Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10561 State: PUBLISHED Published: 2024-10-31T02:00:15.805Z Last Updated: 2024-10-31T13:42:46.994Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Pet Shop Management System Problem Types: CWE-89 Description: A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file birdsupdate.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282561 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282561 - https://vuldb.com/?ctiid.282561 - https://vuldb.com/?submit.434445 - https://github.com/ppp-src/CVE/issues/29
CVE ID: CVE-2024-10562 State: PUBLISHED Published: 2025-01-07T06:00:03.350Z Last Updated: 2025-01-07T16:18:08.400Z Vendors: Unknown Products: Form Maker by 10Web Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Form Maker by 10Web WordPress plugin before 1.15.31 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/317f6cb7-774f-4381-a855-858c051aa1d5/
CVE ID: CVE-2024-10563 State: PUBLISHED Published: 2025-02-26T06:00:06.364Z Last Updated: 2025-02-26T14:47:58.291Z Vendors: Unknown Products: WooCommerce Cart Count Shortcode Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WooCommerce Cart Count Shortcode WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/08ed69f6-9c9b-4548-9dbb-05b602530ef7/
CVE ID: CVE-2024-10565 State: PUBLISHED Published: 2025-03-25T06:00:07.486Z Last Updated: 2025-03-25T13:58:26.714Z Vendors: Unknown Products: Slider by 10Web Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4ef05302-a6ca-4816-ab0d-a4e3bf7a5e22/
CVE ID: CVE-2024-10566 State: PUBLISHED Published: 2025-03-25T06:00:08.136Z Last Updated: 2025-03-25T13:58:21.126Z Vendors: Unknown Products: Slider by 10Web Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a98a7f11-4c01-4b91-8adc-465beefa310a/
CVE ID: CVE-2024-10567 State: PUBLISHED Published: 2024-12-04T08:22:45.515Z Last Updated: 2024-12-04T15:01:08.812Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: templateinvaders Products: TI WooCommerce Wishlist Problem Types: CWE-862 Description: The TI WooCommerce Wishlist plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wizard' function in all versions up to, and including, 2.9.1. This makes it possible for unauthenticated attackers to create new pages, modify plugin settings, and perform limited options updates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wo
gs, and perform limited options updates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0a5f2e1a-2216-4885-9b74-a08142816f2b?source=cve - https://plugins.trac.wordpress.org/changeset/3199516/ti-woocommerce-wishlist
CVE ID: CVE-2024-10568 State: PUBLISHED Published: 2024-12-12T06:00:18.035Z Last Updated: 2024-12-12T15:34:06.298Z Vendors: Unknown Products: Ajax Search Lite Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1676aef0-be5d-4335-933d-dc0d54416fd4/
CVE ID: CVE-2024-10569 State: PUBLISHED Published: 2025-03-20T10:10:57.236Z Last Updated: 2025-03-20T17:53:15.263Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: gradio-app Products: gradio-app/gradio Problem Types: CWE-475 Description: A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. The component uses pd.read_csv to process input values, which can accept compressed files. An attacker can exploit this by uploading a maliciously crafted zip bomb, leading to a server crash and causing a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bountie
causing a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7192bcbb-08a3-4d22-a321-9c6d19dbfc74
CVE ID: CVE-2024-10570 State: PUBLISHED Published: 2024-11-26T05:33:00.271Z Last Updated: 2024-11-26T16:14:26.694Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: cleantalk Products: Security & Malware scan by CleanTalk Problem Types: CWE-89 Description: The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized SQL Injection due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken function in all versions up to, and including, 2.145, as well as insufficient input sanitization and validation. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queri
ation. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2187311d-6651-4eca-806d-aa2ff9fae4e2?source=cve - https://plugins.trac.wordpress.org/browser/security-malware-firewall/tags/2.145/lib/CleantalkSP/Common/RemoteCalls.php#L59
CVE ID: CVE-2024-10571 State: PUBLISHED Published: 2024-11-14T11:00:12.910Z Last Updated: 2024-11-14T19:33:58.060Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ays-pro Products: Chartify – WordPress Chart Plugin Problem Types: CWE-98 Description: The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code
tion of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d4837258-c749-4194-926c-22b67e20c1fc?source=cve - https://plugins.trac.wordpress.org/browser/chart-builder/tags/2.9.6/admin/partials/charts/actions/chart-builder-charts-actions-options.php?rev=3184238
CVE ID: CVE-2024-10572 State: PUBLISHED Published: 2025-03-20T10:09:28.736Z Last Updated: 2025-10-15T12:49:23.181Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: h2oai Products: h2oai/h2o-3 Problem Types: CWE-94 Description: In h2oai/h2o-3 version 3.46.0.1, the `run_tool` command exposes classes in the `water.tools` package through the `ast` parser. This includes the `XGBoostLibExtractTool` class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/db8939a0-9be8-4d0f-a8b0-1bd181666da2
CVE ID: CVE-2024-10573 State: PUBLISHED Published: 2024-10-31T18:31:55.940Z Last Updated: 2025-11-20T18:11:59.326Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7 Problem Types: CWE-787 Description: An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exploit this flaw is considered high as the payload must be validated by the MPEG decoder
ed. The complexity required to exploit this flaw is considered high as the payload must be validated by the MPEG decoder and the PCM synth before execution. Additionally, to successfully execute the attack, the user must scan through the stream, making web live stream content (such as web radios) a very unlikely attack vector. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:11193 - https://access.redhat.com/errata/RHSA-2024:11242 - https://access.redhat.com/security/cve/CVE-2024-10573 - https://bugzilla.redhat.com/show_bug.cgi?id=2322980 - https://mpg123.org/cgi-bin/news.cgi#2024-10-26
CVE ID: CVE-2024-10574 State: PUBLISHED Published: 2025-01-26T05:24:15.325Z Last Updated: 2025-01-27T15:03:49.062Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: AYS Pro Plugins Products: Quiz Maker Developer, Quiz Maker Agency, Quiz Maker Business Problem Types: CWE-862 Description: The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ays_save_google_credentials' function in all versions up to, and including, 8.8.0 (Business), up to, and including, 21.8.0 (Developer), and up to, and including, 31.8.0 (Agency). This makes it possible for unauthenticate
and including, 21.8.0 (Developer), and up to, and including, 31.8.0 (Agency). This makes it possible for unauthenticated attackers to modify the Google Sheets integration credentials within the plugin's settings. Because the 'client_id' parameter is not sanitized or escaped when used in output, this vulnerability could also be leveraged to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d8a4feb3-908f-4fff-84f2-099f56d46f5b?source=cve - https://ays-pro.com/wordpress/quiz-maker - https://ays-pro.com/changelog-for-quiz-mak
fff-84f2-099f56d46f5b?source=cve - https://ays-pro.com/wordpress/quiz-maker - https://ays-pro.com/changelog-for-quiz-maker-pro
CVE ID: CVE-2024-10575 State: PUBLISHED Published: 2024-11-13T04:35:44.556Z Last Updated: 2024-11-13T15:14:17.114Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: EcoStruxure IT Gateway Problem Types: CWE-862 Description: CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/doc/SEVD-2024-317-04/SEVD-2024-317-04.pdf
CVE ID: CVE-2024-10576 State: PUBLISHED Published: 2024-12-04T12:02:22.601Z Last Updated: 2024-12-04T21:01:06.241Z Vendors: Infinix Mobile Products: com.transsion.agingfunction Problem Types: CWE-925 Description: Infinix devices contain a pre-loaded "com.transsion.agingfunction" application, that exposes an unsecured broadcast receiver. An attacker can communicate with the receiver and force the device to perform a factory reset without any Android system permissions. After multiple attempts to contact the vendor we did not receive any answer. We suppose this issue affects all Infinix Mobile devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/20
all Infinix Mobile devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/12/CVE-2024-10576/ - https://cert.pl/posts/2024/12/CVE-2024-10576/
CVE ID: CVE-2024-10577 State: PUBLISHED Published: 2024-11-13T02:02:31.885Z Last Updated: 2024-11-13T14:42:51.197Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: fbtopcn Products: 胖鼠采集(Fat Rat Collect) 微信知乎简书腾讯新闻列表分页采集, 还有自动采集、自动发布、自动标签、等多项功能。开源插件 Problem Types: CWE-79 Description: The 胖鼠采集(Fat Rat Collect) 微信知乎简书腾讯新闻列表分页采集, 还有自动采集、自动发布、自动标签、等多项功能。开源插件 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to missing escaping on a URL in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an
attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/664d265b-7b35-4c61-b48b-d051b7fb5ebd?source=cve - https://wordpress.org/plugins/fat-rat-collect/
CVE ID: CVE-2024-10578 State: PUBLISHED Published: 2024-12-06T05:26:15.514Z Last Updated: 2024-12-06T16:07:41.393Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: blazethemes Products: Pubnews Problem Types: CWE-434 Description: The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnews_importer_plugin_action_for_notice() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins that can be leveraged to exploit other vulnerabilities. Additional Analyst Notes: - CIS
ve, to install arbitrary plugins that can be leveraged to exploit other vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7eaa0117-5320-431f-b3d2-05a867901528?source=cve - https://themes.trac.wordpress.org/browser/pubnews/1.0.7/inc/admin/admin.php#L1017 - https://themes.trac.wordpress.org/changeset/250743/pubnews/1.0.8?contextall=1&old=245552&old_path=%2Fpubnews%2F1.0.7
CVE ID: CVE-2024-10579 State: PUBLISHED Published: 2024-11-26T11:04:31.503Z Last Updated: 2024-11-26T14:09:22.368Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: wpmudev Products: Hustle – Email Marketing, Lead Generation, Optins, Popups Problem Types: CWE-862 Description: The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the preview_module() function in all versions up to, and including, 7.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view unpublished forms. Additional Analyst Notes: - CISA
enticated attackers, with Subscriber-level access and above, to view unpublished forms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ebd96d9c-c1ab-4a53-a52a-9fc2541482f2?source=cve - https://plugins.trac.wordpress.org/browser/wordpress-popup/tags/7.8.5/inc/hustle-modules-common-admin-ajax.php#L189 - https://plugins.trac.wordpress.org/browser/wordpress-popup/trunk/inc/hustle-modules-common-admin-ajax.php#L189
CVE ID: CVE-2024-10580 State: PUBLISHED Published: 2024-11-27T06:41:28.378Z Last Updated: 2024-11-27T14:40:32.667Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: wpmudev Products: Hustle – Email Marketing, Lead Generation, Optins, Popups Problem Types: CWE-862 Description: The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized form submissions due to a missing capability check on the submit_form() function in all versions up to, and including, 7.8.5. This makes it possible for unauthenticated attackers to submit unpublished forms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
henticated attackers to submit unpublished forms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3b2f8726-c4c4-4ed6-aa8d-4412cf5be061?source=cve - https://plugins.trac.wordpress.org/browser/wordpress-popup/tags/7.8.5/inc/front/hustle-module-front-ajax.php#L251 - https://plugins.trac.wordpress.org/changeset/3196639/wordpress-popup/tags/7.8.6/inc/front/hustle-module-front-ajax.php
CVE ID: CVE-2024-10581 State: PUBLISHED Published: 2025-02-15T11:26:47.117Z Last Updated: 2025-02-18T19:49:11.674Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: designinvento Products: DirectoryPress Frontend Problem Types: CWE-352 Description: The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.9. This is due to missing or incorrect nonce validation on the dpfl_listingStatusChange() function. This makes it possible for unauthenticated attackers to update listing statuses via a forged request granted they can trick a site administrator into performing an action such as click
isting statuses via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/36986585-7aaa-4c49-b426-fb9078fbb9ae?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3239657%40directorypress-frontend&new=3239657%40directorypress-frontend&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10582 State: PUBLISHED Published: 2024-11-15T05:30:55.318Z Last Updated: 2024-11-15T18:09:58.861Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: smartwpress Products: Music Player for Elementor – Audio Player & Podcast Player Problem Types: CWE-862 Description: The Music Player for Elementor – Audio Player & Podcast Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_mpfe_template() function in all versions up to, and including, 2.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import templates. Additional Analyst N
possible for authenticated attackers, with Subscriber-level access and above, to import templates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1f66cdcf-cbe5-43e0-ad18-c2b9c4491ed4?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3186359%40music-player-for-elementor%2Ftrunk&old=3174807%40music-player-for-elementor%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10583 State: PUBLISHED Published: 2024-12-12T06:46:33.622Z Last Updated: 2024-12-12T15:45:37.881Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: danieliser Products: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder Problem Types: CWE-79 Description: The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘post_title’ parameter in all versions up to, and including, 1.20.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker
ng, 1.20.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5b4dc917-0d59-4163-a613-49afc1dc4d33?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3197898%40popup-maker&new=3197898%40popup-maker&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10584 State: PUBLISHED Published: 2024-12-24T11:09:49.790Z Last Updated: 2024-12-24T14:39:44.582Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: designinvento Products: DirectoryPress – Business Directory And Classified Ad Listing Problem Types: CWE-434 Description: The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.6.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in
s makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. When DirectoryPress Frontend is installed, this can be exploited by unauthenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4625072b-815d-41d2-bf8f-ac290efde369?source=cve - https://plugins.trac.wordpress.org/changeset/3205071/directorypress/trunk/includes/directorypress_svg.php
CVE ID: CVE-2024-10585 State: PUBLISHED Published: 2025-01-08T05:19:22.264Z Last Updated: 2025-01-08T15:09:24.374Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: revmakx Products: InfiniteWP Client Problem Types: CWE-22 Description: The InfiniteWP Client plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.13.0 via the 'historyID' parameter of the ~/debug-chart/index.php file. This makes it possible for unauthenticated attackers to read .txt files outside of the intended directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4d2518f6-3647-4
Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4d2518f6-3647-4bee-a98c-ce7f30375a62?source=cve - https://plugins.svn.wordpress.org/iwp-client/tags/1.13.0/debug-chart/index.php - https://plugins.trac.wordpress.org/changeset/3202851/iwp-client/trunk/debug-chart/index.php