Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
iner: References: - https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.12 - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.7 - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.4 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.1
CVE ID: CVE-2023-6804 State: PUBLISHED Published: 2023-12-21T20:45:34.098Z Last Updated: 2024-11-27T18:41:27.790Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-269 Description: Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.git
, and 3.11.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.12 - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.7 - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.4 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.1
CVE ID: CVE-2023-6805 State: PUBLISHED Published: 2024-04-17T12:54:01.589Z Last Updated: 2024-08-02T08:42:07.456Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themeisle Products: RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 4.4.7 via the fetch_feed functionality. This makes it possible for authenticated attackers, with contributor acce
uding, 4.4.7 via the fetch_feed functionality. This makes it possible for authenticated attackers, with contributor access and above, to make web requests to arbitrary locations originating from the web application and can be used to modify information from internal services. NOTE: This vulnerability, exploitable by contributor-level users, was was fixed in version 4.4.7. The same vulnerability was fixed for author-level users in version 4.4.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=cve - https://plugins.trac.wordpress.org/changeset/3070624/
lnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=cve - https://plugins.trac.wordpress.org/changeset/3070624/feedzy-rss-feeds
CVE ID: CVE-2023-6806 State: PUBLISHED Published: 2024-02-20T18:56:21.810Z Last Updated: 2024-08-02T08:42:08.122Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cifi Products: Starbox – the Author Box for Humans Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Settings user profile fields in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrar
escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1f413fc2-8543-4478-987d-d983581027bf?source=cve - https://plugins.trac.wordpress.org/changeset/3029599/starbox
CVE ID: CVE-2023-6807 State: PUBLISHED Published: 2024-02-05T21:27:12.608Z Last Updated: 2024-08-02T08:42:07.443Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: GeneratePress Products: GeneratePress Premium Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The GeneratePress Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom meta output in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and
put escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9dcd48b8-ec9e-44b4-b531-95940adbd100?source=cve - https://generatepress.com/category/changelog/
CVE ID: CVE-2023-6808 State: PUBLISHED Published: 2024-02-05T21:21:57.486Z Last Updated: 2024-08-02T08:42:08.269Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ameliabooking Products: Booking for Appointments and Events Calendar – Amelia Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.0.93 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possi
ding, 1.0.93 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aafb5402-3553-4c89-86e0-4dd556d86074?source=cve - https://plugins.svn.wordpress.org/ameliabooking/trunk/view/frontend/events.inc.php - https://plugins.trac.wordpress.org/changeset/3015149/ameliabooking/trunk/view/frontend/events.inc.php
CVE ID: CVE-2023-6809 State: PUBLISHED Published: 2024-03-13T15:27:07.419Z Last Updated: 2024-08-02T08:42:07.458Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gonahkar Products: Custom fields shortcode Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Custom fields shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cf shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping on user supplied custom post meta values. This makes it possible for authenticated attackers with contributor-level
ing on user supplied custom post meta values. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/99d3d5aa-dd82-415a-bc40-9d2c677d9248?source=cve - https://wordpress.org/plugins/beepress/
CVE ID: CVE-2023-6810 State: PUBLISHED Published: 2024-05-07T09:31:49.002Z Last Updated: 2024-08-02T08:42:07.461Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: barpachuk Products: ClickCease Click Fraud Protection Problem Types: CWE-284 Improper Access Control Description: The ClickCease Click Fraud Protection plugin for WordPress is vulnerable to unauthorized access of data due to an improper capability check on the get_settings function in all versions up to, and including, 3.2.4. This makes it possible for authenticated attackers, with author access and above, to retrieve the plugin's configured API keys. Additional Analyst Notes: - CISA ADP Vulnrichmen
author access and above, to retrieve the plugin's configured API keys. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5d572cac-b8e3-4c52-9b35-80fe5ee9e900?source=cve - https://plugins.trac.wordpress.org/changeset/3081436/clickcease-click-fraud-protection/trunk/classes/routes.php
CVE ID: CVE-2023-6811 State: PUBLISHED Published: 2024-04-11T01:51:36.578Z Last Updated: 2024-08-02T08:42:07.454Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: conveythis Products: Language Translate Widget for WordPress – ConveyThis Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Language Translate Widget for WordPress – ConveyThis plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key’ parameter in all versions up to, and including, 223 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arb
insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/093af92e-bbc2-463a-8547-0e48fb356655?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3067865%40conveythis-translate%2Ftrunk&old=3062168%40conveythis-translate%2Ftrunk&sfp_email=&sfph_mail=#file5
CVE ID: CVE-2023-6812 State: PUBLISHED Published: 2024-05-14T02:01:28.913Z Last Updated: 2024-08-02T08:42:07.691Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: smartersite Products: WP Compress – Image Optimizer [All-In-One] Problem Types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') Description: The WP Compress – Image Optimizer [All-In-One plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 6.20.01. This is due to insufficient validation on the redirect url supplied via the 'css' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can
meter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cbbf9fbb-74fd-42eb-a781-2a720fe56b13?source=cve - https://plugins.trac.wordpress.org/changeset/3082085/wp-compress-image-optimizer/trunk/fixCss.php
CVE ID: CVE-2023-6813 State: PUBLISHED Published: 2024-07-10T07:36:43.632Z Last Updated: 2024-08-02T08:42:07.447Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: auth0 Products: Login by Auth0 Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Login by Auth0 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘wle’ parameter in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick
sible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0c4e0d48-fde1-45dd-8e06-4582cf677579?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3114611%40auth0&new=3114611%40auth0&sfp_email=&sfph_mail=
CVE ID: CVE-2023-6814 State: PUBLISHED Published: 2024-03-12T03:39:22.392Z Last Updated: 2024-08-02T08:42:07.404Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Hitachi Products: Cosminexus Component Container Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 before 11-10-10, from 11-00 before 11-00-12, All versions of V8 and V9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
before 11-00-12, All versions of V8 and V9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-118/index.html
CVE ID: CVE-2023-6815 State: PUBLISHED Published: 2024-02-13T06:27:51.202Z Last Updated: 2024-08-02T08:42:07.419Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series Safety CPU R08SFCPU, MELSEC iQ-R Series Safety CPU R16SFCPU, MELSEC iQ-R Series Safety CPU R32SFCPU, MELSEC iQ-R Series Safety CPU R120SFCPU, MELSEC iQ-R Series SIL2 Process CPU R08PSFCPU, MELSEC iQ-R Series SIL2 Process CPU R16PSFCPU, MELSEC iQ-R Series SIL2 Process CPU R32PSFCPU, MELSEC iQ-R Series SIL2 Process CPU R120PSFCPU Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporati
PSFCPU Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions and MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote authenticated attacker who has logged into the product as a non-administrator user to disclose the credentials (user ID and password) of a user with a lower access level than the attacker by sending a specially crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-021_en.pdf - https://jvn.jp/vu/JVNVU950858
erences: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-021_en.pdf - https://jvn.jp/vu/JVNVU95085830/index.html - https://www.cisa.gov/news-events/ics-advisories/icsa-24-044-01
CVE ID: CVE-2023-6816 State: PUBLISHED Published: 2024-01-18T04:31:07.908Z Last Updated: 2025-11-20T07:07:48.385Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services
te Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-787 Description: A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the d
down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:0320 - https://access.redhat.com/errata/RHSA-2024:0557 - https://access.redhat.com/errata/RHSA-2024:0558 - https://access.redhat.com/errata/RHSA-2024:0597 - https://access.redhat.com/errata/RHSA-2024:0607 - https://access.redhat.com/errata/RHSA-2024:0614 - https://access.redhat.com/errata/RHSA-2024:0617 - https://access.redhat.com/errata/RHSA-2024:0621
rrata/RHSA-2024:0614 - https://access.redhat.com/errata/RHSA-2024:0617 - https://access.redhat.com/errata/RHSA-2024:0621 - https://access.redhat.com/errata/RHSA-2024:0626 - https://access.redhat.com/errata/RHSA-2024:0629 - https://access.redhat.com/errata/RHSA-2024:2169 - https://access.redhat.com/errata/RHSA-2024:2170 - https://access.redhat.com/errata/RHSA-2024:2996 - https://access.redhat.com/errata/RHSA-2025:12751 - https://access.redhat.com/security/cve/CVE-2023-6816 - https://bugzilla.redhat.com/show_bug.cgi?id=2257691
CVE ID: CVE-2023-6817 State: PUBLISHED Published: 2023-12-18T14:37:05.986Z Last Updated: 2025-02-13T17:26:33.238Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free. We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a. Additional Analyst Notes: - CVE Program Contai
recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=317eb9685095678f2c9f5a8189de698c5354316a - https://kernel.dance/317eb9685095678f2c9f5a8189de698c5354316a - http://www.openwall.com/lists/oss-security/2023/12/22/6 - http://www.openwall.com/lists/oss-security/2023/12/22/13 - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html - http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html
CVE ID: CVE-2023-6818 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:32.306Z Description: No description available.
CVE ID: CVE-2023-6819 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:06:03.880Z Description: No description available.
CVE ID: CVE-2023-6820 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:32.460Z Description: No description available.
CVE ID: CVE-2023-6821 State: PUBLISHED Published: 2024-03-18T19:05:50.023Z Last Updated: 2025-03-27T14:43:18.746Z Vendors: Unknown Products: Error Log Viewer by BestWebSoft Problem Types: CWE-548 Exposure of Information Through Directory Listing Description: The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing users to read and download PHP logs without authorization Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/6b1a998d-c97c-4305-b12a-69e29408ebd9/
CVE ID: CVE-2023-6824 State: PUBLISHED Published: 2024-01-16T15:57:00.656Z Last Updated: 2025-06-11T16:39:31.579Z Vendors: Unknown Products: WP Customer Area Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX actions, allowing any users to retrieve other user's account address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a224b984-770a-4534-b689-0701b582b388/
CVE ID: CVE-2023-6825 State: PUBLISHED Published: 2024-03-13T15:27:05.576Z Last Updated: 2024-08-08T17:56:15.864Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: mndpsingh287, File Manager Products: File Manager, File Manager Pro Problem Types: CWE-23 Relative Path Traversal Description: The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and including version 7.2.1 (free version) and 8.3.4 (Pro version) via the target parameter in the mk_file_folder_manager_action_callback_shortcode function. This makes it possible for attackers to read the contents of arbitrary files on the server, which ca
shortcode function. This makes it possible for attackers to read the contents of arbitrary files on the server, which can contain sensitive information and to upload files into directories other than the intended directory for file uploads. The free version requires Administrator access for this vulnerability to be exploitable. The Pro version allows a file manager to be embedded via a shortcode and also allows admins to grant file handling privileges to other user levels, which could lead to this vulnerability being exploited by lower-level users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/93f377a1-2c33-4dd7-8fd6-190d9148e804?source=cve - https://github.com/Studio-42/elFinder/blob/master/php/elFinderVolumeDriver.class.php#L6784 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3023403%40wp-file-manager%2Ftrunk&old=2984933%40wp-file-manager%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2023-6826 State: PUBLISHED Published: 2023-12-15T07:30:41.463Z Last Updated: 2024-11-20T18:56:34.411Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: oleksandrz Products: E2Pdf – Export To Pdf Tool for WordPress Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'import_action' function in versions up to, and including, 1.20.25. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin, to upload arbitrary files on the affected site
th a role that the administrator previously granted access to the plugin, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/03faec37-2cce-4e14-92f2-d941ab1b4ce9?source=cve - https://plugins.trac.wordpress.org/browser/e2pdf/trunk/classes/controller/e2pdf-templates.php?rev=2993824#L753 - https://plugins.trac.wordpress.org/browser/e2pdf/trunk/classes/controller/e2pdf-templates.php?rev=2993824#L1488 - https://plugins.trac.wordpress.org/changeset/3009695/e2pdf#file0