Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-36708 State: PUBLISHED Published: 2023-06-07T01:51:22.525Z Last Updated: 2024-12-28T00:56:18.718Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wpchill, machothemes, silkalns Products: Allegiant, NatureMag Lite, NewsMag, Shapely, Bonkers, Regina Lite, Transcend, Sparkling, Newspaper X, Antreas, Affluent, Brilliance, Activello, Illdy, MedZone Lite, Pixova Lite Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <=
ns in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5b75c322-539d-44e9-8f26-5ff929874b67?so
ichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5b75c322-539d-44e9-8f26-5ff929874b67?source=cve - https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/ - https://www.wordfence.com/blog/2020/11/large-scale-attacks-target-epsilon-framework-themes/ - https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-in-wordpress-sparkling-theme/ - https://wpscan.com/vulnerability/bec52a5b-c892-4763-a962-05da7100eca5
CVE ID: CVE-2020-36709 State: PUBLISHED Published: 2023-06-07T01:51:23.813Z Last Updated: 2024-12-20T23:53:11.106Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: kingthemes Products: Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Page Builder: KingComposer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via via shortcode in versions before 2.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in p
anitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6447de64-b484-4f64-ad78-7df81b5a0ed7?source=cve - https://blog.nintechnet.com/wordpress-kingcomposer-page-builder-fixed-multiple-critical-vulnerabilities/ - https://wpsocket.com/plugin/kingcomposer/changelog/
CVE ID: CVE-2020-36710 State: PUBLISHED Published: 2023-06-07T01:51:26.862Z Last Updated: 2024-12-28T00:55:39.492Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: tabrisrp Products: WPS Hide Login Problem Types: CWE-863 Incorrect Authorization Description: The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulne
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7808329f-1688-480c-a83c-c4ab2fa86da6?source=cve - https://blog.nintechnet.com/wordpress-wps-hide-login-fixed-security-issue/
CVE ID: CVE-2020-36711 State: PUBLISHED Published: 2023-06-07T01:51:24.728Z Last Updated: 2024-12-20T23:53:02.485Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: Avada | Website Builder For WordPress & WooCommerce Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up to, and including, 6.2.3 due to insufficient input sanitization and output escaping. This makes it possible for contributor-level attackers, and above, to inject arbitrary web scripts in pages tha
scaping. This makes it possible for contributor-level attackers, and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/684a1e8e-30f2-47dd-9df6-145198030c52?source=cve - https://blog.nintechnet.com/avada-wordpress-theme-fixed-multiple-vulnerabilities/ - https://theme-fusion.com/security-fix-added-in-6-2-3/
CVE ID: CVE-2020-36712 State: PUBLISHED Published: 2023-06-07T01:51:31.644Z Last Updated: 2024-12-28T00:55:12.161Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: kaliforms Products: Contact Form builder with drag & drop for WordPress – Kali Forms Problem Types: CWE-862 Missing Authorization Description: The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 2.1.1. This is due to the kaliforms_form_delete_uploaded_file function lacking any privilege or user protections. This makes it possible for unauthenticated attackers to delete any site post or page with the id parameter. Additional An
his makes it possible for unauthenticated attackers to delete any site post or page with the id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/92644676-add4-415c-9a1a-c6616108688d?source=cve - https://blog.nintechnet.com/wordpress-kali-forms-plugin-fixed-multiple-vulnerabilities/
CVE ID: CVE-2020-36713 State: PUBLISHED Published: 2023-06-07T01:51:32.059Z Last Updated: 2024-12-28T00:55:05.529Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: inspireui Products: MStore API Problem Types: CWE-288 Authentication Bypass Using an Alternate Path or Channel Description: The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricted access to the 'register' and 'update_user_profile' routes. This makes it possible for unauthenticated attackers to create new administrator accounts, delete existing administrator accounts, or escalate privileges on any account. Addi
o create new administrator accounts, delete existing administrator accounts, or escalate privileges on any account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/934c3ce9-cf2d-4bf6-9a34-f448cb2e5a1d?source=cve - https://blog.nintechnet.com/critical-vulnerability-fixed-in-wordpress-mstore-api-plugin/ - https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-mstore-api-security-bypass-2-1-5/
CVE ID: CVE-2020-36714 State: PUBLISHED Published: 2023-10-20T07:29:23.827Z Last Updated: 2024-09-11T18:36:09.667Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: themefusecom Products: Brizy – Page Builder Problem Types: CWE-285 Improper Authorization Description: The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.co
ions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9495e25d-a5a6-4f25-9363-783626e58a4a?source=cve - https://blog.nintechnet.com/wordpress-brizy-page-builder-plugin-fixed-critical-vulnerabilities/
