Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10716 State: PUBLISHED Published: 2025-09-19T14:32:06.250Z Last Updated: 2025-09-19T16:53:10.546Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Creality Products: Cloud App Problem Types: CWE-926 Description: A flaw has been found in Creality Cloud App up to 6.1.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.cxsw.sdprinter. Executing manipulation can lead to improper export of android application components. It is possible to launch the attack on the local host. The exploit has been published and may be used. The vendor was contacted early about th
ch the attack on the local host. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325007 - https://vuldb.com/?ctiid.325007 - https://vuldb.com/?submit.645009 - https://github.com/KMov-g/androidapps/blob/main/com.cxsw.sdprinter.md
CVE ID: CVE-2025-10717 State: PUBLISHED Published: 2025-09-19T14:32:08.701Z Last Updated: 2025-09-19T16:52:27.527Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: intsig Products: CamScanner App Problem Types: CWE-926 Description: A vulnerability has been found in intsig CamScanner App 6.91.1.5.250711 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.intsig.camscanner. The manipulation leads to improper export of android application components. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacte
required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325008 - https://vuldb.com/?ctiid.325008 - https://vuldb.com/?submit.645010 - https://github.com/KMov-g/androidapps/blob/main/com.intsig.camscanner.md - https://github.com/KMov-g/androidapps/blob/main/com.intsig.camscanner.md#steps-to-reproduce
CVE ID: CVE-2025-10718 State: PUBLISHED Published: 2025-09-19T16:02:06.783Z Last Updated: 2025-09-19T17:59:24.238Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Ooma Products: Office Business Phone App Problem Types: CWE-926 Description: A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android. This affects an unknown part of the component com.ooma.office2. The manipulation results in improper export of android application components. The attack needs to be approached locally. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Addit
ade public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325009 - https://vuldb.com/?ctiid.325009 - https://vuldb.com/?submit.645012 - https://github.com/KMov-g/androidapps/blob/main/com.ooma.office2.md
CVE ID: CVE-2025-10719 State: PUBLISHED Published: 2025-09-19T10:06:37.226Z Last Updated: 2025-09-19T11:45:03.311Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: WisdomGarden Products: Tronclass Problem Types: CWE-639 Description: Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers with regular privilege to modify a specific parameter to access other users' files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10396-68624-1.html - https://www.twcert.org.tw/en/cp-139-10397-49db1-2.html
CVE ID: CVE-2025-10720 State: PUBLISHED Published: 2025-10-13T09:37:14.409Z Last Updated: 2025-10-28T20:35:31.151Z Vendors: Unknown Products: WP Private Content Plus Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The WP Private Content Plus through 3.6.2 provides a global content protection feature that requires a password. However, the access control check is based only on the presence of an unprotected client-side cookie. As a result, an unauthenticated attacker can completely bypass the password protection by manually setting the cookie value in their browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerab
kie value in their browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5295e8da-7aba-4322-981b-80d692b3bc35/
CVE ID: CVE-2025-10721 State: PUBLISHED Published: 2025-09-19T17:32:07.489Z Last Updated: 2025-09-19T17:50:32.927Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Webull Products: Investing & Trading App Problem Types: CWE-926 Description: A vulnerability was determined in Webull Investing & Trading App 11.2.5.63 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml. This manipulation causes improper export of android application components. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond i
been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325010 - https://vuldb.com/?ctiid.325010 - https://vuldb.com/?submit.645014 - https://github.com/KMov-g/androidapps/blob/main/org.dayup.stocks.md - https://github.com/KMov-g/androidapps/blob/main/org.dayup.stocks.md#steps-to-reproduce
CVE ID: CVE-2025-10722 State: PUBLISHED Published: 2025-09-19T17:32:10.026Z Last Updated: 2025-09-19T17:47:23.689Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: SKTLab Products: Mukbee App Problem Types: CWE-926 Description: A vulnerability was detected in SKTLab Mukbee App 1.01.196 on Android. This affects an unknown function of the file AndroidManifest.xml of the component com.dw.android.mukbee. The manipulation results in improper export of android application components. The attack must be initiated from a local position. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in
. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325015 - https://vuldb.com/?ctiid.325015 - https://vuldb.com/?submit.645019 - https://github.com/KMov-g/androidapps/blob/main/com.dw.android.mukbee.md - https://github.com/KMov-g/androidapps/blob/main/com.dw.android.mukbee.md#steps-to-reproduce
CVE ID: CVE-2025-10723 State: PUBLISHED Published: 2025-10-24T06:00:07.252Z Last Updated: 2025-10-24T13:38:46.985Z Vendors: Unknown Products: PixelYourSite Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to perform LFI attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/88a99f9d-dc7f-4c04-8734-77295c8656bf/
CVE ID: CVE-2025-10725 State: PUBLISHED Published: 2025-09-30T17:47:08.577Z Last Updated: 2025-11-06T21:54:28.681Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat OpenShift AI 2.16, Red Hat OpenShift AI 2.19, Red Hat OpenShift AI 2.21, Red Hat OpenShift AI 2.22, Red Hat OpenShift AI 2.24 Problem Types: CWE-266 Description: A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows for the complete compromise of the cluster's confident
ate their privileges to a full cluster administrator. This allows for the complete compromise of the cluster's confidentiality, integrity, and availability. The attacker can steal sensitive data, disrupt all services, and take control of the underlying infrastructure, leading to a total breach of the platform and all applications hosted on it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:16981 - https://access.redhat.com/errata/RHSA-2025:16982 - https://access.redhat.com/errata/RHSA-2025:16983 - https://access.redhat.com/errata/RHSA-2025:16984 - https://access.redhat.com/errata/RHSA-2025:17501 - https://access.redhat.com/security
edhat.com/errata/RHSA-2025:16984 - https://access.redhat.com/errata/RHSA-2025:17501 - https://access.redhat.com/security/cve/CVE-2025-10725 - https://bugzilla.redhat.com/show_bug.cgi?id=2396641
CVE ID: CVE-2025-10726 State: PUBLISHED Published: 2025-10-03T11:17:07.615Z Last Updated: 2025-10-03T17:54:23.685Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: quantumrose Products: WPRecovery Problem Types: CWE-89 Description: The WPRecovery plugin for WordPress is vulnerable to SQL Injection via the 'data[id]' parameter in all versions up to, and including, 2.0. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive informatio
ttackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additionally, the result of this SQL injection is passed directly to PHP's unlink() function, allowing attackers to delete arbitrary files on the server by injecting file paths through the SQL query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/15880d3b-87de-4b59-878c-e36e73c45e8a?source=cve - https://plugins.svn.wordpress.org/wprecovery/trunk/delete_backup.php - https://plugins.svn.wordpress.org/wprecovery/trunk/index.php - https://plugins.trac.wordpress.org/browser/wprecover
hp - https://plugins.svn.wordpress.org/wprecovery/trunk/index.php - https://plugins.trac.wordpress.org/browser/wprecovery/tags/2.0/delete_backup.php#L5 - https://plugins.trac.wordpress.org/browser/wprecovery/tags/2.0/index.php#L166
CVE ID: CVE-2025-10727 State: PUBLISHED Published: 2025-10-23T08:04:18.080Z Last Updated: 2025-10-23T14:59:22.063Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: ArkSigner Software and Hardware Inc. Products: AcBakImzala Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows Reflected XSS.This issue affects AcBakImzala: before v5.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0356
CVE ID: CVE-2025-10728 State: PUBLISHED Published: 2025-10-03T14:35:02.539Z Last Updated: 2025-10-06T11:02:30.763Z Vendors: The Qt Company Products: Qt Problem Types: CWE-674 Description: When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://codereview.qt-project.org/c/qt/qtsvg/+/654200
CVE ID: CVE-2025-10729 State: PUBLISHED Published: 2025-10-03T14:39:20.433Z Last Updated: 2025-10-06T11:03:23.719Z Vendors: The Qt Company Products: Qt Problem Types: CWE-416 Description: The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://codereview.qt-project.org/c/qt/qtsvg/+/676473
CVE ID: CVE-2025-10730 State: PUBLISHED Published: 2025-10-15T08:25:52.384Z Last Updated: 2025-11-24T20:30:07.604Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: gopiplushotmailcom Products: Wp tabber widget Problem Types: CWE-89 Description: The Wp tabber widget plugin for WordPress is vulnerable to SQL Injection via the 'wp-tabber-widget' shortcode in all versions up to, and including, 4.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing
uthenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/317e17ac-74bd-44cd-8bae-aa893c588a46?source=cve - https://plugins.trac.wordpress.org/browser/wp-tabber-widget/trunk/wp-tabber-widget.php#L51
CVE ID: CVE-2025-10732 State: PUBLISHED Published: 2025-10-14T05:24:58.320Z Last Updated: 2025-10-14T15:17:27.708Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: brainstormforce Products: SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more Problem Types: CWE-862 Description: The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.12.1. This is due to improper access control implementation on the '/wp-json/sureforms/v1/srfm-global-settings' REST API endpoint. This makes it possible for authenticated atta
ion on the '/wp-json/sureforms/v1/srfm-global-settings' REST API endpoint. This makes it possible for authenticated attackers, with contributor-level access and above, to retrieve sensitive information including API keys for Google reCAPTCHA, Cloudflare Turnstile, hCaptcha, admin email addresses, and security-related form settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f30ae90a-54fb-4c55-a6ed-9c411a6997fb?source=cve - https://plugins.trac.wordpress.org/browser/sureforms/tags/1.12.0/inc/global-settings/global-settings.php#L64 - https://plugins.trac.wordpress.org/browser/sureforms/tags/1.12.0/inc/global-settin
al-settings/global-settings.php#L64 - https://plugins.trac.wordpress.org/browser/sureforms/tags/1.12.0/inc/global-settings/global-settings.php#L314 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3368400%40sureforms&new=3368400%40sureforms&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10735 State: PUBLISHED Published: 2025-10-01T03:25:23.454Z Last Updated: 2025-10-01T15:00:41.816Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: bplugins Products: Block For Mailchimp – Easy Mailchimp Form Integration Problem Types: CWE-918 Description: The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via the mcbSubmit_Form_Data(). This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from int
sts to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/51de575f-d458-4a7d-bc57-4a11e5124377?source=cve - https://plugins.svn.wordpress.org/block-for-mailchimp/tags/1.1.9/mailchimp/API.php - https://wordpress.org/plugins/block-for-mailchimp/ - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3368808%40block-for-mailchimp&new=3368808%40block-for-mailchimp&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10737 State: PUBLISHED Published: 2025-10-25T05:31:21.568Z Last Updated: 2025-10-27T16:01:09.804Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: StudioPress Products: Open Source Genesis Framework Problem Types: CWE-79 Description: The Open Source Genesis Framework theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenev
ed attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6d7bd36a-ee41-4121-85b8-f234fd7e5c6e?source=cve - https://studiopress.github.io/genesis/changelog/
CVE ID: CVE-2025-10740 State: PUBLISHED Published: 2025-10-24T08:23:57.366Z Last Updated: 2025-10-24T16:26:40.492Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: rupok98 Products: URL Shortener Plugin For WordPress Problem Types: CWE-89 Description: The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provided by the API due to a missing capability check on the verifyRequest function in all versions up to, and including, 3.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify links. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
with Subscriber-level access and above, to modify links. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/29cc5016-005e-48e8-b929-5064798f24da?source=cve - https://plugins.trac.wordpress.org/browser/exact-links/trunk/app/Models/LinkAnalytics.php?rev=3210852 - https://plugins.trac.wordpress.org/browser/exact-links/trunk/app/Http/Routes/api.php
CVE ID: CVE-2025-10741 State: PUBLISHED Published: 2025-09-20T12:02:06.199Z Last Updated: 2025-09-22T13:55:33.060Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Selleo Products: Mentingo Problem Types: CWE-434, CWE-284 Description: A security vulnerability has been detected in Selleo Mentingo up to 2025.08.27. The affected element is an unknown function of the component Profile Picture Handler. The manipulation of the argument userAvatar leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Ad
closed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325068 - https://vuldb.com/?ctiid.325068 - https://vuldb.com/?submit.645385 - https://gist.github.com/KhanMarshaI/ba3e74b331ce4ab602a5a22a59aaf819 - https://gist.github.com/KhanMarshaI/7a2e74fcb194f7d6ee7e60da4a14af7b
CVE ID: CVE-2025-10742 State: PUBLISHED Published: 2025-10-16T06:47:29.826Z Last Updated: 2025-10-16T15:37:17.180Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: dreamstechnologies Products: Truelysell Core Problem Types: CWE-639 Description: The Truelysell Core plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.8.6. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for unauthenticated attackers to change user passwords and potentially take over administrator accounts. Note: This can only be exp
nticated attackers to change user passwords and potentially take over administrator accounts. Note: This can only be exploited unauthenticated if the attacker knows which page contains the 'truelysell_edit_staff' shortcode. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a636e865-9556-4afb-8726-4537a160f379?source=cve - https://themeforest.net/item/truelysell-service-booking-wordpress-theme/43398124
CVE ID: CVE-2025-10743 State: PUBLISHED Published: 2025-10-15T08:25:56.427Z Last Updated: 2025-10-15T14:37:39.882Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: maycorolbuche1 Products: Outdoor Problem Types: CWE-89 Description: The Outdoor plugin for WordPress is vulnerable to SQL Injection via the 'edit' action in all versions up to, and including, 1.3.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
ditional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6038accc-98ac-496c-9c53-ec06b2045324?source=cve - https://wordpress.org/plugins/outdoor/ - https://plugins.trac.wordpress.org/browser/outdoor/trunk/actions.php#L73
CVE ID: CVE-2025-10744 State: PUBLISHED Published: 2025-10-01T03:25:22.906Z Last Updated: 2025-10-01T15:00:59.652Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: softdiscover Products: File Manager, Code Editor, and Backup by Managefy Problem Types: CWE-200 Description: The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view information like full paths and full paths to backup files information contained in the exposed log files. Additional Analyst Note
n like full paths and full paths to backup files information contained in the exposed log files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/30147e39-af94-4620-870b-71a0a46b7509?source=cve - https://plugins.trac.wordpress.org/browser/softdiscover-db-file-manager/tags/1.5.0/modules/filemanager/helpers/iprogress.php#L19 - https://plugins.trac.wordpress.org/browser/softdiscover-db-file-manager/tags/1.5.0/modules/filemanager/controllers/backup.php#L460 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3369101%40softdiscover-db-file-manager&new=3369101%40softdiscover-db-file-manager&sfp
fp_email=&sfph_mail=&reponame=&old=3369101%40softdiscover-db-file-manager&new=3369101%40softdiscover-db-file-manager&sfp_email=&sfph_mail=