Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-54391 State: PUBLISHED Published: 2024-12-16T14:14:05.877Z Last Updated: 2024-12-16T19:55:56.529Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Matt Walters Products: WordPress Filter Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Matt Walters WordPress Filter allows Stored XSS.This issue affects WordPress Filter: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wordpress-filter/vulnerability/wordpress-wordpress-filter-plugin-1-4-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54392 State: PUBLISHED Published: 2024-12-16T14:14:05.293Z Last Updated: 2024-12-16T19:56:06.819Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Midoks Products: WP微信机器人 Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Midoks WP微信机器人 allows Stored XSS.This issue affects WP微信机器人: from n/a through 5.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-weixin-robot/vulnerability/wordpress-wp-plugin-5-3-5-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54393 State: PUBLISHED Published: 2024-12-16T14:14:04.731Z Last Updated: 2024-12-16T19:56:18.446Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sheikh Heera Products: WP Fiddle Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sheikh Heera WP Fiddle allows Stored XSS.This issue affects WP Fiddle: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-fiddle/vulnerability/wordpress-wp-fiddle-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54394 State: PUBLISHED Published: 2024-12-16T14:14:04.138Z Last Updated: 2024-12-16T19:58:28.517Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Web solution soft Products: Mandrill WP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Web solution soft Mandrill WP allows Stored XSS.This issue affects Mandrill WP: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/email-form-under-post/vulnerability/wordpress-mandrill-wp-plugin-1-0-5-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54395 State: PUBLISHED Published: 2024-12-16T14:31:26.246Z Last Updated: 2024-12-16T19:43:15.132Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Becky Sanders Products: Increase Sociability Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Becky Sanders Increase Sociability allows Reflected XSS.This issue affects Increase Sociability: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/increase-sociability/vulnerability/wordpress-increase-sociability-plugin-1-3-0-reflected
k.com/database/wordpress/plugin/increase-sociability/vulnerability/wordpress-increase-sociability-plugin-1-3-0-reflected-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54396 State: PUBLISHED Published: 2024-12-16T14:14:11.329Z Last Updated: 2024-12-16T19:54:19.587Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Ryan Products: Bet sport Free Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ryan Bet sport Free allows Cross Site Request Forgery.This issue affects Bet sport Free: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bet-sport-free/vulnerability/wordpress-bet-sport-free-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54397 State: PUBLISHED Published: 2024-12-16T14:14:03.529Z Last Updated: 2024-12-16T19:58:36.996Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Antonio Gocaj Products: Go Animate Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Antonio Gocaj Go Animate allows Stored XSS.This issue affects Go Animate: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/goanimate/vulnerability/wordpress-go-animate-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54398 State: PUBLISHED Published: 2024-12-16T14:14:02.930Z Last Updated: 2024-12-16T19:58:45.579Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Project Caruso Products: Flaming Forms Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Project Caruso Flaming Forms allows Stored XSS.This issue affects Flaming Forms: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/flaming-forms/vulnerability/wordpress-flaming-forms-plugin-1-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54399 State: PUBLISHED Published: 2024-12-16T14:14:02.223Z Last Updated: 2024-12-16T19:58:53.477Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CRUDLab Products: CRUDLab Google Plus Button Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab CRUDLab Google Plus Button allows Stored XSS.This issue affects CRUDLab Google Plus Button: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/crudlab-google-plus/vulnerability/wordpress-crudlab-google-plus-button-plugin-1-0-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54400 State: PUBLISHED Published: 2024-12-16T14:14:01.530Z Last Updated: 2024-12-16T19:59:02.504Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MELONIQ.NET Products: AppMaps Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in MELONIQ.NET AppMaps allows Stored XSS.This issue affects AppMaps: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/appmaps/vulnerability/wordpress-appmaps-plugin-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54401 State: PUBLISHED Published: 2024-12-16T14:14:00.937Z Last Updated: 2024-12-16T19:59:14.367Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Turcu Ciprian Products: Advanced Fancybox Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Turcu Ciprian Advanced Fancybox allows Stored XSS.This issue affects Advanced Fancybox: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-fancybox/vulnerability/wordpress-advanced-fancybox-plugin-1-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54402 State: PUBLISHED Published: 2024-12-16T14:14:00.278Z Last Updated: 2024-12-16T19:59:23.111Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Jozoor Products: Arabic Webfonts Problem Types: CWE-862 Description: Missing Authorization vulnerability in Jozoor Arabic Webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through 1.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/arabic-webfonts/vulnerability/wordpress-arabic-webfonts-plugin-1-4-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-54403 State: PUBLISHED Published: 2024-12-16T14:31:25.640Z Last Updated: 2024-12-16T19:43:21.387Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ryan Scott Products: Visual Recent Posts Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Scott Visual Recent Posts allows Reflected XSS.This issue affects Visual Recent Posts: from n/a through 1.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/visual-recent-posts/vulnerability/wordpress-visual-recent-posts-plugin-1-2-3-reflected-cross-site
