Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-43202 State: PUBLISHED Published: 2024-08-20T07:29:43.170Z Last Updated: 2024-08-20T15:02:42.396Z Vendors: Apache Software Foundation Products: Apache DolphinScheduler Problem Types: CWE-94 Description: Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.2. We recommend users to upgrade Apache DolphinScheduler to version 3.2.2, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/dolphinscheduler/pull/15758 - https://lists.apache.org/thread/nlmdp7q7l7o3l27778vxc5px24ncr5r5 - https://lists.apache.org/thread/qbhk9wqyxhrn4z7m4m34
https://lists.apache.org/thread/nlmdp7q7l7o3l27778vxc5px24ncr5r5 - https://lists.apache.org/thread/qbhk9wqyxhrn4z7m4m343wqxpwg926nh - https://www.cve.org/CVERecord?id=CVE-2023-49109
CVE ID: CVE-2024-43204 State: PUBLISHED Published: 2025-07-10T16:54:15.759Z Last Updated: 2025-11-04T21:08:51.242Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-918 Description: SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request. Users are recommended to upgrade to version 2.4.64 which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://httpd.apac
this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html
CVE ID: CVE-2024-43207 State: PUBLISHED Published: 2024-08-18T21:40:57.021Z Last Updated: 2024-08-19T13:32:32.492Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Valiano Products: Unite Gallery Lite Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Valiano Unite Gallery Lite.This issue affects Unite Gallery Lite: from n/a through 1.7.62. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/unite-gallery-lite/wordpress-unite-gallery-lite-plugin-1-7-62-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-43208 State: PUBLISHED Published: 2024-11-01T14:17:41.689Z Last Updated: 2024-11-01T19:28:41.493Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Miller Media ( Matt Miller ) Products: Send Emails with Mandrill Problem Types: CWE-862 Description: Missing Authorization vulnerability in Miller Media ( Matt Miller ) Send Emails with Mandrill allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Send Emails with Mandrill: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/send-emails-with-mandrill/wordpress-send-emails-with-ma
ent: References: - https://patchstack.com/database/vulnerability/send-emails-with-mandrill/wordpress-send-emails-with-mandrill-plugin-1-3-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-43209 State: PUBLISHED Published: 2024-11-01T14:17:41.090Z Last Updated: 2024-11-05T16:12:20.989Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Bitly Products: Bitly Problem Types: CWE-862 Description: Missing Authorization vulnerability in Bitly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bitly: from n/a through 2.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-bitly/wordpress-bitly-s-wordpress-plugin-plugin-2-7-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-43210 State: PUBLISHED Published: 2024-08-12T21:46:24.697Z Last Updated: 2024-08-13T14:56:43.911Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: LA-Studio Products: LA-Studio Element Kit for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LA-Studio LA-Studio Element Kit for Elementor allows Stored XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/lastudio-element-kit/wordpress-la-studio-eleme
Vulnrichment: References: - https://patchstack.com/database/vulnerability/lastudio-element-kit/wordpress-la-studio-element-kit-for-elementor-plugin-1-3-9-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43211 State: PUBLISHED Published: 2024-11-01T14:17:40.482Z Last Updated: 2024-11-19T17:24:28.142Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PluginOps Products: MailChimp Subscribe Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through 4.0.9.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mailchimp-subscribe-sm/wordpress-mailchimp-subscribe-form-plugin-4-0-9-8-multiple-
patchstack.com/database/vulnerability/mailchimp-subscribe-sm/wordpress-mailchimp-subscribe-form-plugin-4-0-9-8-multiple-vulnerabilities-vulnerability?_s_id=cve
CVE ID: CVE-2024-43212 State: PUBLISHED Published: 2024-11-01T14:17:39.872Z Last Updated: 2024-11-05T16:15:09.387Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: MagePeople Team Products: WpTravelly Problem Types: CWE-862 Description: Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/tour-booking-manager/wordpress-wptravelly-plugin-1-7-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-43213 State: PUBLISHED Published: 2024-08-12T21:40:49.126Z Last Updated: 2024-08-13T16:10:09.526Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MultiVendorX Products: WC Marketplace Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MultiVendorX WC Marketplace allows Reflected XSS.This issue affects WC Marketplace: from n/a through 4.1.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dc-woocommerce-multi-vendor/wordpress-multivendorx-marketplace-plugin-4-1-17-reflected-cross-site-scrip
se/vulnerability/dc-woocommerce-multi-vendor/wordpress-multivendorx-marketplace-plugin-4-1-17-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43214 State: PUBLISHED Published: 2024-08-26T20:21:58.639Z Last Updated: 2024-08-26T20:36:55.810Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: myCred Products: myCred Problem Types: CWE-862 Description: Missing Authorization vulnerability in myCred.This issue affects myCred: from n/a through 2.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mycred/wordpress-mycred-plugin-2-7-2-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-43215 State: PUBLISHED Published: 2024-11-01T14:17:39.281Z Last Updated: 2024-11-01T19:39:20.362Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: creativemotion Products: Social Slider Feed Problem Types: CWE-862 Description: Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Slider Feed: from n/a through 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/instagram-slider-widget/wordpress-social-slider-feed-plugin-2-2-1-broken-access-control-vulnerability?_s
e/vulnerability/instagram-slider-widget/wordpress-social-slider-feed-plugin-2-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-43216 State: PUBLISHED Published: 2024-08-12T21:38:41.165Z Last Updated: 2024-08-13T14:06:17.605Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Patrick Posner Products: Filr – Secure document library Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Patrick Posner Filr – Secure document library allows Stored XSS.This issue affects Filr – Secure document library: from n/a through 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/filr-protection/wordpress-filr-secure-document-librar
hment: References: - https://patchstack.com/database/vulnerability/filr-protection/wordpress-filr-secure-document-library-plugin-1-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43217 State: PUBLISHED Published: 2024-08-12T21:35:42.059Z Last Updated: 2024-08-13T13:45:26.319Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Pierre Lebedel Products: Kodex Posts likes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pierre Lebedel Kodex Posts likes allows Reflected XSS.This issue affects Kodex Posts likes: from n/a through 2.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/kodex-posts-likes/wordpress-kodex-posts-likes-plugin-2-5-0-reflected-cross-site-scripting-x
k.com/database/vulnerability/kodex-posts-likes/wordpress-kodex-posts-likes-plugin-2-5-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43218 State: PUBLISHED Published: 2024-08-12T21:30:43.060Z Last Updated: 2024-08-22T11:37:56.348Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Mediavine Products: Mediavine Control Panel Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mediavine Mediavine Control Panel allows Stored XSS.This issue affects Mediavine Control Panel: from n/a through 2.10.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mediavine-control-panel/wordpress-mediavine-control-panel-plugin-2-10-4-cross-site-
atchstack.com/database/vulnerability/mediavine-control-panel/wordpress-mediavine-control-panel-plugin-2-10-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43219 State: PUBLISHED Published: 2024-11-01T14:17:38.696Z Last Updated: 2024-11-05T21:22:00.739Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: ووکامرس فارسی Products: Persian WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/persian-woocommerce/wordpress-persian-woocommerce-plugin-7-1-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-43220 State: PUBLISHED Published: 2024-08-12T21:22:38.130Z Last Updated: 2024-08-13T19:21:10.502Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: 10Web Form Builder Team Products: Form Maker by 10Web Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Reflected XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.26. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/form-maker/wordpress-form-maker-by-10web-plugin-1-15-26-reflected
ences: - https://patchstack.com/database/vulnerability/form-maker/wordpress-form-maker-by-10web-plugin-1-15-26-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43221 State: PUBLISHED Published: 2024-08-19T17:00:19.058Z Last Updated: 2024-08-19T17:58:34.224Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Crocoblock Products: JetGridBuilder Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetGridBuilder allows PHP Local File Inclusion.This issue affects JetGridBuilder: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/jetgridbuilder/wordpress-jetgridbuilder-plugin-1-1-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2024-43222 State: PUBLISHED Published: 2024-12-09T12:18:17.298Z Last Updated: 2024-12-20T12:18:23.485Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SeventhQueen Products: Sweet Date Problem Types: CWE-862 Description: Missing Authorization vulnerability in SeventhQueen Sweet Date.This issue affects Sweet Date: from n/a through 3.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/sweetdate/vulnerability/wordpress-sweet-date-more-than-a-wordpress-dating-theme-theme-3-7-3-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2024-43223 State: PUBLISHED Published: 2024-11-01T14:17:38.091Z Last Updated: 2024-11-01T19:51:14.317Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: EventPrime Events Products: EventPrime Problem Types: CWE-862 Description: Missing Authorization vulnerability in EventPrime Events EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 4.0.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/eventprime-event-calendar-management/wordpress-eventprime-plugin-4-0-3-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-43224 State: PUBLISHED Published: 2024-08-12T21:19:35.324Z Last Updated: 2024-08-13T14:06:44.741Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Yuri Baranov Products: YaMaps for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yuri Baranov YaMaps for WordPress allows Stored XSS.This issue affects YaMaps for WordPress: from n/a through 0.6.27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yamaps/wordpress-yamaps-for-wordpress-plugin-plugin-0-6-27-cross-site-scripting-xss-vu
hstack.com/database/vulnerability/yamaps/wordpress-yamaps-for-wordpress-plugin-plugin-0-6-27-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43225 State: PUBLISHED Published: 2024-08-12T21:17:43.026Z Last Updated: 2024-08-14T13:49:57.107Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ThemeLooks Products: Enter Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeLooks Enter Addons allows Stored XSS.This issue affects Enter Addons: from n/a through 2.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/enteraddons/wordpress-enter-addons-plugin-2-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43226 State: PUBLISHED Published: 2024-08-12T21:12:50.521Z Last Updated: 2024-08-13T14:57:12.657Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jeroen Sormani Products: WP Dashboard Notes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jeroen Sormani WP Dashboard Notes allows Stored XSS.This issue affects WP Dashboard Notes: from n/a through 1.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-dashboard-notes/wordpress-wp-dashboard-notes-plugin-1-0-11-cross-site-scripting-xss-v
tack.com/database/vulnerability/wp-dashboard-notes/wordpress-wp-dashboard-notes-plugin-1-0-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43227 State: PUBLISHED Published: 2024-08-12T21:07:03.693Z Last Updated: 2024-08-13T13:48:16.497Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPDeveloper Products: BetterDocs Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper BetterDocs allows Stored XSS.This issue affects BetterDocs: from n/a through 3.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/betterdocs/wordpress-betterdocs-best-documentation-faq-knowledge-base-plugin-with-ai-support-instant-answer-for-element
/betterdocs/wordpress-betterdocs-best-documentation-faq-knowledge-base-plugin-with-ai-support-instant-answer-for-elementor-gutenberg-plugin-3-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43229 State: PUBLISHED Published: 2024-11-01T14:17:37.432Z Last Updated: 2024-11-01T19:51:30.013Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Cornel Raiu Products: WP Search Analytics Problem Types: CWE-862 Description: Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Search Analytics: from n/a through 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/search-analytics/wordpress-wp-search-analytics-plugin-1-4-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-43230 State: PUBLISHED Published: 2024-08-26T20:19:27.030Z Last Updated: 2024-08-27T13:55:59.337Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Shared Files – File Upload Form Products: Shared Files Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Shared Files – File Upload Form Shared Files.This issue affects Shared Files: from n/a through 1.7.28. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shared-files/wordpress-shared-files-premium-download-manager-secure-file-sharing-with-frontend-file-upload-plugin-1-7-28-s
ared-files/wordpress-shared-files-premium-download-manager-secure-file-sharing-with-frontend-file-upload-plugin-1-7-28-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-43231 State: PUBLISHED Published: 2024-08-12T21:04:07.481Z Last Updated: 2024-08-13T17:33:26.136Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Themeum Products: Tutor LMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themeum Tutor LMS allows Stored XSS.This issue affects Tutor LMS: from n/a through 2.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/tutor/wordpress-tutor-lms-plugin-2-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43232 State: PUBLISHED Published: 2024-08-19T17:02:06.510Z Last Updated: 2024-08-21T14:36:43.941Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: WP OnlineSupport, Essential Plugin Products: Timeline and History slider Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP OnlineSupport, Essential Plugin Timeline and History slider allows PHP Local File Inclusion.This issue affects Timeline and History slider: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/timeline-and-history-slid
st Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/timeline-and-history-slider/wordpress-timeline-and-history-slider-plugin-2-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2024-43233 State: PUBLISHED Published: 2024-08-12T21:02:54.914Z Last Updated: 2024-08-13T16:10:50.712Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: BannerSky Products: BSK Forms Blacklist Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BannerSky BSK Forms Blacklist allows Reflected XSS.This issue affects BSK Forms Blacklist: from n/a through 3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bsk-gravityforms-blacklist/wordpress-bsk-forms-blacklist-plugin-3-8-cross-site-scripting-xss-vuln
database/vulnerability/bsk-gravityforms-blacklist/wordpress-bsk-forms-blacklist-plugin-3-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-43234 State: PUBLISHED Published: 2024-12-16T15:36:22.166Z Last Updated: 2024-12-20T12:20:12.023Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WofficeIO Products: Woffice Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice allows Authentication Bypass.This issue affects Woffice: from n/a through 5.4.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/woffice/vulnerability/wordpress-woffice-theme-5-4-14-unauthenticated-account-takeover-vulnerability?_s_id=cve
CVE ID: CVE-2024-43235 State: PUBLISHED Published: 2024-11-01T14:17:36.843Z Last Updated: 2024-11-01T19:51:43.812Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: MetaBox.io Products: Meta Box – WordPress Custom Fields Framework Problem Types: CWE-862 Description: Missing Authorization vulnerability in MetaBox.Io Meta Box – WordPress Custom Fields Framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.9.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/meta-box/wordpress-meta-box-plugin-
- CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/meta-box/wordpress-meta-box-plugin-5-9-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-43236 State: PUBLISHED Published: 2024-08-19T17:05:17.764Z Last Updated: 2024-09-03T15:01:19.825Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Scott Paterson Products: Easy PayPal Buy Now Button Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Easy PayPal Buy Now Button.This issue affects Easy PayPal Buy Now Button: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-ecommerce-paypal/wordpress-easy-paypal-stripe-buy-now-button-plugin-1-9-open-redirection-vulnerability?_s_id=cve