Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-25950 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T15:41:36.728Z Vendors: HAProxy Technologies Products: HAProxy Problem Types: Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') Description: HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.haproxy.org/ - https://git.haproxy.org/?p=haproxy-2.7.git%3Ba=commi
: - CISA ADP Vulnrichment: References: - https://www.haproxy.org/ - https://git.haproxy.org/?p=haproxy-2.7.git%3Ba=commit%3Bh=3ca4223c5e1f18a19dc93b0b09ffdbd295554d46 - https://jvn.jp/en/jp/JVN38170084/
CVE ID: CVE-2023-25951 State: PUBLISHED Published: 2024-02-14T13:37:55.865Z Last Updated: 2024-08-14T18:46:12.449Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software Problem Types: escalation of privilege, CWE-20 Description: Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory
ogram Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE ID: CVE-2023-25952 State: PUBLISHED Published: 2023-11-14T19:04:22.210Z Last Updated: 2024-08-02T11:39:06.145Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: n/a Products: Intel(R) Arc(TM) Control software Problem Types: denial of service, CWE-787 Description: Out-of-bounds write in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01020.html
CVE ID: CVE-2023-25953 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T21:47:04.078Z Vendors: WORKS MOBILE Japan Corp. Products: Drive Explorer for macOS Problem Types: Code injection Description: Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LINE WORKS Drive Explorer, the attacker may be able to read and/or write to arbitrary files without the access privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP
or write to arbitrary files without the access privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://line.worksmobile.com/jp/release-notes/20230216/ - https://jvn.jp/en/jp/JVN01937209/
CVE ID: CVE-2023-25954 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T16:31:29.570Z Vendors: Kyocera Document Solutions, TA Triumph-Adler GmbH, and Olivetti SpA Products: KYOCERA Mobile Print, UTAX/TA MobilePrint, and Olivetti Mobile Print Problem Types: Exposure of resource to wrong sphere Description: KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and direct the affected app to download malicious files or apps to the
user's Android device, the app may send an intent and direct the affected app to download malicious files or apps to the device without notification. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2023-04-11.html - https://play.google.com/store/apps/details?id=com.kyocera.kyoprint - https://play.google.com/store/apps/details?id=com.kyocera.kyoprinttautax - https://play.google.com/store/apps/details?id=com.kyocera.kyoprintolivetti - https://jvn.jp/en/vu/JVNVU98434809/
CVE ID: CVE-2023-25955 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-10T15:58:18.117Z Vendors: Ministry of Land, Infrastructure, Transport and Tourism, Japan Products: National land numerical information data conversion tool Problem Types: Improper restriction of XML external entity reference (XXE) Description: National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nlftp.mlit.go.jp/i_news.html#
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nlftp.mlit.go.jp/i_news.html#news4 - https://jvn.jp/en/jp/JVN75742861/
CVE ID: CVE-2023-25956 State: PUBLISHED Published: 2023-02-24T11:48:33.110Z Last Updated: 2024-10-23T16:44:57.125Z Vendors: Apache Software Foundation Products: Apache Airflow AWS Provider Problem Types: CWE-209 Description: Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/29587 - https://lists.apache.org/thread/07pl9y4gdpw2c6rzqm77dvkm2z2kb5gv
CVE ID: CVE-2023-25957 State: PUBLISHED Published: 2023-03-14T09:31:56.091Z Last Updated: 2025-02-27T15:01:20.848Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: Mendix SAML (Mendix 7 compatible), Mendix SAML (Mendix 8 compatible), Mendix SAML (Mendix 9 latest compatible, New Track), Mendix SAML (Mendix 9 latest compatible, Upgrade Track), Mendix SAML (Mendix 9.6 compatible, New Track), Mendix SAML (Mendix 9.6 compatible, Upgrade Track) Problem Types: CWE-303 Description: A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versi
d in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible, New Track) (All versions >= V3.1.9 < V3.3.1), Mendix SAML (Mendix 9 latest compatible, Upgrade Track) (All versions >= V3.1.8 < V3.3.0), Mendix SAML (Mendix 9.6 compatible, New Track) (All versions >= V3.1.9 < V3.2.7), Mendix SAML (Mendix 9.6 compatible, Upgrade Track) (All versions >= V3.1.8 < V3.2.6). The affected versions of the module insufficiently verify the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. For compatibility re
allow unauthenticated remote attackers to bypass authentication and get access to the application. For compatibility reasons, fix versions still contain this issue, but only when the recommended, default configuration option `'Use Encryption'` is disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-851884.pdf
CVE ID: CVE-2023-25958 State: PUBLISHED Published: 2023-05-12T15:15:56.004Z Last Updated: 2025-01-09T15:16:59.293Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Justin Saad Products: Simple Tooltips Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Justin Saad Simple Tooltips plugin <= 2.1.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-tooltips/wordpress-simple-tooltips-plugin-2-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-25959 State: PUBLISHED Published: 2024-12-09T11:31:28.522Z Last Updated: 2024-12-09T18:43:17.524Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Apollo13Themes Products: Apollo13 Framework Extensions Problem Types: CWE-862 Description: Missing Authorization vulnerability in Apollo13Themes Apollo13 Framework Extensions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Apollo13 Framework Extensions: from n/a through 1.8.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/apollo13-framework-extensions/vulnerability/wordpress-apollo13-fram
: - https://patchstack.com/database/wordpress/plugin/apollo13-framework-extensions/vulnerability/wordpress-apollo13-framework-extensions-plugin-1-8-10-broken-access-control?_s_id=cve
CVE ID: CVE-2023-25960 State: PUBLISHED Published: 2023-11-03T12:23:32.831Z Last Updated: 2024-09-05T15:52:03.253Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Zendrop Products: Zendrop – Global Dropshipping Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zendrop Zendrop – Global Dropshipping zendrop-dropshipping-and-fulfillment allows SQL Injection.This issue affects Zendrop – Global Dropshipping: from n/a through 1.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/zendrop-dro
CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/zendrop-dropshipping-and-fulfillment/wordpress-zendrop-global-dropshipping-plugin-1-0-0-arbitrary-code-execution?_s_id=cve
CVE ID: CVE-2023-25961 State: PUBLISHED Published: 2023-05-04T19:59:14.109Z Last Updated: 2025-01-09T15:27:31.024Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Catch Themes Products: Darcie Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Catch Themes Darcie theme <= 1.1.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/darcie/wordpress-darcie-theme-1-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-25962 State: PUBLISHED Published: 2023-05-04T12:47:39.051Z Last Updated: 2025-01-09T15:28:55.586Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Biplob Adhikari Products: Accordion – Multiple Accordion or FAQs Builder Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari Accordion – Multiple Accordion or FAQs Builder plugin <= 2.3.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/accordions-or-faqs/wordpress-accordions-multiple-accordions-or-faqs-builder-plugin-2-3-0-cross-site-scri
e/vulnerability/accordions-or-faqs/wordpress-accordions-multiple-accordions-or-faqs-builder-plugin-2-3-0-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-25963 State: PUBLISHED Published: 2023-06-16T08:41:38.322Z Last Updated: 2024-10-10T18:55:58.790Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: JoomSky Products: JS Job Manager Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/js-jobs/wordpress-js-job-manager-plugin-2-0-0-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-25964 State: PUBLISHED Published: 2023-06-13T14:07:00.353Z Last Updated: 2024-11-01T14:02:26.771Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Noah Hearle, Design Extreme Products: We’re Open! Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Noah Hearle, Design Extreme We’re Open! plugin <= 1.46 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/opening-hours/wordpress-we-re-open-plugin-1-46-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-25965 State: PUBLISHED Published: 2024-03-26T19:54:53.457Z Last Updated: 2024-08-05T17:37:59.219Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: mbbhatti Products: Upload Resume Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in mbbhatti Upload Resume.This issue affects Upload Resume: from n/a through 1.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/resume-upload-form/wordpress-upload-resume-plugin-1-2-0-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2023-25966 State: PUBLISHED Published: 2024-12-09T11:31:27.702Z Last Updated: 2024-12-09T18:43:23.123Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: Ninja Team Products: Filebird Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/filebird/vulnerability/wordpress-filebird-plugin-5-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-25967 State: PUBLISHED Published: 2023-05-03T15:29:45.820Z Last Updated: 2025-01-09T15:29:06.643Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: PeepSo Products: Community by PeepSo Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo plugin <= 6.0.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/peepso-core/wordpress-community-by-peepso-social-network-membership-registration-user-profiles-plugin-6-0-2-0-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2023-25968 State: PUBLISHED Published: 2023-03-15T10:20:38.279Z Last Updated: 2024-08-02T14:46:50.697Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Cozmoslabs, Madalin Ungureanu, Antohe Cristian Products: Client Portal – Private user pages and login Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin <= 1.1.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/client-portal/wordpress-client-portal-plugin-1-1-8-cross-sit
References: - https://patchstack.com/database/vulnerability/client-portal/wordpress-client-portal-plugin-1-1-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-25970 State: PUBLISHED Published: 2023-12-20T19:18:14.320Z Last Updated: 2024-08-02T11:39:06.018Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Zendrop Products: Zendrop – Global Dropshipping Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Zendrop Zendrop – Global Dropshipping.This issue affects Zendrop – Global Dropshipping: from n/a through 1.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/zendrop-dropshipping-and-fulfillment/wordpress-zendrop-global-dropshipping-plugin-1-0-0-arbitrary-file-upload?_s_id=cve
CVE ID: CVE-2023-25971 State: PUBLISHED Published: 2023-05-26T11:06:05.388Z Last Updated: 2025-01-08T21:56:30.920Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: FixBD Products: Educare Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in FixBD Educare plugin <= 1.4.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/educare/wordpress-educare-students-result-management-system-plugin-1-4-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2023-25972 State: PUBLISHED Published: 2023-06-15T12:28:29.649Z Last Updated: 2024-08-02T11:39:06.157Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: IKSWEB Products: WordPress Старт Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in IKSWEB WordPress Старт plugin <= 3.7 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/iksweb/wordpress-start-plugin-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-25973 State: PUBLISHED Published: 2023-03-13T14:14:05.882Z Last Updated: 2025-01-13T15:53:28.569Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Lucian Apostol Products: Auto Affiliate Links Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links plugin <= 6.3.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-auto-affiliate-links/wordpress-auto-affiliate-links-plugin-6-3-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-25974 State: PUBLISHED Published: 2023-06-16T11:09:29.892Z Last Updated: 2024-10-10T18:55:20.822Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: psicosi448 Products: wp2syslog Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in psicosi448 wp2syslog plugin <= 1.0.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp2syslog/wordpress-wp2syslog-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-25975 State: PUBLISHED Published: 2023-11-09T17:43:26.107Z Last Updated: 2024-09-03T18:54:45.551Z Vendors: Frédéric Sheedy Products: Etsy Shop Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Frédéric Sheedy Etsy Shop plugin <= 3.0.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/etsy-shop/wordpress-etsy-shop-plugin-3-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-25976 State: PUBLISHED Published: 2023-05-26T11:13:08.035Z Last Updated: 2024-08-02T11:39:06.491Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: CRM Perks Products: Integration for Contact Form 7 and Zoho CRM, Bigin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin <= 1.2.2 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cf7-zoho/wordpress-integration-for-contact-form-7-and-zoho-crm-bigin-plugin-1-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-25977 State: PUBLISHED Published: 2023-05-04T19:36:35.956Z Last Updated: 2025-01-09T15:27:52.712Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: 9seeds.com Products: CPT – Speakers Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 9seeds.Com CPT – Speakers plugin <= 1.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cpt-speakers/wordpress-cpt-speakers-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-25978 State: PUBLISHED Published: 2023-06-13T15:09:31.271Z Last Updated: 2024-08-02T13:40:15.672Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Nate Reist Products: Protected Posts Logout Button Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nate Reist Protected Posts Logout Button plugin <= 1.4.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/protected-posts-logout-button/wordpress-protected-posts-logout-button-plugin-1-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-25979 State: PUBLISHED Published: 2023-05-03T13:37:42.117Z Last Updated: 2025-01-09T15:30:57.592Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Video Gallery by Total-Soft Products: Video Gallery Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Video Gallery by Total-Soft Video Gallery plugin <= 1.7.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gallery-videos/wordpress-video-gallery-youtube-gallery-plugin-1-7-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-25980 State: PUBLISHED Published: 2023-10-04T10:25:13.124Z Last Updated: 2024-09-19T18:08:19.175Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: CAGE Web Design | Rolf van Gelder Products: Optimize Database after Deleting Revisions Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin <= 5.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rvg-optimize-database/wordpress-optimize-database-after-deleting-revisions-plugin-5-0-110-cr
.com/database/vulnerability/rvg-optimize-database/wordpress-optimize-database-after-deleting-revisions-plugin-5-0-110-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-25981 State: PUBLISHED Published: 2023-08-25T09:54:38.822Z Last Updated: 2024-09-24T19:25:55.467Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ThemeKraft Products: Post Form Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form plugin <= 2.8.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/buddyforms/wordpress-buddyforms-plugin-2-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-25982 State: PUBLISHED Published: 2023-05-04T19:48:23.804Z Last Updated: 2025-01-09T15:27:43.927Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Eirudo Products: Simple YouTube Responsive Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Eirudo Simple YouTube Responsive plugin <= 2.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-youtube-responsive/wordpress-simple-youtube-responsive-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve