Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-39280 State: PUBLISHED Published: 2022-02-06T20:47:37 Last Updated: 2024-08-04T02:06:40.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31. Additional Analyst Notes: - CVE Program Container: References: - https://www.korenix.com/en/product/search.aspx?kw=JetWave - http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html
CVE ID: CVE-2021-39282 State: PUBLISHED Published: 2021-08-18T16:59:05 Last Updated: 2024-08-04T02:06:41.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.live555.com/pipermail/live-devel/2021-August/021970.html - http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.13%5D
CVE ID: CVE-2021-39283 State: PUBLISHED Published: 2021-08-18T16:58:53 Last Updated: 2024-08-04T02:06:41.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.13%5D - http://lists.live555.com/pipermail/live-devel/2021-August/021969.html
CVE ID: CVE-2021-39285 State: PUBLISHED Published: 2021-09-07T12:40:37 Last Updated: 2024-08-04T02:06:42.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the administration web interface URL to create a XSS based attack. Additional Analyst Notes: - CVE Program Container: References: - https://versa-networks.com - https://github.com/pbgt/CVEs/blob/main/CVE-2021-39285.md
CVE ID: CVE-2021-39286 State: PUBLISHED Published: 2021-08-18T17:31:34 Last Updated: 2024-08-04T02:06:41.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webrecorder/pywb/commit/f7bd84cdacdd665ff73ae8d09a202f60be2ebae9 - https://github.com/webrecorder/pywb/compare/v-2.5.0...v-2.6.0
CVE ID: CVE-2021-39289 State: PUBLISHED Published: 2021-08-23T04:33:03 Last Updated: 2024-08-04T02:06:41.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800. Additional Analyst Notes: - CVE Program Container: References: - https://www.netmodule.com - http://seclists.org/fulldisclosure/2021/Aug/22
CVE ID: CVE-2021-39290 State: PUBLISHED Published: 2021-08-23T04:35:45 Last Updated: 2024-08-04T02:06:41.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NetModule devices allow Limited Session Fixation via PHPSESSID. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800. Additional Analyst Notes: - CVE Program Container: References: - https://www.netmodule.com - https://seclists.org/fulldisclosure/2021/Aug/22
CVE ID: CVE-2021-39291 State: PUBLISHED Published: 2021-08-23T04:37:50 Last Updated: 2024-08-04T02:06:40.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800. Additional Analyst Notes: - CVE Program Container: References: - https://www.netmodule.com - https://seclists.org/fulldisclosure/2021/Aug/22
CVE ID: CVE-2021-39293 State: PUBLISHED Published: 2022-01-24T00:00:00 Last Updated: 2024-08-04T02:06:41.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/golang-announce/c/dx9d7IOseHw - https://security.netapp.com/advisory/ntap-20220217-0009/ - https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf - https://lists.debian.org/debia
ry/ntap-20220217-0009/ - https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf - https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html
CVE ID: CVE-2021-39295 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T16:09:52.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI lan+) interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://openbmc.org - https://github.com/openbmc/openbmc - https://github.com/openbmc/docs/blob/master/release/release-notes.md - https://github.com/openbmc/openbmc/issues/3811 - https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q - https://www.intel.com/content/www/u
ttps://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html
CVE ID: CVE-2021-39296 State: PUBLISHED Published: 2021-09-09T00:00:00 Last Updated: 2024-08-04T02:06:41.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openbmc/openbmc - https://github.com/google/security-research/security/advisories/GHSA-gg9x-v835-m48q - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html
CVE ID: CVE-2021-39297 State: PUBLISHED Published: 2022-02-16T16:38:11 Last Updated: 2024-08-04T02:06:42.219Z Vendors: n/a Products: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS Problem Types: Arbitrary Code Execution; Escalation of Privilege Description: Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5661066-5661090-16
CVE ID: CVE-2021-39298 State: PUBLISHED Published: 2022-02-16T16:38:10.726517Z Last Updated: 2024-08-04T02:06:42.610Z Vendors: AMD Products: 2nd Gen EPYC, 3rd Gen EPYC, Ryzen 2000 Series, Ryzen 3000 Series , Ryzen 5000 Series Problem Types: n/a Description: A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 - https://www.amd.com/en/c
ntainer: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1027
CVE ID: CVE-2021-39299 State: PUBLISHED Published: 2022-02-16T16:38:13 Last Updated: 2024-08-04T02:06:41.526Z Vendors: n/a Products: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS Problem Types: Arbitrary Code Execution; Escalation of Privilege Description: Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5661066-5661090-16
CVE ID: CVE-2021-39300 State: PUBLISHED Published: 2022-02-16T16:38:13 Last Updated: 2024-08-04T02:06:42.454Z Vendors: n/a Products: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS Problem Types: Arbitrary Code Execution; Escalation of Privilege Description: Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5661066-5661090-16
