Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-9918 State: PUBLISHED Published: 2024-10-13T20:00:06.351Z Last Updated: 2024-10-15T15:00:21.848Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: HuangDou Products: UTCMS Problem Types: CWE-89 Description: A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/admin/sql.php. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrich
was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280246 - https://vuldb.com/?ctiid.280246 - https://vuldb.com/?submit.418750 - https://github.com/DeepMountains/zzz/blob/main/CVE5-3.md
CVE ID: CVE-2024-9919 State: PUBLISHED Published: 2025-03-20T10:09:56.293Z Last Updated: 2025-10-15T12:50:47.693Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-306 Description: A missing authentication check in the uninstall endpoint of parisneo/lollms-webui V13 allows attackers to perform unauthorized directory deletions. The /uninstall/{app_name} API endpoint does not call the check_access() function to verify the client_id, enabling attackers to delete directories without proper authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/5c00f56b-32
authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/5c00f56b-32a8-4e26-a4e3-de64f139da6b
CVE ID: CVE-2024-9920 State: PUBLISHED Published: 2025-03-20T10:10:08.169Z Last Updated: 2025-03-20T18:31:01.758Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-434 Description: In version v12 of parisneo/lollms-webui, the 'Send file to AL' function allows uploading files with various extensions, including potentially dangerous ones like .py, .sh, .bat, and more. Attackers can exploit this by uploading files with malicious content and then using the '/open_file' API endpoint to execute these files. The vulnerability arises from the use of 'subprocess.Popen' to open files without proper validation,
ecute these files. The vulnerability arises from the use of 'subprocess.Popen' to open files without proper validation, leading to potential remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/c70c6732-23b3-4ef8-aec6-0a47467d1ed5
CVE ID: CVE-2024-9921 State: PUBLISHED Published: 2024-10-14T02:48:52.207Z Last Updated: 2024-10-15T18:21:58.124Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: teamplus technology Products: team+ Problem Types: CWE-89 Description: The Team+ from TEAMPLUS TECHNOLOGY does not properly validate specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify and delete database contents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8124-d9b92-1.html - https://www.twcert.org.tw/en/cp-139-8125-4a1ad-2.html
CVE ID: CVE-2024-9922 State: PUBLISHED Published: 2024-10-14T02:55:01.325Z Last Updated: 2024-10-15T18:20:33.844Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: teamplus technology Products: team+ Problem Types: CWE-23 Description: The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8126-5d9d2-1.html - https://www.twcert.org.tw/en/cp-139-8127-41699-2.html
CVE ID: CVE-2024-9923 State: PUBLISHED Published: 2024-10-14T03:17:07.360Z Last Updated: 2024-10-15T18:16:10.527Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: teamplus technology Products: team+ Problem Types: CWE-23 Description: The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access them. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8128-772aa-1.html - https://www.twcert.org.tw/en/cp-139-8129-00002-2.html
CVE ID: CVE-2024-9924 State: PUBLISHED Published: 2024-10-14T03:23:21.849Z Last Updated: 2024-10-15T14:35:57.173Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hgiga Products: OAKlouds Problem Types: CWE-36 Description: The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk. Unauthenticated remote attackers still can download arbitrary system files, which may be deleted subsequently . Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8130-89bb1-1.html - https://www.twcert.org.tw/en/cp-139-8131-0b5e1-2.html
CVE ID: CVE-2024-9925 State: PUBLISHED Published: 2024-10-15T08:41:00.321Z Last Updated: 2024-10-17T11:48:53.608Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TAI Smart Factory Products: QPLANT SF Problem Types: CWE-89 Description: SQL injection vulnerability in TAI Smart Factory's QPLANT SF version 1.0. Exploitation of this vulnerability could allow a remote attacker to retrieve all database information by sending a specially crafted SQL query to the ‘email’ parameter on the ‘RequestPasswordChange’ endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://incibe.es/en/incibe-cert/notices/aviso-sci/sql-injection-qplant-tai-smart
- CISA ADP Vulnrichment: References: - https://incibe.es/en/incibe-cert/notices/aviso-sci/sql-injection-qplant-tai-smart-factory
CVE ID: CVE-2024-9926 State: PUBLISHED Published: 2024-11-07T15:02:38.050Z Last Updated: 2024-11-07T19:53:07.815Z Vendors: Unknown Products: Jetpack Problem Types: CWE-863 Incorrect Authorization Description: The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/669382af-f836-4896-bdcb-5c6a57c99bd9/
CVE ID: CVE-2024-9927 State: PUBLISHED Published: 2024-10-23T02:06:04.052Z Last Updated: 2024-10-23T14:06:19.510Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: WP Overnight BV Products: WooCommerce Order Proposal Problem Types: CWE-287 Description: The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of allow_payment_without_login function. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to log in to WordPress as an arbitrary user account, including administrators. Addition
Manager-level access and above, to log in to WordPress as an arbitrary user account, including administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cdc993a4-6f65-4570-811c-13a80dbec064?source=cve - https://wpovernight.com/downloads/woocommerce-order-proposal/
CVE ID: CVE-2024-9928 State: PUBLISHED Published: 2024-11-26T13:26:58.145Z Last Updated: 2024-11-26T16:11:19.880Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Hitachi Energy Products: NSD570 Teleprotection Equipment Problem Types: CWE-307 Description: A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. If exploited, this could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the equipment login. Note that the system supports only one concurrent session and implements a delay of more than a second between failed login attempts making it diff
ts only one concurrent session and implements a delay of more than a second between failed login attempts making it difficult to automate the attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000173&LanguageCode=en&DocumentPartId=&Action=launch
CVE ID: CVE-2024-9929 State: PUBLISHED Published: 2024-11-26T13:31:02.242Z Last Updated: 2024-11-26T15:20:14.006Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Hitachi Energy Products: NSD570 Teleprotection Equipment Problem Types: CWE-497 Description: A vulnerability exists in NSD570 that allows any authenticated user to access all device logs disclosing login information with timestamps. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000173&LanguageCode=en&DocumentPartId=&Action=launch
CVE ID: CVE-2024-9930 State: PUBLISHED Published: 2024-10-26T01:58:38.105Z Last Updated: 2024-10-28T19:29:08.451Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: skylarkcob Products: Extensions by HocWP Team Problem Types: CWE-288 Description: The Extensions by HocWP Team plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.2.3.2. This is due to missing validation on the user being supplied in the 'verify_email' action. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator. The vulnerability is in the Account extension. Additional Analyst Notes: -
g user on the site, such as an administrator. The vulnerability is in the Account extension. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ca3775db-0722-4090-924e-81e38d5dce97?source=cve - https://plugins.trac.wordpress.org/browser/sb-core/trunk/ext/account.php?rev=2715527#L374
CVE ID: CVE-2024-9931 State: PUBLISHED Published: 2024-10-26T01:58:34.373Z Last Updated: 2024-10-28T19:40:11.760Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: jurredeklijn Products: Wux Blog Editor Problem Types: CWE-288 Description: The Wux Blog Editor plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.0. This is due to missing validation on the token being supplied during the autologin through the plugin. This makes it possible for unauthenticated attackers to log in to the first administrator user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vul
trator user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/494ef738-c900-4d00-8739-3b261586d4ff?source=cve - https://plugins.trac.wordpress.org/browser/wux-blog-editor/tags/3.0.0/External_Post_Editor.php#L675
CVE ID: CVE-2024-9932 State: PUBLISHED Published: 2024-10-26T01:58:37.557Z Last Updated: 2024-10-28T19:30:54.474Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: jurredeklijn Products: Wux Blog Editor Problem Types: CWE-434 Description: The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbt_insertImageNew' function in versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
ver which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c2c0ab2d-1ba9-4a0a-b1fa-bacebe1034eb?source=cve - https://plugins.trac.wordpress.org/browser/wux-blog-editor/tags/3.0.0/External_Post_Editor.php#L675
CVE ID: CVE-2024-9933 State: PUBLISHED Published: 2024-10-26T01:58:35.013Z Last Updated: 2024-10-28T19:39:04.770Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: watchtowerhq Products: WatchTowerHQ Problem Types: CWE-288 Description: The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.6. This is due to the 'watchtower_ota_token' default value is empty, and the not empty check is missing in the 'Password_Less_Access::login' function. This makes it possible for unauthenticated attackers to log in to the WatchTowerHQ client administrator user. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ttackers to log in to the WatchTowerHQ client administrator user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/50349086-e7b0-4f73-8722-1367cc05180e?source=cve - https://plugins.trac.wordpress.org/browser/watchtowerhq/tags/3.9.6/src/Password_Less_Access.php#L56
CVE ID: CVE-2024-9934 State: PUBLISHED Published: 2024-11-06T06:00:07.117Z Last Updated: 2024-11-06T15:50:06.837Z Vendors: Unknown Products: Wp-ImageZoom Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Wp-ImageZoom WordPress plugin through 1.1.0 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/53e640a7-833e-40de-93d4-acea28aff5a5/
CVE ID: CVE-2024-9935 State: PUBLISHED Published: 2024-11-16T03:20:45.226Z Last Updated: 2024-11-19T15:14:19.116Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: redefiningtheweb Products: PDF Generator Addon for Elementor Page Builder Problem Types: CWE-22 Description: The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5 via the rtw_pgaepb_dwnld_pdf() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
iles on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/36daf2af-1db3-4b35-8849-480212660b2f?source=cve - https://plugins.trac.wordpress.org/browser/pdf-generator-addon-for-elementor-page-builder/trunk/public/class-pdf-generator-addon-for-elementor-page-builder-public.php#L133
CVE ID: CVE-2024-9936 State: PUBLISHED Published: 2024-10-14T13:41:25.300Z Last Updated: 2024-11-06T16:34:34.615Z Vendors: Mozilla Products: Firefox Problem Types: Undefined behavior in selection node cache Description: When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This vulnerability affects Firefox < 131.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1920381 - https://www.mozilla.org/security/advisories/mfsa2024-53/
CVE ID: CVE-2024-9937 State: PUBLISHED Published: 2024-10-16T05:31:57.222Z Last Updated: 2024-10-16T16:09:02.119Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: prasidhda Products: Woo Manage Fraud Orders Problem Types: CWE-79 Description: The Woo Manage Fraud Orders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 6.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
ripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fc8b0944-f669-40d3-899b-d7f91b1a1fea?source=cve - https://plugins.trac.wordpress.org/browser/woo-manage-fraud-orders/trunk/includes/admin/class-wmfo-logs-table.php#L108 - https://plugins.trac.wordpress.org/browser/woo-manage-fraud-orders/trunk/includes/admin/class-wmfo-fraud-attempts-table.php#L108
CVE ID: CVE-2024-9938 State: PUBLISHED Published: 2024-11-16T03:20:51.155Z Last Updated: 2024-11-16T15:09:23.954Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: kasperta Products: Bounce Handler MailPoet 3 Problem Types: CWE-79 Description: The Bounce Handler MailPoet 3 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.3.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a li
b scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d2c6fefe-f6f3-44ce-906c-abad717840d5?source=cve - https://plugins.trac.wordpress.org/browser/bounce-handler-mailpoet/trunk/includes/class-mailpoet-bounce-log.php#L193
CVE ID: CVE-2024-9939 State: PUBLISHED Published: 2025-01-08T08:18:17.104Z Last Updated: 2025-01-08T14:06:34.771Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: nickboss Products: WordPress File Upload Problem Types: CWE-22 Description: The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.13 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read files outside of the originally intended directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5e51f301-026d-4ed7-82f8-96c1623bf95c?sou
chment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5e51f301-026d-4ed7-82f8-96c1623bf95c?source=cve - https://plugins.trac.wordpress.org/changeset/3188857/wp-file-upload
CVE ID: CVE-2024-9940 State: PUBLISHED Published: 2024-10-17T02:06:05.303Z Last Updated: 2024-10-17T16:10:28.112Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: codepeople Products: Calculated Fields Form Problem Types: CWE-75 Description: The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 5.2.45. This is due to the plugin not properly neutralizing HTML elements from submitted forms. This makes it possible for unauthenticated attackers to inject arbitrary HTML that will render when the administrator views form submissions in their email. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
der when the administrator views form submissions in their email. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e2c9f6a5-8698-4452-bf0a-c1d796b2fdad?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3168950%40calculated-fields-form&new=3168950%40calculated-fields-form&sfp_email=&sfph_mail=
CVE ID: CVE-2024-9941 State: PUBLISHED Published: 2024-11-23T07:38:07.184Z Last Updated: 2024-11-24T18:28:30.187Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: dasinfomedia Products: WPGYM - Wordpress Gym Management System Problem Types: CWE-269 Description: The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the MJ_gmgt_add_staff_member() function in all versions up to, and including, 67.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to create new user accounts with the administrator role. Additional Analyst Notes: - CISA
criber-level access and above, to create new user accounts with the administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cbff92c1-8492-4d0d-bd90-8fd33625bf6f?source=cve - https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964
CVE ID: CVE-2024-9942 State: PUBLISHED Published: 2024-11-23T07:38:06.409Z Last Updated: 2024-11-24T18:32:32.882Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: dasinfomedia Products: WPGYM - Wordpress Gym Management System Problem Types: CWE-434 Description: The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the MJ_gmgt_user_avatar_image_upload() function in all versions up to, and including, 67.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additiona
tackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bae5f22d-5085-4230-a7fc-5db85aa6fbdb?source=cve - https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964
CVE ID: CVE-2024-9943 State: PUBLISHED Published: 2024-10-24T07:35:57.226Z Last Updated: 2024-10-24T18:59:14.959Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: wcmp Products: MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution Problem Types: CWE-352 Description: The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.4. This is due to missing or incorrect nonce validation on several functions in api/class-mvx-rest-controller.php. This makes it possible for unauthenticated attackers to update vendor account det
in api/class-mvx-rest-controller.php. This makes it possible for unauthenticated attackers to update vendor account details, create vendor accounts, and delete arbitrary users via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b950faf9-2122-42af-9f05-ec850767be32?source=cve - https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.1/api/class-mvx-rest-controller.php#L5258 - https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.1/api/class-mvx-rest-contro
.php#L5258 - https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.1/api/class-mvx-rest-controller.php#L6155 - https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.1/api/class-mvx-rest-controller.php#L6009 - https://plugins.trac.wordpress.org/changeset/3173238/dc-woocommerce-multi-vendor/trunk/api/class-mvx-rest-controller.php?old=3168957&old_path=dc-woocommerce-multi-vendor%2Ftrunk%2Fapi%2Fclass-mvx-rest-controller.php