-2025-3841 State: PUBLISHED Published: 2025-04-21T19:31:04.546Z Last Updated: 2025-04-24T12:10:27.236Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: wix-incubator Products: jam Problem Types: CWE-1336, CWE-791 Description: A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9. This affects an unknown part of the file jam.py of the component Jinja2 Template Handler. The manipulation of the argument config['template'] leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack on the local host. The exploit has been di
ecial elements used in a template engine. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305769 - https://vuldb.com/?ctiid.305769 - https://vuldb.com/?submit.555905 - https://github.com/wix-incubator/jam/issues/1
CVE ID: CVE-2025-3842 State: PUBLISHED Published: 2025-04-21T20:31:04.375Z Last Updated: 2025-04-22T02:22:52.550Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: panhainan Products: DS-Java Problem Types: CWE-94, CWE-74 Description: A vulnerability was found in panhainan DS-Java 1.0 and classified as critical. This issue affects the function uploadUserPic.action of the file src/com/phn/action/FileUpload.java. The manipulation of the argument fileUpload leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305771 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305771 - https://vuldb.com/?ctiid.305771 - https://vuldb.com/?submit.556135 - https://github.com/caigo8/CVE-md/blob/main/DS-Java/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0RCE.md
CVE ID: CVE-2025-3843 State: PUBLISHED Published: 2025-04-21T22:00:07.244Z Last Updated: 2025-04-22T02:17:52.488Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: panhainan Products: DS-Java Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in panhainan DS-Java 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305772 - https://vuldb.com/?ctiid.305772 - https://vuldb.com/?submit.556136 - htt
t: References: - https://vuldb.com/?id.305772 - https://vuldb.com/?ctiid.305772 - https://vuldb.com/?submit.556136 - https://github.com/caigo8/CVE-md/blob/main/DS-Java/CSRF.md
CVE ID: CVE-2025-3844 State: PUBLISHED Published: 2025-05-07T01:43:07.411Z Last Updated: 2025-05-07T14:03:23.728Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: peprodev Products: PeproDev Ultimate Profile Solutions Problem Types: CWE-288 Description: The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req() function not having proper restrictions on the change_user_meta functionality that makes it possible to set a OTP code and subsequently log in with that OTP code. This makes it possible for unauthenticated attackers to login as other users on the sit
ently log in with that OTP code. This makes it possible for unauthenticated attackers to login as other users on the site, including administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/65be9417-7029-4f34-b834-98208a42743b?source=cve - https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L1483 - https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/7.5.2/login/login.php#L2836