Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-5742 State: PUBLISHED Published: 2024-06-12T08:53:02.256Z Last Updated: 2025-11-21T07:02:53.182Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-59 Description: A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a ma
h the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:6986 - https://access.redhat.com/errata/RHSA-2024:9430 - https://access.redhat.com/security/cve/CVE-2024-5742 - https://bugzilla.redhat.com/show_bug.cgi?id=2278574
CVE ID: CVE-2024-5743 State: PUBLISHED Published: 2025-01-13T17:25:49.740Z Last Updated: 2025-01-13T18:25:58.273Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: EveHome Products: Eve Play Problem Types: CWE-916 Description: An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code. This issue affects Eve Play: through 1.1.42. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.evehome.com/en-us/security-content
CVE ID: CVE-2024-5744 State: PUBLISHED Published: 2024-07-13T06:00:13.171Z Last Updated: 2024-08-01T21:18:07.071Z Vendors: Unknown Products: wp-eMember Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/ba50e25c-7250-4025-a72f-74f8eb756246/
CVE ID: CVE-2024-5745 State: PUBLISHED Published: 2024-06-07T17:31:04.267Z Last Updated: 2024-08-01T21:18:07.059Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Bakery Online Ordering System Problem Types: CWE-434 Description: A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/product/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-267414 is the identifier assigned to this vulner
tely. The exploit has been disclosed to the public and may be used. VDB-267414 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.267414 - https://vuldb.com/?ctiid.267414 - https://vuldb.com/?submit.351827 - https://github.com/L1OudFd8cl09/CVE/blob/main/07_06_2024_a.md
CVE ID: CVE-2024-5746 State: PUBLISHED Published: 2024-06-20T21:31:37.111Z Last Updated: 2024-08-01T21:18:07.077Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L) Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-918 Description: A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the Site Administrator role to gain arbitrary code execution capability on the GitHub Enterprise Server instance. Exploitation required authenticated access to GitHub Enterprise Server as a user with the Site Administrator role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13
ser with the Site Administrator role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13 and was fixed in versions 3.12.5, 3.11.11, 3.10.13, and 3.9.16. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.16 - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.13 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.11 - https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.5
CVE ID: CVE-2024-5747 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:42.217Z Description: No description available.
CVE ID: CVE-2024-5749 State: PUBLISHED Published: 2024-10-15T17:27:51.556Z Last Updated: 2024-10-16T15:00:57.473Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: HP Inc. Products: Certain HP DesignJet products Problem Types: CWE-306 Description: Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_11428772-11428805-16/hpsbpi03979
CVE ID: CVE-2024-5750 State: REJECTED Published: N/A Last Updated: 2024-06-18T14:05:55.492Z Description: No description available.
CVE ID: CVE-2024-5751 State: PUBLISHED Published: 2024-06-27T18:40:49.896Z Last Updated: 2025-10-15T12:50:28.520Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: berriai Products: berriai/litellm Problem Types: CWE-94 Description: BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the `add_deployment` function, which decodes and decrypts environment variables from base64 and assigns them to `os.environ`. An attacker can exploit this by sending a malicious payload to the `/config/update` endpoint, which is then processed and executed by the server when the `get_secret` fu
us payload to the `/config/update` endpoint, which is then processed and executed by the server when the `get_secret` function is triggered. This requires the server to use Google KMS and a database to store a model. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/ae623c2f-b64b-4245-9ed4-f13a0a5824ce
CVE ID: CVE-2024-5752 State: PUBLISHED Published: 2025-03-20T10:11:17.971Z Last Updated: 2025-03-20T14:53:54.243Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: stitionai Products: stitionai/devika Problem Types: CWE-22 Description: A path traversal vulnerability exists in stitionai/devika, specifically in the project creation functionality. In the affected version beacf6edaa205a5a5370525407a6db45137873b3, the project name is not validated, allowing an attacker to create a project with a crafted name that traverses directories. This can lead to arbitrary file overwrite when the application generates code and saves it to the specified project directory, po
lead to arbitrary file overwrite when the application generates code and saves it to the specified project directory, potentially resulting in remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/865b5f44-ef75-4243-a5f1-2f0d895353b1 - https://github.com/stitionai/devika/commit/6acce21fb08c3d1123ef05df6a33912bf0ee77c2
CVE ID: CVE-2024-5753 State: PUBLISHED Published: 2024-07-05T19:27:22.046Z Last Updated: 2025-10-15T12:50:29.242Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: vanna-ai Products: vanna-ai/vanna Problem Types: CWE-89 Description: vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as `pg_read_file()`. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, including sensitive files like `/etc/passwd`, by exploiting the exposed SQL queries via a Python Flask API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr
ython Flask API. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/a3f913d6-c717-4528-b974-26d8d9e839ca
CVE ID: CVE-2024-5754 State: PUBLISHED Published: 2024-09-13T18:50:05.314Z Last Updated: 2025-09-17T14:09:48.490Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-807 Description: BT: Encryption procedure host vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gvv5-66hw-5qrc
CVE ID: CVE-2024-5755 State: PUBLISHED Published: 2024-06-27T18:45:48.607Z Last Updated: 2024-08-01T21:18:07.033Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-821 Description: In lunary-ai/lunary versions <=v1.2.11, an attacker can bypass email validation by using a dot character ('.') in the email address. This allows the creation of multiple accounts with essentially the same email address (e.g., 'attacker123@gmail.com' and 'attacker.123@gmail.com'), leading to incorrect synchronization and potential security issues. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
zation and potential security issues. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/cf337d37-e602-482b-aa7a-9e34e7f13e1f
CVE ID: CVE-2024-5756 State: PUBLISHED Published: 2024-06-21T04:34:10.900Z Last Updated: 2024-08-01T21:18:07.052Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: icegram Products: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.23 due to insuffic
vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.23 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c5bd11c6-2f55-4eee-834a-c4e405482b9c?source=cve - https://plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/includes/db/class-
34a-c4e405482b9c?source=cve - https://plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/includes/db/class-es-db-contacts.php#L532 - https://plugins.trac.wordpress.org/changeset/3101638/email-subscribers/trunk/lite/includes/db/class-es-db-contacts.php
CVE ID: CVE-2024-5757 State: PUBLISHED Published: 2024-06-13T05:34:45.484Z Last Updated: 2024-08-01T21:18:07.091Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brainstormforce Products: Elementor Header & Footer Builder Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url attribute within the plugin's Site Title widget in all versions up to, and including, 1.6.35 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit
6.35 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b5ab022c-c16c-488b-b004-a7351f8fa3d3?source=cve - https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/1.6.35/inc/widgets-manager/widgets/class-site-title.php#L461 - https://wordpress.org/plugins/header-footer-elementor/#developers - https://plugins.trac.wordpress.org/chan
e.php#L461 - https://wordpress.org/plugins/header-footer-elementor/#developers - https://plugins.trac.wordpress.org/changeset/3101672/#file3
CVE ID: CVE-2024-5758 State: REJECTED Published: 2024-06-08T06:54:34.038Z Last Updated: 2024-06-13T20:46:02.582Z Description: No description available.
CVE ID: CVE-2024-5759 State: PUBLISHED Published: 2024-06-12T16:00:26.228Z Last Updated: 2024-08-01T21:18:07.054Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Tenable Products: Security Center Problem Types: CWE-269 Description: An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without having the required privileges Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/tns-2024-10
CVE ID: CVE-2024-5760 State: PUBLISHED Published: 2024-09-11T15:18:31.777Z Last Updated: 2024-09-11T17:22:27.985Z Vendors: HP Inc. Products: Samsung Universal Print Driver Description: The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured before 2018. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_11159589-11159645-16/hpsbpi03970
CVE ID: CVE-2024-5761 State: REJECTED Published: N/A Last Updated: 2024-06-07T18:59:21.074Z Description: No description available.
CVE ID: CVE-2024-5762 State: PUBLISHED Published: 2024-08-21T16:15:27.278Z Last Updated: 2024-08-21T17:14:11.364Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zen Cart Products: Zen Cart Problem Types: CWE-98 Description: Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Zen Cart. Authentication is not required to exploit this vulnerability. The specific flaw exists within the findPluginAdminPage function. The issue results from the lack of proper validation of user-supplied data prior to passing it to a PHP include function
The issue results from the lack of proper validation of user-supplied data prior to passing it to a PHP include function. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. Was ZDI-CAN-21408. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-883/ - https://docs.zen-cart.com/release/whatsnew_2.0.0
CVE ID: CVE-2024-5763 State: PUBLISHED Published: 2024-08-20T03:21:09.506Z Last Updated: 2024-08-20T13:35:40.663Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: posimyththemes Products: The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce Problem Types: CWE-79 Description: The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the video_date attribute within the plugin's Video widget in all versions up to, and including, 5.6.2 due to insufficient input sanitization and output escaping. This makes i
get in all versions up to, and including, 5.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4eaf4c05-9393-4e44-abd1-8f529b7848b5?source=cve - https://plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder/tags/5.5.6/modules/widgets/tp_video_player.php?rev=3094329#L1351 - https://wordpress.org/plugins/the-plus-addons-for-elementor-page-builde
/widgets/tp_video_player.php?rev=3094329#L1351 - https://wordpress.org/plugins/the-plus-addons-for-elementor-page-builder/#developers - https://plugins.trac.wordpress.org/changeset/3136509/
CVE ID: CVE-2024-5764 State: PUBLISHED Published: 2024-10-23T14:47:55.783Z Last Updated: 2024-10-23T15:55:05.124Z Vendors: Sonatype Products: Nexus Repository Problem Types: CWE-798 Description: Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated. This issue affects Ne
to define an alternate encryption passphrase, it could only be done at first boot and not updated. This issue affects Nexus Repository: from 3.0.0 through 3.72.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.sonatype.com/hc/en-us/articles/34496708991507
CVE ID: CVE-2024-5765 State: PUBLISHED Published: 2024-07-30T06:00:08.234Z Last Updated: 2024-08-01T21:18:07.051Z Vendors: Unknown Products: WpStickyBar Problem Types: CWE-89 SQL Injection Description: The WpStickyBar WordPress plugin through 2.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/0b73f84c-611e-4681-b362-35e721478ba4/
CVE ID: CVE-2024-5766 State: PUBLISHED Published: 2024-06-08T12:00:06.623Z Last Updated: 2024-09-03T17:44:37.925Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: Likeshop Problem Types: CWE-79 Description: A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin of the component Merchandise Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-267449 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.267449 - https://vuldb.com
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.267449 - https://vuldb.com/?ctiid.267449 - https://gitee.com/likeshop_gitee/likeshop/issues/I9TAHP
CVE ID: CVE-2024-5767 State: PUBLISHED Published: 2024-07-02T06:00:03.708Z Last Updated: 2024-08-01T21:18:07.035Z Vendors: Unknown Products: sitetweet Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The sitetweet WordPress plugin through 0.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/e4ba26b4-5f4f-4c9e-aa37-885b30ef8088/
CVE ID: CVE-2024-5768 State: PUBLISHED Published: 2024-06-19T03:12:32.044Z Last Updated: 2024-08-01T21:18:07.045Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: surakrai Products: MIMO Woocommerce Order Tracking Problem Types: CWE-862 Missing Authorization Description: The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mimo_update_provider' function in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update shipping provider information, including adding stored cross-site s
s, with Subscriber-level access and above, to update shipping provider information, including adding stored cross-site scripting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aa26e595-947c-4327-bbe1-c347688f1209?source=cve - https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0.2/mimo-woocommerce-order-tracking.php#L304
CVE ID: CVE-2024-5769 State: PUBLISHED Published: 2025-01-09T11:10:56.814Z Last Updated: 2025-01-09T14:44:40.909Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: surakrai Products: MIMO Woocommerce Order Tracking Problem Types: CWE-862 Description: The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add, update, and delete shipper tracking settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
e, to add, update, and delete shipper tracking settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/47c666b1-1ac2-4764-bbee-385ec321a580?source=cve - https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0.2/mimo-woocommerce-order-tracking.php#L264 - https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0.2/mimo-woocommerce-order-tracking.php#L292 - https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0.2/mimo-woocommerce-order-tracking.php#L322 - https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0
oocommerce-order-tracking.php#L322 - https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0.2/mimo-woocommerce-order-tracking.php#L137
CVE ID: CVE-2024-5770 State: PUBLISHED Published: 2024-06-08T04:32:37.854Z Last Updated: 2024-08-01T21:18:07.058Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: webfactory Products: WP Force SSL & HTTPS SSL Redirect Problem Types: CWE-862 Missing Authorization Description: The WP Force SSL & HTTPS SSL Redirect plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_setting' function in versions up to, and including, 1.66. This makes it possible for authenticated attackers, subscriber-level permissions and above, to update the plugin settings. Additional Analyst Notes: - CISA ADP Vulnrichmen
subscriber-level permissions and above, to update the plugin settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c2081e4a-c6b7-4730-be59-bc728b90ecaa?source=cve - https://plugins.trac.wordpress.org/browser/wp-force-ssl/tags/1.66/wp-force-ssl.php#L953 - https://swisskyrepo.github.io/PayloadsAllTheThings/CRLF%20Injection/ - https://plugins.trac.wordpress.org/changeset/3099110/