Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-45733 State: PUBLISHED Published: 2024-05-16T20:47:09.057Z Last Updated: 2024-08-02T20:29:32.455Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure, CWE-1298 Description: Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html
CVE ID: CVE-2023-45734 State: PUBLISHED Published: 2024-02-02T06:19:00.202Z Last Updated: 2024-08-22T14:17:01.203Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787 Description: in OpenHarmony v3.2.4 and prior versions allow an adjacent attacker arbitrary code execution through out-of-bounds write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-02.md
CVE ID: CVE-2023-45735 State: PUBLISHED Published: 2024-02-06T21:48:14.731Z Last Updated: 2024-08-19T20:23:15.940Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Westermo Products: Lynx Problem Types: CWE-94 Description: A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-04
CVE ID: CVE-2023-45736 State: PUBLISHED Published: 2024-05-16T20:47:21.713Z Last Updated: 2024-08-02T20:29:31.668Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Power Gadget software for Windows Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE ID: CVE-2023-45737 State: PUBLISHED Published: 2023-12-26T07:20:36.390Z Last Updated: 2024-08-02T20:29:32.277Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting (XSS) Description: Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page and the Markdown Settings (/admin/markdown) page of GROWI versions prior to v3.5.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/ - https://jvn.jp/en/jp/JVN18715935/
CVE ID: CVE-2023-45738 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:14:09.368Z Description: No description available.
CVE ID: CVE-2023-45740 State: PUBLISHED Published: 2023-12-26T07:20:42.853Z Last Updated: 2025-04-23T16:03:49.231Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting (XSS) Description: Stored cross-site scripting vulnerability when processing profile images exists in GROWI versions prior to v4.1.3. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/ - https://jvn.jp/en/jp/JVN18715935/
CVE ID: CVE-2023-45741 State: PUBLISHED Published: 2023-12-26T07:28:42.765Z Last Updated: 2024-08-02T20:29:32.411Z Vendors: BUFFALO INC. Products: VR-S1000 Problem Types: OS command injection Description: VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.buffalo.jp/news/detail/20231225-01.html - https://jvn.jp/en/jp/JVN23771490/
CVE ID: CVE-2023-45742 State: PUBLISHED Published: 2024-07-08T15:22:27.586Z Last Updated: 2025-11-04T17:12:47.409Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: LevelOne, Realtek Products: WBR-6013, rtl819x Jungle SDK Problem Types: CWE-190 Description: An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerab
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1877
CVE ID: CVE-2023-45743 State: PUBLISHED Published: 2024-05-16T20:47:28.695Z Last Updated: 2024-08-02T20:29:32.247Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) DSA software uninstallers Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01031.html
CVE ID: CVE-2023-45744 State: PUBLISHED Published: 2024-04-17T12:55:48.462Z Last Updated: 2025-11-04T18:17:46.118Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H) Vendors: Peplink Products: Smart Reader Problem Types: CWE-284 Description: A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to configuration modification. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_repor
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1866 - https://forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256
CVE ID: CVE-2023-45745 State: PUBLISHED Published: 2024-05-16T20:47:24.558Z Last Updated: 2025-02-13T17:14:09.944Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) TDX module software Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html - https://security.netapp.com/advisory/ntap
www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html - https://security.netapp.com/advisory/ntap-20240621-0003/
CVE ID: CVE-2023-45746 State: PUBLISHED Published: 2023-10-30T04:57:43.561Z Last Updated: 2024-10-29T18:23:10.383Z Vendors: Six Apart Ltd. Products: Movable Type 7 (Movable Type 7 Series), Movable Type Advanced 7 (Movable Type 7 Series), Movable Type Premium, Movable Type Premium Advanced, Movable Type Cloud Edition (Version 7), Movable Type Premium Cloud Edition Problem Types: Cross-site scripting (XSS) Description: Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/versions are as follows: Movable Type 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5405 and earlier (Movab
as follows: Movable Type 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Premium 1.58 and earlier, Movable Type Premium Advanced 1.58 and earlier, Movable Type Cloud Edition (Version 7) r.5405 and earlier, and Movable Type Premium Cloud Edition 1.58 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://movabletype.org/news/2023/10/mt-79020-released.html - https://jvn.jp/en/jp/JVN39139884/