CVE ID: CVE-2020-36715 State: PUBLISHED Published: 2023-06-07T01:51:32.956Z Last Updated: 2024-12-20T23:52:00.457Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: xootix Products: Login/Signup Popup ( Inline Form + Woocommerce ) Problem Types: CWE-862 Missing Authorization Description: The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in versions up to, and including, 1.4. This makes it possible for authenticated attackers to inject arbitrary web scripts into the plugin settings that execute if they can successfully trick a user into performing an action such as clicking on a
o the plugin settings that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/96d264fe-e7e1-4eec-b235-9d288bc5a22f?source=cve - https://blog.nintechnet.com/zero-day-vulnerability-fixed-in-wordpress-login-signup-popup-plugin/ - https://plugins.trac.wordpress.org/changeset/2304979/easy-login-woocommerce
CVE ID: CVE-2020-36716 State: PUBLISHED Published: 2023-06-07T01:51:33.461Z Last Updated: 2024-12-28T00:54:57.711Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: wpwhitesecurity Products: WP Activity Log Problem Types: CWE-862 Missing Authorization Description: The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the setup_page function in versions up to, and including, 4.0.1. This makes it possible for unauthenticated attackers to run the setup wizard (if it has not been run previously) and access plugin configuration options. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
viously) and access plugin configuration options. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9d0a8be3-6630-4cf7-b6cb-cdc86b99acb3?source=cve - https://blog.nintechnet.com/vulnerabilities-fixed-in-wordpress-wp-security-audit-log-plugin/ - https://plugins.trac.wordpress.org/changeset/2252006
CVE ID: CVE-2020-36717 State: PUBLISHED Published: 2023-06-07T01:51:36.167Z Last Updated: 2024-12-23T16:21:19.414Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: kaliforms Products: Contact Form builder with drag & drop for WordPress – Kali Forms Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1. This is due to incorrect nonce handling throughout the plugin's function. This makes it possible for unauthenticated attackers to access the plugin's administrative functions via forged request granted they can trick a site admin
ticated attackers to access the plugin's administrative functions via forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a5bcf456-f991-4775-8c3e-a3c0212a5765?source=cve - https://blog.nintechnet.com/wordpress-kali-forms-plugin-fixed-multiple-vulnerabilities/
CVE ID: CVE-2020-36718 State: PUBLISHED Published: 2023-06-07T01:51:35.736Z Last Updated: 2024-12-28T00:54:36.570Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ninjateam Products: GDPR CCPA Compliance Support Problem Types: CWE-502 Deserialization of Untrusted Data Description: The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3 via deserialization of untrusted input "njt_gdpr_allow_permissions" value. This allows unauthenticated attackers to inject a PHP Object. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com
ect. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a2871261-3231-4a52-9a38-bb3caf461e7d?source=cve - https://plugins.trac.wordpress.org/changeset/2408938 - https://plugins.trac.wordpress.org/changeset/2411356/ninja-gdpr-compliance - https://blog.nintechnet.com/gdpr-ccpa-compliance-support-plugin-fixed-insecure-deserialization-vulnerability/ - https://wordpress.org/plugins/ninja-gdpr-compliance/#developers - https://wpscan.com/vulnerability/92f1d6fb-c665-419e-a13b-688b1df6c395
CVE ID: CVE-2020-36719 State: PUBLISHED Published: 2023-06-07T01:51:34.896Z Last Updated: 2024-12-28T00:54:43.200Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: ListingPro - WordPress Directory & Listing Theme Problem Types: CWE-862 Missing Authorization Description: The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lp_cc_addons_actions function. This makes it possible for unauthenticated attackers to arbitrarily install, activate and deactivate any plugin. Additional Analyst
it possible for unauthenticated attackers to arbitrarily install, activate and deactivate any plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a08fa649-3092-4c26-a009-2dd576b9b1ac?source=cve - https://blog.nintechnet.com/wordpress-listingpro-theme-fixed-a-critical-vulnerability/ - https://themeforest.net/item/listingpro-multipurpose-directory-theme/19386460
CVE ID: CVE-2020-36720 State: PUBLISHED Published: 2023-06-07T01:51:34.466Z Last Updated: 2024-12-20T23:51:47.069Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: kaliforms Products: Contact Form builder with drag & drop for WordPress – Kali Forms Problem Types: CWE-862 Missing Authorization Description: The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1. This is due to the update_option lacking proper authentication checks. This makes it possible for any authenticated attacker to change (or delete) the plugin's settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
acker to change (or delete) the plugin's settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9ed8e24d-6bd0-4638-9031-997ce2228fad?source=cve - https://blog.nintechnet.com/wordpress-kali-forms-plugin-fixed-multiple-vulnerabilities/ - https://wordpress.org/plugins/kali-forms/#developers
CVE ID: CVE-2020-36721 State: PUBLISHED Published: 2023-06-07T01:51:37.465Z Last Updated: 2024-12-28T00:54:23.163Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: silkalns, wpchill Products: Newspaper X, Brilliance, Activello Problem Types: CWE-284 Improper Access Control Description: The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/class-activello-welcome.php' file missing capability and security checks/nonces. This makes it possible for unauthenticat
