Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-31324 State: PUBLISHED Published: 2024-07-09T20:09:16.323Z Last Updated: 2025-03-15T15:34:04.568Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating it to landscape mode. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/f16cc1135b414906164eb8fc55a76971b0e
Container: References: - https://android.googlesource.com/platform/frameworks/base/+/f16cc1135b414906164eb8fc55a76971b0e36c21 - https://source.android.com/security/bulletin/2024-06-01
CVE ID: CVE-2024-31325 State: PUBLISHED Published: 2024-07-09T20:09:16.399Z Last Updated: 2024-08-02T01:52:56.246Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/9fcd2070f22c0c6b30ecdc914cef83b5891d5f68 - https://source.android.com/security/bulletin/
.com/platform/frameworks/base/+/9fcd2070f22c0c6b30ecdc914cef83b5891d5f68 - https://source.android.com/security/bulletin/2024-06-01
CVE ID: CVE-2024-31326 State: PUBLISHED Published: 2024-07-09T20:09:16.474Z Last Updated: 2024-08-19T15:18:35.774Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/736462a777d0a0e1258bd7ab80d6e352ef797669 - https://android.googlesour
ndroid.googlesource.com/platform/frameworks/base/+/736462a777d0a0e1258bd7ab80d6e352ef797669 - https://android.googlesource.com/platform/frameworks/base/+/f1eb8e719dfbe15a38d40af0a73ead207eba9389 - https://source.android.com/security/bulletin/2024-06-01
CVE ID: CVE-2024-31327 State: PUBLISHED Published: 2024-07-09T20:09:16.548Z Last Updated: 2025-03-14T15:23:34.643Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/system/libfmq/+/79bbf4aeef4b254c52da670a972e22956c8c659d - https://source.android.com/security/bulletin/2024-06-
latform/system/libfmq/+/79bbf4aeef4b254c52da670a972e22956c8c659d - https://source.android.com/security/bulletin/2024-06-01
CVE ID: CVE-2024-31331 State: PUBLISHED Published: 2024-07-09T20:11:27.490Z Last Updated: 2025-03-14T19:02:35.258Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/c8694bbccfb9c19aefed536ea710230107c935eb - https://source.android.com/security
oglesource.com/platform/frameworks/base/+/c8694bbccfb9c19aefed536ea710230107c935eb - https://source.android.com/security/bulletin/2024-07-01
CVE ID: CVE-2024-31332 State: PUBLISHED Published: 2024-07-09T20:11:27.580Z Last Updated: 2025-03-13T16:08:02.170Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/d1f9e61e4480116838c7a642b54c217506361266 - https://source.a
//android.googlesource.com/platform/packages/apps/Settings/+/d1f9e61e4480116838c7a642b54c217506361266 - https://source.android.com/security/bulletin/2024-07-01
CVE ID: CVE-2024-31333 State: PUBLISHED Published: 2024-08-15T21:56:30.339Z Last Updated: 2024-08-16T14:25:24.616Z Vendors: Google Products: Android Problem Types: Unknown Description: In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-31334 State: PUBLISHED Published: 2024-07-09T20:11:27.662Z Last Updated: 2024-08-02T01:52:56.317Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/2024-07-01
CVE ID: CVE-2024-31335 State: PUBLISHED Published: 2024-07-09T20:11:27.749Z Last Updated: 2024-08-02T01:52:56.601Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/2024-07-01
CVE ID: CVE-2024-31336 State: PUBLISHED Published: 2024-09-11T00:09:16.895Z Last Updated: 2024-09-13T00:33:49.563Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-09-01
CVE ID: CVE-2024-31337 State: PUBLISHED Published: 2024-11-13T17:13:19.522Z Last Updated: 2024-11-15T21:18:18.327Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-11-01
CVE ID: CVE-2024-31339 State: PUBLISHED Published: 2024-07-09T20:11:27.850Z Last Updated: 2024-08-02T01:52:56.221Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/StatsD/+/795a0da721992432cae20fc9be21bcbce318bf5a - https://source.android.com/security/bulletin/20
orm/packages/modules/StatsD/+/795a0da721992432cae20fc9be21bcbce318bf5a - https://source.android.com/security/bulletin/2024-07-01
CVE ID: CVE-2024-31340 State: PUBLISHED Published: 2024-05-22T05:29:04.007Z Last Updated: 2025-03-28T19:23:24.162Z Vendors: TP-Link Products: TP-Link Tether, TP-Link Tapo Problem Types: Improper certificate validation Description: TP-Link Tether versions prior to 4.5.13 and TP-Link Tapo versions prior to 3.3.6 do not properly validate certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=com.tplink.tether - https://play.google.com/store/apps/details?id=com.tplink.iot - https
oogle.com/store/apps/details?id=com.tplink.tether - https://play.google.com/store/apps/details?id=com.tplink.iot - https://jvn.jp/en/jp/JVN29471697/
CVE ID: CVE-2024-31341 State: PUBLISHED Published: 2024-05-17T08:19:23.208Z Last Updated: 2024-08-02T01:52:56.223Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Cozmoslabs Products: Profile Builder Problem Types: CWE-345 Description: Insufficient Verification of Data Authenticity vulnerability in Cozmoslabs Profile Builder allows Functionality Bypass.This issue affects Profile Builder: from n/a through 3.11.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/profile-builder/wordpress-user-profile-builder-plugin-3-11-2-bypass-vulnerability-vulnerability?_s_id=cve
CVE ID: CVE-2024-31342 State: PUBLISHED Published: 2024-04-10T16:14:55.911Z Last Updated: 2024-08-09T18:46:32.788Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WPcloudgallery Products: WordPress Gallery Exporter Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPcloudgallery WordPress Gallery Exporter.This issue affects WordPress Gallery Exporter: from n/a through 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-gallery-exporter/wordpress-gallery-exporter-plugin-1-3-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2024-31343 State: PUBLISHED Published: 2024-04-10T16:12:14.112Z Last Updated: 2024-08-02T01:52:56.467Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Sonaar Music Products: MP3 Audio Player for Music, Radio & Podcast by Sonaar Problem Types: CWE-862 Description: Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mp3-music-player-by-sonaar/wordpress-mp3-audio-play
ntainer: References: - https://patchstack.com/database/vulnerability/mp3-music-player-by-sonaar/wordpress-mp3-audio-player-for-music-radio-podcast-by-sonaar-plugin-4-10-1-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2024-31344 State: PUBLISHED Published: 2024-04-07T17:40:52.110Z Last Updated: 2024-08-02T01:52:56.205Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Phpbits Creative Studio Products: Easy Login Styler – White Label Admin Login Page for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Phpbits Creative Studio Easy Login Styler – White Label Admin Login Page for WordPress allows Stored XSS.This issue affects Easy Login Styler – White Label Admin Login Page for WordPress: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
Label Admin Login Page for WordPress: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-login-styler/wordpress-easy-login-styler-plugin-1-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31345 State: PUBLISHED Published: 2024-04-07T17:27:02.073Z Last Updated: 2025-08-27T21:12:59.128Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Sukhchain Singh Products: Auto Poster Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Poster: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/auto-poster/wordpress-auto-poster-plugin-1-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-31346 State: PUBLISHED Published: 2024-04-07T17:37:49.741Z Last Updated: 2024-08-02T01:52:56.497Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Blocksmarket Products: Gradient Text Widget for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blocksmarket Gradient Text Widget for Elementor allows Stored XSS.This issue affects Gradient Text Widget for Elementor: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/gradient-text-widget-for-el
chment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/gradient-text-widget-for-elementor/wordpress-gradient-text-widget-for-elementor-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31347 State: PUBLISHED Published: 2024-06-09T18:06:18.696Z Last Updated: 2024-08-02T01:52:56.387Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Data443 Products: Tracking Code Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/tracking-code-manager/wordpress-tracking-code-manager-plugin-2-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-31348 State: PUBLISHED Published: 2024-04-07T17:36:22.725Z Last Updated: 2024-08-08T18:44:47.013Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Themepoints Products: Testimonials Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Testimonials allows Stored XSS.This issue affects Testimonials: from n/a through 3.0.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/super-testimonial/wordpress-super-testimonials-plugin-3-0-5-cross-site-scripting-xss-vulnerabil
m/database/vulnerability/super-testimonial/wordpress-super-testimonials-plugin-3-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31349 State: PUBLISHED Published: 2024-04-07T17:34:58.407Z Last Updated: 2024-08-02T01:52:56.550Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: MailMunch Products: MailMunch – Grow your Email List Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailMunch – Grow your Email List allows Stored XSS.This issue affects MailMunch – Grow your Email List: from n/a through 3.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mailmunch/wordpress-mailmunch-grow-your
E Program Container: References: - https://patchstack.com/database/vulnerability/mailmunch/wordpress-mailmunch-grow-your-email-list-plugin-3-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31350 State: PUBLISHED Published: 2024-06-09T18:04:56.917Z Last Updated: 2024-08-02T01:52:56.487Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: AWP Classifieds Team Products: AWP Classifieds Problem Types: CWE-862 Description: Missing Authorization vulnerability in AWP Classifieds Team AWP Classifieds.This issue affects AWP Classifieds: from n/a through 4.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/another-wordpress-classifieds-plugin/wordpress-awp-classifieds-plugin-4-3-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-31351 State: PUBLISHED Published: 2024-05-17T06:15:21.051Z Last Updated: 2024-08-02T01:52:56.579Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Copymatic Products: Copymatic – AI Content Writer & Generator Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/copymatic/wordpress-copymatic-plugin-1-6-unauthenticated-arbitrary-
ces: - https://patchstack.com/database/vulnerability/copymatic/wordpress-copymatic-plugin-1-6-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-31352 State: PUBLISHED Published: 2024-06-09T17:23:54.605Z Last Updated: 2024-08-02T01:52:56.488Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Products: Email Subscribers & Newsletters Problem Types: CWE-862 Description: Missing Authorization vulnerability in Email Subscribers & Newsletters.This issue affects Email Subscribers & Newsletters: from n/a through 5.7.13. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/email-subscribers/wordpress-icegram-express-plugin-5-7-13-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-31353 State: PUBLISHED Published: 2024-04-10T15:30:53.721Z Last Updated: 2024-08-02T01:52:56.582Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tribulant Products: Slideshow Gallery Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/slideshow-gallery/wordpress-slideshow-gallery-lite-plugin-1-7-8-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-31354 State: PUBLISHED Published: 2024-04-12T12:24:45.788Z Last Updated: 2024-08-02T01:52:56.272Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Tribulant Products: Slideshow Gallery Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/slideshow-gallery/wordpress-slideshow-gallery-lite-plugin-1-7-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31355 State: PUBLISHED Published: 2024-04-10T16:23:52.998Z Last Updated: 2024-08-02T01:52:56.341Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Tribulant Products: Slideshow Gallery Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/slideshow-gallery/wordpress-slideshow-gallery-lite-plugin-1-7-8-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-31356 State: PUBLISHED Published: 2024-04-10T16:19:56.037Z Last Updated: 2024-08-02T01:52:56.552Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Solwin Infotech Products: User Activity Log Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech User Activity Log.This issue affects User Activity Log: from n/a through 1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/user-activity-log/wordpress-user-activity-log-plugin-1-8-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-31357 State: PUBLISHED Published: 2024-04-08T08:51:56.122Z Last Updated: 2024-08-02T01:52:56.547Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BdThemes Products: Ultimate Store Kit Elementor Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultimate-store-kit/wordpress-ult
t: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultimate-store-kit/wordpress-ultimate-store-kit-elementor-addons-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31358 State: PUBLISHED Published: 2024-04-10T15:57:04.643Z Last Updated: 2024-08-02T01:52:56.551Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Saleswonder.biz Products: 5 Stars Rating Funnel Problem Types: CWE-862 Description: Missing Authorization vulnerability in Saleswonder.Biz 5 Stars Rating Funnel.This issue affects 5 Stars Rating Funnel: from n/a through 1.2.67. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/5-stars-rating-funnel/wordpress-5-stars-rating-funnel-plugin-1-2-67-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2024-31359 State: PUBLISHED Published: 2024-06-09T17:20:48.053Z Last Updated: 2024-08-02T01:52:56.326Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Premmerce Products: Premmerce Product Filter for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Premmerce Premmerce Product Filter for WooCommerce.This issue affects Premmerce Product Filter for WooCommerce: from n/a through 3.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/premmerce-woocommerce-product-filter/wordpress-premmerce-product-filter-for-woocommerce-plugin-