CVE ID: CVE-2023-45747 State: PUBLISHED Published: 2023-10-24T11:24:56.788Z Last Updated: 2025-02-19T21:20:37.568Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Syed Balkhi Products: WP Lightbox 2 Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Syed Balkhi WP Lightbox 2 plugin <= 3.0.6.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-lightbox-2/wordpress-wp-lightbox-2-plugin-3-0-6-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-45748 State: PUBLISHED Published: 2023-10-16T10:01:15.956Z Last Updated: 2024-09-16T14:43:50.792Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: MailMunch Products: MailChimp Forms by MailMunch Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch plugin <= 3.1.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mailchimp-forms-by-mailmunch/wordpress-mailchimp-forms-by-mailmunch-plugin-3-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-45749 State: PUBLISHED Published: 2023-10-16T10:04:33.520Z Last Updated: 2024-09-16T14:41:21.789Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Alexey Golubnichenko Products: AGP Font Awesome Collection Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin <= 3.2.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/agp-font-awesome-collection/wordpress-agp-font-awesome-collection-plugin-3-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-45750 State: PUBLISHED Published: 2023-10-24T11:28:01.344Z Last Updated: 2024-09-10T17:51:35.145Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: POSIMYTH Products: Nexter Extension Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in POSIMYTH Nexter Extension plugin <= 2.0.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/nexter-extension/wordpress-nexter-extension-plugin-2-0-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-45751 State: PUBLISHED Published: 2023-12-29T09:02:59.748Z Last Updated: 2024-08-02T20:29:31.646Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: POSIMYTH Products: Nexter Extension Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in POSIMYTH Nexter Extension.This issue affects Nexter Extension: from n/a through 2.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/nexter-extension/wordpress-nexter-extension-plugin-2-0-3-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2023-45752 State: PUBLISHED Published: 2023-10-16T10:06:58.208Z Last Updated: 2024-09-16T14:41:04.693Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: 10 Quality Products: Post Gallery Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in 10 Quality Post Gallery plugin <= 2.3.12 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-post-gallery/wordpress-post-gallery-plugin-2-3-12-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-45753 State: PUBLISHED Published: 2023-10-16T10:12:38.772Z Last Updated: 2024-09-16T14:38:03.603Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Gilles Dumas Products: which template file Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Gilles Dumas which template file plugin <= 4.6.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/which-template-file/wordpress-which-template-file-plugin-4-6-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-45754 State: PUBLISHED Published: 2023-10-24T11:31:09.558Z Last Updated: 2024-08-02T20:29:31.636Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: I Thirteen Web Solution Products: Easy Testimonial Slider and Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form allows Stored XSS.This issue affects Easy Testimonial Slider and Form: from n/a through 1.0.18. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-testimonial-rotator/wordpress-
- CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-testimonial-rotator/wordpress-easy-testimonial-slider-and-form-plugin-1-0-18-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-45755 State: PUBLISHED Published: 2023-10-24T11:34:08.866Z Last Updated: 2024-09-10T17:45:04.461Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: BuddyBoss Products: BuddyPress Global Search Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BuddyBoss BuddyPress Global Search plugin <= 1.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/buddypress-global-search/wordpress-buddypress-global-search-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-45756 State: PUBLISHED Published: 2023-10-24T11:40:50.202Z Last Updated: 2024-09-10T17:44:31.606Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Spider Teams Products: ApplyOnline – Application Form Builder and Manager Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spider Teams ApplyOnline – Application Form Builder and Manager plugin <= 2.5.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/apply-online/wordpress-applyonline-application-form-builder-and-manager-plugin-2-5-2-reflected-cross-site-sc
lnerability/apply-online/wordpress-applyonline-application-form-builder-and-manager-plugin-2-5-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-45757 State: PUBLISHED Published: 2023-10-16T08:01:41.036Z Last Updated: 2025-02-13T17:14:10.463Z Vendors: Apache Software Foundation Products: Apache bRPC Problem Types: CWE-79 Description: Security vulnerability in Apache bRPC <=1.6.0 on all platforms allows attackers to inject XSS code to the builtin rpcz page. An attacker that can send http request to bRPC server with rpcz enabled can inject arbitrary XSS code to the builtin rpcz page. Solution (choose one of three): 1. upgrade to bRPC > 1.6.0, download link: https://dist.apache.org/repos/dist/release/brpc/1.6.1/ 2. If you are using an old version of bRPC and hard to upgrade, you can apply this patch: https://github.com/
rpc/1.6.1/ 2. If you are using an old version of bRPC and hard to upgrade, you can apply this patch: https://github.com/apache/brpc/pull/2411 3. disable rpcz feature Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/6syxv32fqgl30brfpttrk4rfsb983hl4 - http://www.openwall.com/lists/oss-security/2023/10/16/8
CVE ID: CVE-2023-45758 State: PUBLISHED Published: 2023-10-24T11:44:12.966Z Last Updated: 2024-09-10T17:44:16.793Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Marco Milesi Products: Amministrazione Trasparente Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Amministrazione Trasparente plugin <= 8.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/amministrazione-trasparente/wordpress-amministrazione-trasparente-plugin-8-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-45759 State: PUBLISHED Published: 2023-10-24T11:48:20.947Z Last Updated: 2024-09-09T14:45:23.947Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Peter Keung Products: Peter’s Custom Anti-Spam Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Peter Keung Peter’s Custom Anti-Spam plugin <= 3.2.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/peters-custom-anti-spam-image/wordpress-peter-s-custom-anti-spam-plugin-3-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-45760 State: PUBLISHED Published: 2025-01-02T11:59:53.833Z Last Updated: 2025-01-03T19:11:00.644Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: gVectors Team Products: wpDiscuz Problem Types: CWE-862 Description: Missing Authorization vulnerability in gVectors Team wpDiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through 7.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpdiscuz/vulnerability/wordpress-wpdiscuz-plugin-7-6-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-45761 State: PUBLISHED Published: 2023-10-24T11:55:21.724Z Last Updated: 2024-09-09T14:44:40.910Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Joovii Products: Sendle Shipping Plugin Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Joovii Sendle Shipping Plugin plugin <= 5.13 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/official-sendle-shipping-method/wordpress-sendle-shipping-plugin-5-13-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-45762 State: PUBLISHED Published: 2023-12-07T12:17:42.012Z Last Updated: 2024-08-02T20:29:32.276Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Michael Uno (miunosoft) Products: Responsive Column Widgets Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Michael Uno (miunosoft) Responsive Column Widgets.This issue affects Responsive Column Widgets: from n/a through 1.2.7. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/responsive-column-widgets/wordpress-responsive-column-widgets-plugin-1-2-7-open-redirection-vulnerability?_
ulnerability/responsive-column-widgets/wordpress-responsive-column-widgets-plugin-1-2-7-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-45763 State: PUBLISHED Published: 2023-10-16T10:15:29.093Z Last Updated: 2024-09-13T19:39:37.982Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Taggbox Products: Taggbox Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Taggbox plugin <= 2.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/taggbox-widget/wordpress-taggbox-ugc-galleries-social-media-widgets-user-reviews-analytics-plugin-2-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-45764 State: PUBLISHED Published: 2023-10-24T11:58:05.694Z Last Updated: 2024-09-09T14:44:16.471Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Gopi Ramasamy Products: Scroll post excerpt Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Scroll post excerpt plugin <= 8.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/scroll-post-excerpt/wordpress-scroll-post-excerpt-plugin-8-0-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-45765 State: PUBLISHED Published: 2025-01-02T11:59:54.423Z Last Updated: 2025-01-03T19:10:50.383Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: weDevs Products: WP ERP Problem Types: CWE-862 Description: Missing Authorization vulnerability in weDevs WP ERP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through 1.12.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/erp/vulnerability/wordpress-wp-erp-plugin-1-12-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-45766 State: PUBLISHED Published: 2025-01-02T11:59:55.392Z Last Updated: 2025-01-03T19:10:39.606Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Poll Maker Team Products: Poll Maker Problem Types: CWE-862 Description: Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through 4.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/poll-maker/vulnerability/wordpress-poll-maker-plugin-4-7-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-45767 State: PUBLISHED Published: 2023-10-24T12:00:56.067Z Last Updated: 2024-09-09T21:01:44.715Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Wokamoto Products: Simple Tweet Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wokamoto Simple Tweet plugin <= 1.4.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-tweet/wordpress-simple-tweet-plugin-1-4-0-2-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-45768 State: PUBLISHED Published: 2023-10-24T12:04:53.347Z Last Updated: 2024-09-09T21:01:21.986Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Stephanie Leary Products: Next Page Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephanie Leary Next Page plugin <= 1.5.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/next-page/wordpress-next-page-plugin-1-5-2-cross-site-scripting-xss?_s_id=cve