lass-activello-welcome.php' file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a9e4e989-8e55-4ea7-8f42-9f67cfab1168?source=cve - https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/ - https://wordpress.org/themes/activello/ - https://wordpress.org/themes/newspaper-x/ - https://wordpress.org/themes/brilliance/
CVE ID: CVE-2020-36722 State: PUBLISHED Published: 2023-06-07T01:51:42.848Z Last Updated: 2024-12-20T23:50:41.471Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: visualcomposer Products: Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scrip
insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c476d9af-9060-4294-874a-86e550253d3b?source=cve - https://blog.nintechnet.com/multiple-xss-vulnerabilities-fixed-in-wordpress-visual-composer-plugin/ - https://wpscan.com/vulnerability/10229 - https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-visual-composer-website-builder-multiple-cross-site-scripting-vulnerabilities-26-0/
CVE ID: CVE-2020-36723 State: PUBLISHED Published: 2023-06-07T01:51:40.678Z Last Updated: 2024-12-28T00:53:55.083Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: ListingPro - WordPress Directory & Listing Theme Problem Types: CWE-200 Information Exposure Description: The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the ~/listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email addresses, phone numbers, physical addresses and user post counts. Additional Analys
luding usernames, full names, email addresses, phone numbers, physical addresses and user post counts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b9b21f8e-8d66-4d3e-a383-bea20a3c4498?source=cve - https://blog.nintechnet.com/wordpress-listingpro-theme-fixed-a-critical-vulnerability/ - https://themeforest.net/item/listingpro-multipurpose-directory-theme/19386460
CVE ID: CVE-2020-36724 State: PUBLISHED Published: 2023-06-07T01:51:41.520Z Last Updated: 2024-12-28T00:53:41.319Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wordable Products: Wordable – Export Google Docs to WordPress Problem Types: CWE-288 Authentication Bypass Using an Alternate Path or Channel Description: The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hash_hmac() function and the use of a loose comparison on the hash which allows an attacker to trick the function into thinking it has a valid hash. This make
loose comparison on the hash which allows an attacker to trick the function into thinking it has a valid hash. This makes it possible for unauthenticated attackers to gain administrator privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be1ab218-37bd-407a-8cb9-66f761849c21?source=cve - https://blog.nintechnet.com/wordpress-plugins-and-themes-vulnerabilities-roundup/ - https://plugins.trac.wordpress.org/changeset/2234193/wordable/trunk/wordable.php
CVE ID: CVE-2020-36725 State: PUBLISHED Published: 2023-06-07T01:51:45.136Z Last Updated: 2024-12-23T16:20:52.900Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: templateinvaders, TemplateInvaders Products: TI WooCommerce Wishlist, TI WooCommerce Wishlist Pro Problem Types: CWE-862 Missing Authorization Description: The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vulnerability in versions up to, and including, 1.21.11 and 1.21.4 via the 'ti-woocommerce-wishlist/includes/export.class.php' file. This makes it possible for authenticated attackers to gain otherwise restricted access to the vuln
port.class.php' file. This makes it possible for authenticated attackers to gain otherwise restricted access to the vulnerable blog and update any settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d60b5741-5496-4e87-bcb0-adaa0db07d90?source=cve - https://blog.nintechnet.com/critical-zero-day-vulnerability-fixed-in-wordpress-ti-woocommerce-wishlist-plugin/ - https://templateinvaders.com/changelogs/ti-woocommerce-wishlist-plugin-changelog/ - https://wpscan.com/vulnerability/2e2fb815-7cca-4e6c-b466-179337fe99ee
CVE ID: CVE-2020-36726 State: PUBLISHED Published: 2023-06-07T01:51:46.527Z Last Updated: 2024-12-28T00:53:13.855Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: rustaurius Products: Ultimate Reviews Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Ultimate Reviews plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.32 via deserialization of untrusted input in several vulnerable functions. This allows unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
esent in the vulnerable plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/db30acd7-ce51-45d9-8ff0-6ceea8237a8c?source=cve - https://blog.nintechnet.com/wordpress-ultimate-reviews-plugin-fixed-insecure-deserialization-vulnerability/ - https://plugins.trac.wordpress.org/changeset/2409141
CVE ID: CVE-2020-36727 State: PUBLISHED Published: 2023-06-07T01:51:47.021Z Last Updated: 2024-12-28T00:53:07.212Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: f1logic Products: Newsletter Manager Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Newsletter Manager plugin for WordPress is vulnerable to insecure deserialization in versions up to, and including, 1.5.1. This is due to unsanitized input from the 'customFieldsDetails' parameter being passed through a deserialization function. This potentially makes it possible for unauthenticated attackers to inject a serialized PHP object. Additional Analyst Notes: - CVE Program Cont
t possible for unauthenticated attackers to inject a serialized PHP object. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dcfd8c4d-d48b-468d-a7d5-1ec05b068f79?source=cve - https://blog.nintechnet.com/insecure-deserialization-vulnerability-in-wordpress-newsletter-manager-plugin-unpatched/ - https://wpscan.com/vulnerability/b82124b1-e5e1-4f1e-9513-90474fd3f066