CVE ID: CVE-2021-39301 State: PUBLISHED Published: 2022-02-16T16:38:12 Last Updated: 2024-08-04T02:06:41.737Z Vendors: n/a Products: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS Problem Types: Arbitrary Code Execution; Escalation of Privilege Description: Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_5661066-5661090-16
CVE ID: CVE-2021-39302 State: PUBLISHED Published: 2021-08-19T16:25:54 Last Updated: 2024-08-04T02:06:41.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/20d9020b76d1f6790c4d84e020d0cc97c929f66b
CVE ID: CVE-2021-39303 State: PUBLISHED Published: 2021-11-12T20:36:59 Last Updated: 2024-08-04T02:06:42.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.jamf.com/resources/product-documentation/jamf-pro-release-notes/ - https://docs.jamf.com/10.32.0/jamf-pro/release-notes/Resolved_Issues.html - https://blog.assetnote.io/2021/11/30/jamf-ssrf/ - https://community.jamf.com/t5/jamf-pro/what-s-new-in-jamf-pro-10-32-release/m-p/246505
CVE ID: CVE-2021-39304 State: PUBLISHED Published: 2021-10-13T14:34:54 Last Updated: 2024-08-04T02:06:41.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.proofpoint.com/us/blog - https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0007
CVE ID: CVE-2021-39306 State: PUBLISHED Published: 2021-12-22T18:08:42 Last Updated: 2024-08-04T02:06:41.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Authentication challenge text in WEP security. Additional Analyst Notes: - CVE Program Container: References: - https://www.realtek.com - https://www.amebaiot.com/en/security_bulletin/cve-2021-39306/
CVE ID: CVE-2021-39307 State: PUBLISHED Published: 2021-09-15T12:47:05 Last Updated: 2024-08-04T02:06:41.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://www.pdftron.com/webviewer/ - https://research.nccgroup.com/2021/09/14/technical-advisory-pdftron-javascript-urls-allowed-in-webviewer-ui-cve-2021-39307/
CVE ID: CVE-2021-39308 State: PUBLISHED Published: 2021-12-14T15:50:16.276Z Last Updated: 2025-01-31T18:59:44.675Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WooCommerce myghpay Payment Gateway Products: WooCommerce myghpay Payment Gateway Problem Types: CWE-79 Description: The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the ~/processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulne
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39308 - https://plugins.trac.wordpress.org/browser/woo-myghpay-payment-gateway/trunk/processresponse.php?rev=2410420#L134
CVE ID: CVE-2021-39309 State: PUBLISHED Published: 2021-12-14T15:50:13.186Z Last Updated: 2025-02-14T17:50:19.331Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Parsian Bank Gateway for Woocommerce Products: Parsian Bank Gateway for Woocommerce Problem Types: CWE-79 Description: The Parsian Bank Gateway for Woocommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via and parameter due to a var_dump() on $_POST variables found in the ~/vendor/dpsoft/parsian-payment/sample/rollback-payment.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0. Additional Analyst Notes: - CVE Program Container
to inject arbitrary web scripts, in versions up to and including 1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39309 - https://plugins.trac.wordpress.org/browser/parsian-bank-gateway-for-woocommerce/tags/1.0/vendor/dpsoft/parsian-payment/sample/rollback-payment.php#L39
CVE ID: CVE-2021-39310 State: PUBLISHED Published: 2021-12-14T15:50:17.778Z Last Updated: 2025-01-31T18:58:41.250Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Real WYSIWYG Products: Real WYSIWYG Problem Types: CWE-79 Description: The Real WYSIWYG WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of PHP_SELF in the ~/real-wysiwyg.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39310 - https://plugins.trac.wordpress.org/bro
eferences: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39310 - https://plugins.trac.wordpress.org/browser/real-wysiwyg/tags/0.0.2/real-wysiwyg.php#L213
CVE ID: CVE-2021-39311 State: PUBLISHED Published: 2021-12-14T15:50:13.961Z Last Updated: 2025-02-14T17:49:49.890Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: link-list-manager Products: link-list-manager Problem Types: CWE-79 Description: The link-list-manager WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the category parameter found in the ~/llm.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39311 - https://plugins.trac.wordpre
ichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39311 - https://plugins.trac.wordpress.org/browser/link-list-manager/tags/1.0/llm.php#L191
CVE ID: CVE-2021-39312 State: PUBLISHED Published: 2021-12-14T15:50:17.051Z Last Updated: 2025-01-31T18:59:02.895Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: True Ranker Products: True Ranker Problem Types: CWE-22 Description: The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39312 - https://plugins.trac.wordpress
hment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39312 - https://plugins.trac.wordpress.org/browser/seo-local-rank/tags/2.2.2/admin/vendor/datatables/examples/resources/examples.php - http://packetstormsecurity.com/files/165434/WordPress-The-True-Ranker-2.2.2-Arbitrary-File-Read.html
CVE ID: CVE-2021-39313 State: PUBLISHED Published: 2021-12-14T15:50:18.570Z Last Updated: 2025-01-31T18:58:23.369Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Simple Image Gallery Products: Simple Image Gallery Problem Types: CWE-79 Description: The Simple Image Gallery WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in the ~/simple-image-gallery.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39313 - https
ainer: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39313 - https://plugins.trac.wordpress.org/browser/simple-responsive-image-gallery/tags/1.0.6/simple-image-gallery.php#L420
CVE ID: CVE-2021-39314 State: PUBLISHED Published: 2021-12-14T15:50:12.404Z Last Updated: 2025-02-13T20:46:37.785Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WooCommerce EnvioPack Products: WooCommerce EnvioPack Problem Types: CWE-79 Description: The WooCommerce EnvioPack WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the dataid parameter found in the ~/includes/functions.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39314 - htt
ntainer: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39314 - https://plugins.trac.wordpress.org/browser/woo-enviopack/trunk/includes/functions.php?rev=2239846#L605
CVE ID: CVE-2021-39315 State: PUBLISHED Published: 2021-12-14T15:50:08.501Z Last Updated: 2025-02-13T20:48:08.572Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Magic Post Voice Products: Magic Post Voice Problem Types: CWE-79 Description: The Magic Post Voice WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the ids parameter found in the ~/inc/admin/main.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39315 - https://plugins.trac.word
lnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39315 - https://plugins.trac.wordpress.org/browser/magic-post-voice/trunk/inc/admin/main.php#L14
CVE ID: CVE-2021-39316 State: PUBLISHED Published: 2021-08-31T11:05:58.222Z Last Updated: 2025-05-05T14:51:06.703Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ZoomIt Products: ZoomSounds - WordPress Wave Audio Player with Playlist Problem Types: CWE-22, CWE-552 Description: The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39316 -
m Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39316 - http://packetstormsecurity.com/files/165146/WordPress-DZS-Zoomsounds-6.45-Arbitrary-File-Read.html
CVE ID: CVE-2021-39317 State: PUBLISHED Published: 2021-10-11T15:48:57.291Z Last Updated: 2025-02-14T18:23:25.466Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AccessPress Themes Products: Access Demo Importer, accesspress-basic, accesspress-lite, accesspress-mag, accesspress-parallax, accesspress-root, accesspress-store, agency-lite, arrival, bingle, bloger, brovy, construction-lite, doko, edict-lite, enlighten, fotography, opstore, parallaxsome, punte, revolve, ripple, sakala, scrollme, storevilla, swing-lite, the100, the-launcher, the-monday, ultra-seven, uncode-lite, vmag, vmagazine-lite, vmagazine-news, wpparallax, wp-store, zigcy-baby, zigcy-cosmetics
onday, ultra-seven, uncode-lite, vmag, vmagazine-lite, vmagazine-news, wpparallax, wp-store, zigcy-baby, zigcy-cosmetics, zigcy-lite Problem Types: CWE-285, CWE-434 Description: A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in the /demo-functions.php file or /welcome.php file of the affected products. The complete list of affected products and their versions are below: WordPress Plugin: AccessPress Demo Importer <=1.0.6 WordPress Themes: accesspress-basic <= 3.2.1 accesspress-lite <= 2
: WordPress Plugin: AccessPress Demo Importer <=1.0.6 WordPress Themes: accesspress-basic <= 3.2.1 accesspress-lite <= 2.92 accesspress-mag <= 2.6.5 accesspress-parallax <= 4.5 accesspress-root <= 2.5 accesspress-store <= 2.4.9 agency-lite <= 1.1.6 arrival <= 1.4.2 bingle <= 1.0.4 bloger <= 1.2.6 brovy <= 1.3 construction-lite <= 1.2.5 doko <= 1.0.27 edict-lite <= 1.1.4 eightlaw-lite <= 2.1.5 eightmedi-lite <= 2.1.8 eight-sec <= 1.1.4 eightstore-lite <= 1.2.5 enlighten <= 1.3.5 fotography <= 2.4.0 opstore <= 1.4.3 parallaxsome <= 1.3.6 punte <= 1.1.2 revolve <= 1.3.1 ripple <= 1.2.0 sakala <= 1.0.4 scrollme <= 2.1.0 storevilla <= 1.4.1 swing-lite <= 1.1.9 the100 <= 1.1.2 the-launcher <= 1.3.
<= 1.2.0 sakala <= 1.0.4 scrollme <= 2.1.0 storevilla <= 1.4.1 swing-lite <= 1.1.9 the100 <= 1.1.2 the-launcher <= 1.3.2 the-monday <= 1.4.1 ultra-seven <= 1.2.8 uncode-lite <= 1.3.3 vmag <= 1.2.7 vmagazine-lite <= 1.3.5 vmagazine-news <= 1.0.5 wpparallax <= 2.0.6 wp-store <= 1.1.9 zigcy-baby <= 1.0.6 zigcy-cosmetics <= 1.0.5 zigcy-lite <= 2.0.9 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/blog/2021/10/high-severity-vulnerability-patched-in-access-demo-importer-plugin/ - https://plugins.trac.wordpress.org/changeset/2592642/access-demo-importer/trunk/inc/demo-functions.php - https://plugins.trac.wordpress.org/changeset/26
rg/changeset/2592642/access-demo-importer/trunk/inc/demo-functions.php - https://plugins.trac.wordpress.org/changeset/2602132/access-demo-importer/trunk/inc/demo-functions.php - https://patchstack.com/articles/authenticated-vulnerability-in-unpatched-wordpress-themes/