Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6532 State: PUBLISHED Published: 2024-08-14T09:29:59.268Z Last Updated: 2024-08-14T13:07:55.074Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: codersaiful Products: Sheet to Table Live Sync for Google Sheet Problem Types: CWE-79 Description: The Sheet to Table Live Sync for Google Sheet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STWT_Sheet_Table shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web
s. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f674d3bf-9927-48d9-85c7-34946e8a2eeb?source=cve - https://wordpress.org/plugins/sheet-to-wp-table-for-google-sheet/#developers - https://plugins.trac.wordpress.org/browser/sheet-to-wp-table-for-google-sheet/trunk/app/service/post/meta-box.php#L81 - https://plugins.trac.wordpress.org/changeset/3134934/
CVE ID: CVE-2024-6533 State: PUBLISHED Published: 2024-08-15T03:04:08.250Z Last Updated: 2025-05-19T17:56:31.826Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Directus Products: Directus Problem Types: CWE-79 Description: Directus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application injects an attacker-controlled parameter that will be stored in the server and used by the client into an unsanitized DOM element. When chained with CVE-2024-6534, it could result in account takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/ad
result in account takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/bocelli - https://directus.io/
CVE ID: CVE-2024-6534 State: PUBLISHED Published: 2024-08-15T03:10:46.778Z Last Updated: 2025-05-19T18:13:11.475Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Directus Products: Directus Problem Types: CWE-639 Description: Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with CVE-2024-6533, it could result in account takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisorie
in account takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/capaldi - https://directus.io/
CVE ID: CVE-2024-6535 State: PUBLISHED Published: 2024-07-17T02:25:25.958Z Last Updated: 2025-11-20T19:54:25.623Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Red Hat Products: Service Interconnect 1.4 for RHEL 9, Service Interconnect 1 for RHEL 9, Red Hat Service Interconnect 1 Problem Types: CWE-1392 Description: A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie. Additional Analyst Not
allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:4865 - https://access.redhat.com/errata/RHSA-2024:4871 - https://access.redhat.com/security/cve/CVE-2024-6535 - https://bugzilla.redhat.com/show_bug.cgi?id=2296024
CVE ID: CVE-2024-6536 State: PUBLISHED Published: 2024-07-30T06:00:10.760Z Last Updated: 2024-11-04T16:38:26.463Z Vendors: Unknown Products: Zephyr Project Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Zephyr Project Manager WordPress plugin before 3.3.99 does not sanitise and escape some of its settings, which could allow high privilege users such as editors and admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/ee40c1c6-4186-4b97-866c-fb0e76cedeb8/
CVE ID: CVE-2024-6538 State: PUBLISHED Published: 2024-11-25T06:15:12.697Z Last Updated: 2025-11-07T00:15:34.716Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15 Problem Types: CWE-918 Description: A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies all or part of a URL to the server to query. The server is considered to be in a privileged network position and can o
s all or part of a URL to the server to query. The server is considered to be in a privileged network position and can often reach exposed services that aren't readily available to clients due to network filtering. Leveraging such an attack vector, the attacker can have an impact on other services and potentially disclose information or have other nefarious effects on the system. The /api/dev-console/proxy/internet endpoint on the OpenShift Console allows authenticated users to have the console's pod perform arbitrary and fully controlled HTTP(s) requests. The full response to these requests is returned by the endpoint. While the name of this endpoint suggests the requests are only bound to
to these requests is returned by the endpoint. While the name of this endpoint suggests the requests are only bound to the internet, no such checks are in place. An authenticated user can therefore ask the console to perform arbitrary HTTP requests from outside the cluster to a service inside the cluster. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:14397 - https://access.redhat.com/errata/RHSA-2025:19058 - https://access.redhat.com/errata/RHSA-2025:7863 - https://access.redhat.com/errata/RHSA-2025:8280 - https://access.redhat.com/errata/RHSA-2025:8556 - https://access.redhat.com/security/cve/CVE-2024-6538 - https://bugzilla.red
://access.redhat.com/errata/RHSA-2025:8556 - https://access.redhat.com/security/cve/CVE-2024-6538 - https://bugzilla.redhat.com/show_bug.cgi?id=2296057
CVE ID: CVE-2024-6539 State: PUBLISHED Published: 2024-07-07T22:31:07.456Z Last Updated: 2024-08-01T21:41:03.714Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: heyewei Products: SpringBootCMS Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-270450 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. VDB-270450 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.270450 - https://vuldb.com/?ctiid.270450 - https://gitee.com/heyewei/SpringBootCMS/issues/IA9D7F
CVE ID: CVE-2024-6540 State: PUBLISHED Published: 2024-07-15T07:13:49.918Z Last Updated: 2024-08-01T21:41:03.955Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: OTRS AG Products: OTRS Problem Types: CWE-790 Description: Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator. This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x Additional Analyst Notes: - CISA ADP Vulnrich
ator. This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://otrs.com/release-notes/otrs-security-advisory-2024-07/
CVE ID: CVE-2024-6542 State: PUBLISHED Published: 2024-07-22T09:50:17.736Z Last Updated: 2024-08-01T21:41:03.497Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-140 Description: Improper neutralization of livestatus command delimiters in mknotifyd in Checkmk <= 2.0.0p39, < 2.1.0p47, < 2.2.0p32 and < 2.3.0p11 allows arbitrary livestatus command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/17013
CVE ID: CVE-2024-6544 State: PUBLISHED Published: 2024-09-13T15:10:40.438Z Last Updated: 2024-09-13T19:40:09.367Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: Custom Post Limits Problem Types: CWE-200 Description: The Custom Post Limits plugin for WordPress is vulnerable to full path disclosure in all versions up to, and including, 4.4.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires
eb application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9cf4a11e-ad28-4a93-9278-1d2d113a4859?source=cve - https://plugins.trac.wordpress.org/browser/custom-post-limits/trunk/tests/bootstrap.php
CVE ID: CVE-2024-6545 State: PUBLISHED Published: 2024-07-27T01:51:04.328Z Last Updated: 2024-08-01T21:41:03.791Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: Admin Trim Interface Problem Types: CWE-200 Description: The Admin Trim Interface plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.5.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requ
he web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/92a50f24-7011-4fe4-a095-e7e320bfec81?source=cve - https://plugins.trac.wordpress.org/browser/admin-trim-interface/trunk/tests/bootstrap.php
CVE ID: CVE-2024-6546 State: PUBLISHED Published: 2024-07-27T01:51:07.293Z Last Updated: 2024-08-01T21:41:03.771Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: One Click Close Comments Problem Types: CWE-200 Description: The One Click Close Comments plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.7.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own,
ath of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/feb63b10-fe23-4f89-9ef3-0a61b4190320?source=cve - https://plugins.trac.wordpress.org/browser/one-click-close-comments/trunk/tests/bootstrap.php
CVE ID: CVE-2024-6547 State: PUBLISHED Published: 2024-07-27T01:51:00.340Z Last Updated: 2024-08-01T21:41:03.471Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: Add Admin CSS Problem Types: CWE-200 Description: The Add Admin CSS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another v
tion, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0064244b-72a4-486d-aaad-be1f57e4a8a1?source=cve - https://plugins.trac.wordpress.org/browser/add-admin-css/trunk/tests/phpunit/bootstrap.php
CVE ID: CVE-2024-6548 State: PUBLISHED Published: 2024-07-27T01:51:02.903Z Last Updated: 2024-08-01T21:41:03.487Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: Add Admin JavaScript Problem Types: CWE-200 Description: The Add Admin JavaScript plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requir
web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1069c845-30b9-4aca-8a60-8b66c48365af?source=cve - https://plugins.trac.wordpress.org/browser/add-admin-javascript/trunk/tests/phpunit/bootstrap.php
CVE ID: CVE-2024-6549 State: PUBLISHED Published: 2024-07-27T01:51:05.368Z Last Updated: 2024-08-01T21:41:03.537Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: coffee2code Products: Admin Post Navigation Problem Types: CWE-200 Description: The Admin Post Navigation plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requ
he web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d27ef0b4-266f-47b8-a7aa-ddff5adaac7a?source=cve - https://plugins.trac.wordpress.org/browser/admin-post-navigation/trunk/tests/bootstrap.php
CVE ID: CVE-2024-6550 State: PUBLISHED Published: 2024-07-10T03:32:35.140Z Last Updated: 2024-08-01T21:41:03.778Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: tyxla Products: Gravity Forms: Multiple Form Instances Problem Types: CWE-200 Information Exposure Description: The Gravity Forms: Multiple Form Instances plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.1. This is due to the plugin leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not
retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3ec761eb-6bd9-4c19-a98d-cb4738922a84?source=cve - https://plugins.trac.wordpress.org/browser/gravity-forms-multiple-form-instances/trunk/tests/bootstrap.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3114842%40gravity-forms-multiple-form-instances&new=3114842%40gravity-forms-multiple-form
mail=&sfph_mail=&reponame=&old=3114842%40gravity-forms-multiple-form-instances&new=3114842%40gravity-forms-multiple-form-instances&sfp_email=&sfph_mail=
CVE ID: CVE-2024-6551 State: PUBLISHED Published: 2024-08-29T10:59:40.547Z Last Updated: 2024-08-29T13:39:04.182Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: webdevmattcrom Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-200 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.15.1. This is due to the plugin utilizing Symfony and leaving display_errors on within test files. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks
e for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2a13ce09-b312-4186-b0e2-63065c47f15d?source=cve - https://plugins.trac.wordpress.org/browser/give/tags/3.15.1/vendor/vendor-prefixed/symfony/http-foundation/Tests/Fixtures/response-functional/common.inc#L23
CVE ID: CVE-2024-6552 State: PUBLISHED Published: 2024-08-08T03:30:46.182Z Last Updated: 2024-08-08T14:08:54.284Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ameliabooking Products: Booking for Appointments and Events Calendar – Amelia Problem Types: CWE-200 Description: The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2. This is due to the plugin utilizing Symfony and leaving display_errors on within test files. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other att
sible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c9aa2a44-5a71-4a10-9876-3d54b8d268c5?source=cve - https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/vendor/symfony/http-foundation/Tests/Fixtures/response-functional/cookie_max_age.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3130903%40ameliabooking&new=313090
hp - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3130903%40ameliabooking&new=3130903%40ameliabooking&sfp_email=&sfph_mail=
CVE ID: CVE-2024-6553 State: PUBLISHED Published: 2024-07-24T06:42:22.418Z Last Updated: 2024-08-01T21:41:03.501Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: aguidrevitch Products: WP Meteor Website Speed Optimization Addon Problem Types: CWE-200 Description: The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.3.This is due to the plugin utilizing wpdesk and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information dis
attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6197c194-5a17-41da-be79-58a6f5c68a0b?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3117899%40wp-meteor&new=3117899%40wp-meteor&sfp_email=&sfph_mail=
CVE ID: CVE-2024-6554 State: PUBLISHED Published: 2024-07-11T03:33:18.987Z Last Updated: 2024-08-01T21:41:03.498Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wpmudev Products: Branda – White Label WordPress, Custom Login Page Customizer Problem Types: CWE-200 Information Exposure Description: The Branda – White Label WordPress, Custom Login Page Customizer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.18. This is due the plugin utilizing composer without preventing direct access to the files. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which
the files. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0a79eb25-a7d1-4102-97e6-8fa8db9ed03e?source=cve - https://plugins.trac.wordpress.org/browser/branda-white-labeling/trunk/misc/composer/prefix-fixer.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3115603%40branda-white-labe
fixer.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3115603%40branda-white-labeling&new=3115603%40branda-white-labeling&sfp_email=&sfph_mail=