abase/wordpress/plugin/visual-recent-posts/vulnerability/wordpress-visual-recent-posts-plugin-1-2-3-reflected-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54404 State: PUBLISHED Published: 2024-12-16T14:13:59.489Z Last Updated: 2024-12-16T19:59:32.607Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Nazmul Ahsan Products: MDC Comment Toolbar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC Comment Toolbar allows Stored XSS.This issue affects MDC Comment Toolbar: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mdc-comment-toolbar/vulnerability/wordpress-mdc-comment-toolbar-plugin-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54405 State: PUBLISHED Published: 2024-12-16T14:13:58.906Z Last Updated: 2024-12-16T19:59:41.224Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Andy Chapman Products: ECT Social Share Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Andy Chapman ECT Social Share allows Stored XSS.This issue affects ECT Social Share: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ect-social-share/vulnerability/wordpress-ect-social-share-plugin-1-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54406 State: PUBLISHED Published: 2024-12-16T14:31:25.003Z Last Updated: 2024-12-16T19:43:27.895Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Reza Moallemi Products: Comments On Feed Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Reza Moallemi Comments On Feed allows Reflected XSS.This issue affects Comments On Feed: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/comments-on-feed/vulnerability/wordpress-comments-on-feed-plugin-1-2-1-reflected-cross-site-scriptin
se/wordpress/plugin/comments-on-feed/vulnerability/wordpress-comments-on-feed-plugin-1-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54407 State: PUBLISHED Published: 2024-12-16T14:13:58.314Z Last Updated: 2024-12-16T19:59:52.766Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: 随意的风 Products: CK and SyntaxHighlighter Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in 随意的风 CK and SyntaxHighlighter allows Stored XSS.This issue affects CK and SyntaxHighlighter: from n/a through 3.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ck-and-syntaxhighlighter/vulnerability/wordpress-ck-and-syntaxhighlighter-plugin-3-4-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54408 State: PUBLISHED Published: 2024-12-16T14:13:57.702Z Last Updated: 2024-12-16T16:40:15.201Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Jake H. Products: Youtube Video Grid Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jake H. Youtube Video Grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/youmax-channel-embeds-for-youtube-businesses/vulnerability/wordpress-youtube-video-grid-plugin-1-9-csrf-t
rdpress/plugin/youmax-channel-embeds-for-youtube-businesses/vulnerability/wordpress-youtube-video-grid-plugin-1-9-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2024-54409 State: PUBLISHED Published: 2024-12-16T14:13:56.855Z Last Updated: 2024-12-16T20:00:01.480Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: fzmaster @ XPD Products: XPD Reduce Image Filesize Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in fzmaster @ XPD XPD Reduce Image Filesize allows Stored XSS.This issue affects XPD Reduce Image Filesize: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/xpd-reduce-image-filesize/vulnerability/wordpress-xpd-reduce-image-filesize-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=
duce-image-filesize/vulnerability/wordpress-xpd-reduce-image-filesize-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54410 State: PUBLISHED Published: 2024-12-16T14:13:56.250Z Last Updated: 2024-12-16T20:00:14.335Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Toby Cox Products: SOPA Blackout Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Toby Cox SOPA Blackout allows Stored XSS.This issue affects SOPA Blackout: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sopa-blackout/vulnerability/wordpress-sopa-blackout-plugin-1-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54411 State: PUBLISHED Published: 2024-12-16T14:13:55.625Z Last Updated: 2024-12-16T20:00:23.803Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: hosting.io, campaigns.io Products: WP Controller Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in hosting.io, campaigns.io WP Controller allows Stored XSS.This issue affects WP Controller: from n/a through 3.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-management-controller/vulnerability/wordpress-wp-controller-plugin-3-2-0-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-54412 State: PUBLISHED Published: 2024-12-16T14:13:54.967Z Last Updated: 2024-12-16T20:00:32.420Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ecommerce Templates Products: ECT Product Carousel Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ecommerce Templates ECT Product Carousel allows Stored XSS.This issue affects ECT Product Carousel: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ect-product-carousel/vulnerability/wordpress-ect-product-carousel-plugin-1-9-csrf-to-stored-cross-site-scripting-vulnerability?_s_i
-carousel/vulnerability/wordpress-ect-product-carousel-plugin-1-9-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-54413 State: PUBLISHED Published: 2024-12-16T14:13:54.286Z Last Updated: 2024-12-16T20:00:40.795Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Stefan Brandt Products: Display Future Posts Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Stefan Brandt Display Future Posts allows Stored XSS.This issue affects Display Future Posts: from n/a through 0.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/display-future-posts/vulnerability/wordpress-display-future-posts-plugin-0-2-3-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-54414 State: PUBLISHED Published: 2024-12-16T14:13:53.722Z Last Updated: 2024-12-16T20:00:51.809Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: geoWP Products: Geoportail Shortcode Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in geoWP Geoportail Shortcode allows Stored XSS.This issue affects Geoportail Shortcode: from n/a through 2.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/geoportail-shortcode/vulnerability/wordpress-geoportail-shortcode-plugin-2-4-4-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-54415 State: PUBLISHED Published: 2024-12-16T14:13:53.138Z Last Updated: 2024-12-16T20:01:00.970Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Cyle Conoly Products: WP-HideThat Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Cyle Conoly WP-HideThat allows Stored XSS.This issue affects WP-HideThat: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-hide-that/vulnerability/wordpress-wp-hidethat-plugin-1-2-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-54416 State: PUBLISHED Published: 2024-12-16T14:13:52.538Z Last Updated: 2024-12-16T20:01:11.319Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Navdeep Kumar Products: Wp Login with Ajax Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Navdeep Kumar Wp Login with Ajax allows Stored XSS.This issue affects Wp Login with Ajax: from n/a through 0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-login-with-ajax/vulnerability/wordpress-wp-login-with-ajax-plugin-0-6-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-54417 State: PUBLISHED Published: 2024-12-16T14:14:21.628Z Last Updated: 2024-12-16T16:39:11.355Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Pixelgrade Products: PixProof Problem Types: CWE-862 Description: Missing Authorization vulnerability in Pixelgrade PixProof allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PixProof: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pixproof/vulnerability/wordpress-pixproof-plugin-2-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-54418 State: PUBLISHED Published: 2024-12-16T14:14:10.722Z Last Updated: 2024-12-16T19:54:30.156Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Diversified Technology Corp., WPYog, and Gagan Deep Singh Products: DTC Documents Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Diversified Technology Corp., WPYog, and Gagan Deep Singh DTC Documents allows Cross Site Request Forgery.This issue affects DTC Documents: from n/a through 1.1.05. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dtc-documents/vulnerability/wordpress-dtc-documents-plu
: References: - https://patchstack.com/database/wordpress/plugin/dtc-documents/vulnerability/wordpress-dtc-documents-plugin-1-1-05-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54419 State: PUBLISHED Published: 2024-12-16T14:14:10.120Z Last Updated: 2024-12-16T19:54:45.002Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Mansur Ahamed Products: Ui Slider Filter By Price Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mansur Ahamed Ui Slider Filter By Price allows Cross Site Request Forgery.This issue affects Ui Slider Filter By Price: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ui-slider-filter-by-price/vulnerability/wordpress-ui-slider-filter-by-price-plugin-1-1-cross-site-request-forg
ss/plugin/ui-slider-filter-by-price/vulnerability/wordpress-ui-slider-filter-by-price-plugin-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54420 State: PUBLISHED Published: 2024-12-16T14:13:51.957Z Last Updated: 2024-12-16T20:01:24.533Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Aleksander Novikov Products: Metrika Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Aleksander Novikov Metrika allows Cross Site Request Forgery.This issue affects Metrika: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/metrika/vulnerability/wordpress-metrika-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54421 State: PUBLISHED Published: 2024-12-16T14:13:51.375Z Last Updated: 2024-12-16T20:01:33.380Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sanjay Singh Negi Products: Floating Video Player Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sanjay Singh Negi Floating Video Player allows Stored XSS.This issue affects Floating Video Player: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/floating-player/vulnerability/wordpress-floating-video-player-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54422 State: PUBLISHED Published: 2024-12-16T14:31:24.274Z Last Updated: 2024-12-16T19:43:35.793Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Gaowei Tang Products: Evernote Sync Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gaowei Tang Evernote Sync allows Reflected XSS.This issue affects Evernote Sync: from n/a through 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/evernote-sync/vulnerability/wordpress-evernote-sync-plugin-3-0-0-reflected-cross-site-scripting-xss-vulnerability
plugin/evernote-sync/vulnerability/wordpress-evernote-sync-plugin-3-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54423 State: PUBLISHED Published: 2024-12-16T14:13:50.806Z Last Updated: 2024-12-16T20:01:42.454Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jesse Overright Products: Social Media Sharing Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jesse Overright Social Media Sharing allows Stored XSS.This issue affects Social Media Sharing: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-media-sharing/vulnerability/wordpress-social-media-sharing-plugin-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54424 State: PUBLISHED Published: 2024-12-16T14:13:50.199Z Last Updated: 2024-12-16T20:01:51.792Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ilya Chekalskiy Products: Like in Vk.com Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ilya Chekalskiy Like in Vk.com allows Stored XSS.This issue affects Like in Vk.com: from n/a through 0.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/like-on-vkontakte/vulnerability/wordpress-like-in-vk-com-plugin-0-5-2-csrf-to-stored-cross-site-scripting
rdpress/plugin/like-on-vkontakte/vulnerability/wordpress-like-in-vk-com-plugin-0-5-2-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve