Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-54325 State: PUBLISHED Published: 2024-12-13T14:25:29.214Z Last Updated: 2024-12-13T14:56:31.290Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: DealerTrend Products: CarDealerPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DealerTrend CarDealerPress allows Reflected XSS.This issue affects CarDealerPress: from n/a through 6.6.2410.02. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cardealerpress/vulnerability/wordpress-cardealerpress-plugin-6-6-2410-02-reflected-cross-site-scripting-
ordpress/plugin/cardealerpress/vulnerability/wordpress-cardealerpress-plugin-6-6-2410-02-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54326 State: PUBLISHED Published: 2024-12-13T14:25:29.998Z Last Updated: 2024-12-13T14:56:07.619Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Eyal Fitoussi Products: GEO my WordPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GEO my WordPress: from n/a through 4.5.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/geo-my-wp/vulnerability/wordpress-geo-my-wp-plugin-4-5-0-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-54327 State: PUBLISHED Published: 2024-12-13T14:25:31.049Z Last Updated: 2024-12-13T14:55:40.470Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: universam Products: UNIVERSAM Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in universam UNIVERSAM allows Reflected XSS.This issue affects UNIVERSAM: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/universam-demo/vulnerability/wordpress-universam-plugin-8-59-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54328 State: PUBLISHED Published: 2024-12-13T14:25:31.947Z Last Updated: 2024-12-13T14:55:11.756Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Link Nacional Products: Invoice Payment for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Nacional Invoice Payment for WooCommerce allows Reflected XSS.This issue affects Invoice Payment for WooCommerce: from n/a through 1.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/invoice-payment-for-woocommerce/vulnerability/wordpress
: References: - https://patchstack.com/database/wordpress/plugin/invoice-payment-for-woocommerce/vulnerability/wordpress-invoice-payment-for-woocommerce-plugin-1-7-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54329 State: PUBLISHED Published: 2024-12-13T14:25:33.027Z Last Updated: 2024-12-13T14:54:49.356Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Metup s.r.l. Products: CleverNode Related Content Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metup s.r.l. CleverNode Related Content allows Reflected XSS.This issue affects CleverNode Related Content: from n/a through 1.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/clevernode-related-content/vulnerability/wordpress-clevernode-related-co
ttps://patchstack.com/database/wordpress/plugin/clevernode-related-content/vulnerability/wordpress-clevernode-related-content-plugin-1-1-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54330 State: PUBLISHED Published: 2024-12-13T14:25:33.949Z Last Updated: 2024-12-13T14:54:12.173Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Hep Hep Hurra (HHH) Products: Hurrakify Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Hep Hep Hurra (HHH) Hurrakify allows Server Side Request Forgery.This issue affects Hurrakify: from n/a through 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hurrakify/vulnerability/wordpress-hurrakify-plugin-2-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54331 State: PUBLISHED Published: 2024-12-16T14:14:14.327Z Last Updated: 2024-12-16T19:47:32.027Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Micha Products: I Plant A Tree Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Micha I Plant A Tree allows Stored XSS.This issue affects I Plant A Tree: from n/a through 1.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/i-plant-a-tree/vulnerability/wordpress-i-plant-a-tree-plugin-1-7-3-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-54332 State: PUBLISHED Published: 2024-12-16T14:14:08.920Z Last Updated: 2024-12-16T19:54:55.916Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPFactory Products: WP Currency Exchange Rates Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPFactory WP Currency Exchange Rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-currency-exchange-rates/vulnerability/wordpress-wp-currency-exchange-rates-plugin-1-2-0-csrf-to-stored-xss-vulnerability?_s_id=c
-exchange-rates/vulnerability/wordpress-wp-currency-exchange-rates-plugin-1-2-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54333 State: PUBLISHED Published: 2024-12-13T14:25:34.990Z Last Updated: 2024-12-13T14:53:45.552Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: silverplugins217 Products: Check Pincode For Woocommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silverplugins217 Check Pincode For Woocommerce allows Reflected XSS.This issue affects Check Pincode For Woocommerce: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/check-pincode-for-woocommerce/vulnerability/wordpress-che
References: - https://patchstack.com/database/wordpress/plugin/check-pincode-for-woocommerce/vulnerability/wordpress-check-pincode-for-woocommerce-plugin-1-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54334 State: PUBLISHED Published: 2024-12-13T14:25:35.586Z Last Updated: 2024-12-13T16:12:56.596Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Zeshan B Products: Quran Phrases About Most People Shortcodes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zeshan B Quran Phrases About Most People Shortcodes allows DOM-Based XSS.This issue affects Quran Phrases About Most People Shortcodes: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quran-phrases-about-most-people-
- CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quran-phrases-about-most-people-shortcodes/vulnerability/wordpress-quran-phrases-about-most-people-shortcodes-plugin-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54335 State: PUBLISHED Published: 2024-12-13T14:25:36.188Z Last Updated: 2024-12-13T16:12:18.958Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ZebraSoft Monaco Products: ImmoToolBox Connect Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZebraSoft Monaco ImmoToolBox Connect allows Reflected XSS.This issue affects ImmoToolBox Connect: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/immotoolbox-connect/vulnerability/wordpress-immotoolbox-connect-plugin-1-3-3-reflecte
tack.com/database/wordpress/plugin/immotoolbox-connect/vulnerability/wordpress-immotoolbox-connect-plugin-1-3-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54336 State: PUBLISHED Published: 2024-12-13T14:25:36.750Z Last Updated: 2024-12-13T16:11:54.634Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Projectopia Products: Projectopia Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Projectopia Projectopia allows Authentication Bypass.This issue affects Projectopia: from n/a through 5.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/projectopia-core/vulnerability/wordpress-projectopia-plugin-5-1-7-account-takeover-vulnerability?_s_id=cve
CVE ID: CVE-2024-54337 State: PUBLISHED Published: 2024-12-13T14:25:37.354Z Last Updated: 2024-12-13T16:11:23.276Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: DevriX Products: DX Dark Site Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in DevriX DX Dark Site allows Stored XSS.This issue affects DX Dark Site: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/devrix-dark-site/vulnerability/wordpress-dx-dark-site-plugin-1-0-1-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-54338 State: PUBLISHED Published: 2024-12-13T14:25:37.918Z Last Updated: 2024-12-13T16:10:35.798Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Christer Fernstrom Products: Hello Event Widgets For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Christer Fernstrom Hello Event Widgets For Elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hello-event-widgets-for-elementor/vul
A ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hello-event-widgets-for-elementor/vulnerability/wordpress-hello-event-widgets-for-elementor-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54339 State: PUBLISHED Published: 2024-12-13T14:25:38.434Z Last Updated: 2024-12-13T16:10:07.908Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: jbd7 Products: geoFlickr Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jbd7 geoFlickr allows Reflected XSS.This issue affects geoFlickr: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/geoflickr/vulnerability/wordpress-geoflickr-plugin-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54340 State: PUBLISHED Published: 2024-12-13T14:25:38.955Z Last Updated: 2024-12-13T14:53:22.339Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sylvia van Os Products: Simple Presenter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sylvia van Os Simple Presenter allows Reflected XSS.This issue affects Simple Presenter: from n/a through 1.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-presenter/vulnerability/wordpress-simple-presenter-plugin-1-5-1-reflected-cross-site-scriptin
se/wordpress/plugin/simple-presenter/vulnerability/wordpress-simple-presenter-plugin-1-5-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54341 State: PUBLISHED Published: 2024-12-13T14:25:39.500Z Last Updated: 2024-12-13T14:52:57.847Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LabelGrid Products: LabelGrid Tools Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LabelGrid LabelGrid Tools allows Reflected XSS.This issue affects LabelGrid Tools: from n/a through 1.3.58. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/label-grid-tools/vulnerability/wordpress-labelgrid-tools-plugin-1-3-58-reflected-cross-site-scripting-xss-vuln
ss/plugin/label-grid-tools/vulnerability/wordpress-labelgrid-tools-plugin-1-3-58-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54342 State: PUBLISHED Published: 2024-12-13T14:25:40.015Z Last Updated: 2024-12-13T14:51:41.124Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: STAGGS Products: Staggs Product Configurator for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in STAGGS Staggs Product Configurator for WooCommerce allows Reflected XSS.This issue affects Staggs Product Configurator for WooCommerce: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/staggs/vulnerability/wordpress-st
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/staggs/vulnerability/wordpress-staggs-plugin-2-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54343 State: PUBLISHED Published: 2024-12-13T14:25:40.590Z Last Updated: 2024-12-13T14:51:15.778Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Howard Ehrenberg Products: Connect Contact Form 7 to Constant Contact Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Howard Ehrenberg Connect Contact Form 7 to Constant Contact allows Reflected XSS.This issue affects Connect Contact Form 7 to Constant Contact: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/connect-contact-fo
nalyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/connect-contact-form-7-to-constant-contact-v3/vulnerability/wordpress-connect-contact-form-7-to-constant-contact-plugin-1-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54344 State: PUBLISHED Published: 2024-12-13T14:25:41.138Z Last Updated: 2024-12-13T14:50:53.449Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Fahad Mahmood Products: WP Quick Shop Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Quick Shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-quick-shop/vulnerability/wordpress-wp-quick-shop-plugin-1-3-1-reflected-cross-site-scripting-xss-vulnerabi
ess/plugin/wp-quick-shop/vulnerability/wordpress-wp-quick-shop-plugin-1-3-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54345 State: PUBLISHED Published: 2024-12-13T14:25:41.683Z Last Updated: 2024-12-13T14:50:28.731Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: SKT Themes Products: Bicycleshop Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SKT Themes Bicycleshop allows DOM-Based XSS.This issue affects Bicycleshop: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/bicycleshop/vulnerability/wordpress-bicycleshop-theme-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54346 State: PUBLISHED Published: 2024-12-13T14:25:42.231Z Last Updated: 2024-12-13T14:50:01.933Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: SKT Themes Products: Barter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SKT Themes Barter allows DOM-Based XSS.This issue affects Barter: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/barter/vulnerability/wordpress-barter-theme-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54347 State: PUBLISHED Published: 2024-12-13T14:25:42.847Z Last Updated: 2024-12-13T14:49:30.718Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: BAKKBONE Australia Products: FloristPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BAKKBONE Australia FloristPress allows Reflected XSS.This issue affects FloristPress: from n/a through 7.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bakkbone-florist-companion/vulnerability/wordpress-floristpress-plugin-7-2-0-reflected-cross-site-scri
/wordpress/plugin/bakkbone-florist-companion/vulnerability/wordpress-floristpress-plugin-7-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54348 State: PUBLISHED Published: 2024-12-16T15:51:22.322Z Last Updated: 2024-12-16T16:15:47.013Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: YayCommerce Products: Brand Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YayCommerce Brand allows Stored XSS.This issue affects Brand: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/brand/vulnerability/wordpress-brandy-theme-1-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54349 State: PUBLISHED Published: 2024-12-13T14:25:43.410Z Last Updated: 2024-12-13T14:49:08.852Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: mashiurz.com Products: Plain Post Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mashiurz.com Plain Post allows Stored XSS.This issue affects Plain Post: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/plain-post/vulnerability/wordpress-plain-post-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54350 State: PUBLISHED Published: 2024-12-18T11:38:26.778Z Last Updated: 2024-12-18T16:22:20.563Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: HJYL Products: hmd Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HJYL hmd allows Stored XSS.This issue affects hmd: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/hmd/vulnerability/wordpress-hmd-theme-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54351 State: PUBLISHED Published: 2024-12-13T14:25:43.949Z Last Updated: 2024-12-13T14:47:48.521Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Tom Landis Products: Fancy Roller Scroller Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tom Landis Fancy Roller Scroller allows Stored XSS.This issue affects Fancy Roller Scroller: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fancy-roller-scroller/vulnerability/wordpress-fancy-roller-scroller-plugin-1-4-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54352 State: PUBLISHED Published: 2024-12-16T14:14:13.747Z Last Updated: 2024-12-16T16:39:47.322Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Sabri Taieb Products: Sogrid Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sabri Taieb Sogrid allows Privilege Escalation.This issue affects Sogrid: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sogrid/vulnerability/wordpress-sogrid-plugin-1-5-2-csrf-to-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2024-54353 State: PUBLISHED Published: 2024-12-16T14:14:08.333Z Last Updated: 2024-12-16T19:55:07.827Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPGear Products: Hack-Info Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPGear Hack-Info allows Stored XSS.This issue affects Hack-Info: from n/a through 3.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hack-info/vulnerability/wordpress-hack-info-plugin-3-17-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-54354 State: PUBLISHED Published: 2024-12-16T14:31:37.937Z Last Updated: 2024-12-16T19:42:20.518Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Beat Kueffer Products: Termin-Kalender Problem Types: CWE-862 Description: Missing Authorization vulnerability in Beat Kueffer Termin-Kalender allows Stored XSS.This issue affects Termin-Kalender: from n/a through 0.99.47. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/termin-kalender/vulnerability/wordpress-termin-kalender-plugin-0-99-47-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-54355 State: PUBLISHED Published: 2024-12-16T14:14:13.158Z Last Updated: 2024-12-16T19:47:41.787Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: brandtoss Products: WP Mailster Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in brandtoss WP Mailster allows Cross Site Request Forgery.This issue affects WP Mailster: from n/a through 1.8.17.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-mailster/vulnerability/wordpress-wp-mailster-plugin-1-8-17-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-54356 State: PUBLISHED Published: 2024-12-16T14:14:12.526Z Last Updated: 2024-12-16T19:54:07.583Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: vCita.com Products: Online Booking & Scheduling Calendar for WordPress by vcita Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in vCita.com Online Booking & Scheduling Calendar for WordPress by vcita allows Cross Site Request Forgery.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/meeting-schedule