Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-51818 State: PUBLISHED Published: 2025-01-21T13:40:33.674Z Last Updated: 2025-01-21T15:50:44.924Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: NotFound Products: Fancy Product Designer Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fancy-product-designer/vulnerability/wordpress-fancy-product-designer-plugin-6-4-3-unauthenticated-sql-injec
ress/plugin/fancy-product-designer/vulnerability/wordpress-fancy-product-designer-plugin-6-4-3-unauthenticated-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-51819 State: PUBLISHED Published: 2024-11-19T16:31:49.964Z Last Updated: 2024-11-20T14:35:27.967Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Tigris – Flexplatform Products: Tigris Flexplatform Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tigris – Flexplatform Tigris Flexplatform allows Stored XSS.This issue affects Tigris Flexplatform: from n/a through .0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/tigris-flexplatform/wordpress-tigris-flexplatform-plugin-1-0-2-stored-cross-site
//patchstack.com/database/vulnerability/tigris-flexplatform/wordpress-tigris-flexplatform-plugin-1-0-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51820 State: PUBLISHED Published: 2024-11-11T06:06:20.679Z Last Updated: 2024-11-12T20:14:33.759Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: L Squared Support Products: L Squared Hub WP Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in L Squared Support L Squared Hub WP allows SQL Injection.This issue affects L Squared Hub WP: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/l-squared-hub-wp-virtual-device/wordpress-l-squared-hub-wp-plugin-1-0-sql-injection-vulnerability
database/vulnerability/l-squared-hub-wp-virtual-device/wordpress-l-squared-hub-wp-plugin-1-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-51821 State: PUBLISHED Published: 2024-11-19T16:31:49.432Z Last Updated: 2024-11-20T14:36:01.015Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wordpresteem Products: WE – Client Logo Carousel Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordpresteem WE – Client Logo Carousel allows Stored XSS.This issue affects WE – Client Logo Carousel: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/we-client-logo-carousel/wordpress-we-client-logo-carousel-plugin-1-4-cross-site-s
/patchstack.com/database/vulnerability/we-client-logo-carousel/wordpress-we-client-logo-carousel-plugin-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51822 State: PUBLISHED Published: 2024-11-19T16:31:48.885Z Last Updated: 2024-11-20T14:37:32.096Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Keon Themes Products: Creative Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Keon Themes Creative Blocks allows Stored XSS.This issue affects Creative Blocks: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/creative-blocks/wordpress-creative-blocks-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51823 State: PUBLISHED Published: 2024-11-19T16:31:48.322Z Last Updated: 2024-11-19T21:18:45.227Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sherwin Calims Products: Add Ribbon Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sherwin Calims Add Ribbon Shortcode allows DOM-Based XSS.This issue affects Add Ribbon Shortcode: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/add-ribbon/wordpress-add-ribbon-shortcode-plugin-1-0-1-cross-site-scripting-xss-vulnera
stack.com/database/vulnerability/add-ribbon/wordpress-add-ribbon-shortcode-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51824 State: PUBLISHED Published: 2024-11-19T16:31:47.760Z Last Updated: 2024-11-20T14:38:11.585Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: sony7596, mrseankumar25, miraclewebssoft Products: Advanced Video Player with Analytics Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sony7596, mrseankumar25, miraclewebssoft Advanced Video Player with Analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through 1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulne
om n/a through 1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-video-player-with-analytics/wordpress-advanced-video-player-with-analytics-plugin-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51825 State: PUBLISHED Published: 2024-11-19T16:31:47.235Z Last Updated: 2024-11-20T14:26:12.948Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Cristopher Ocaña Products: Alert Me! Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristopher Ocaña Alert Me! allows DOM-Based XSS.This issue affects Alert Me!: from n/a through 0.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/alert-me/wordpress-alert-me-plugin-0-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51826 State: PUBLISHED Published: 2024-11-19T16:31:46.665Z Last Updated: 2024-11-20T14:26:13.107Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: James Turner Products: Bitcoin Payments Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in James Turner Bitcoin Payments allows DOM-Based XSS.This issue affects Bitcoin Payments: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bitcoin-payments/wordpress-bitcoin-payments-plugin-1-4-2-cross-site-scripting-xss-vulnerability?_s_id=c
se/vulnerability/bitcoin-payments/wordpress-bitcoin-payments-plugin-1-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51827 State: PUBLISHED Published: 2024-11-19T16:31:46.073Z Last Updated: 2024-11-20T14:26:13.262Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Boombox Products: Boombox Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Boombox Boombox Shortcode allows DOM-Based XSS.This issue affects Boombox Shortcode: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/boombox-shortcode/wordpress-boombox-shortcode-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51828 State: PUBLISHED Published: 2024-11-19T16:31:45.501Z Last Updated: 2024-11-20T14:26:13.383Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Daniel J Griffiths Products: Beacon For Help Scout Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel J Griffiths Beacon For Help Scout allows DOM-Based XSS.This issue affects Beacon For Help Scout: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/beacon-for-helpscout/wordpress-beacon-for-help-scout-plugin-1-3-0-cross-site
tps://patchstack.com/database/vulnerability/beacon-for-helpscout/wordpress-beacon-for-help-scout-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51829 State: PUBLISHED Published: 2024-11-19T16:31:44.940Z Last Updated: 2024-11-20T14:26:13.506Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Figoli Quinn & Associates Products: Mobile Kiosk Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Figoli Quinn & Associates Mobile Kiosk allows Stored XSS.This issue affects Mobile Kiosk: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mobile-kiosk/wordpress-mobile-kiosk-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_i
.com/database/vulnerability/mobile-kiosk/wordpress-mobile-kiosk-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51830 State: PUBLISHED Published: 2024-11-19T16:31:44.375Z Last Updated: 2024-11-20T14:26:13.632Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Fazilatunnesa Products: News Ticker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fazilatunnesa News Ticker allows Stored XSS.This issue affects News Ticker: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/newsticker/wordpress-news-ticker-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51831 State: PUBLISHED Published: 2024-11-19T16:31:43.861Z Last Updated: 2024-11-20T14:26:13.741Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Aboutorab Pourhaghani Products: Persian Nested Show/Hide Text Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aboutorab Pourhaghani Persian Nested Show/Hide Text allows Stored XSS.This issue affects Persian Nested Show/Hide Text: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/persian-nested-showhide-text/wordpress-persian-nest
ichment: References: - https://patchstack.com/database/vulnerability/persian-nested-showhide-text/wordpress-persian-nested-show-hide-text-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51832 State: PUBLISHED Published: 2024-11-19T16:31:43.285Z Last Updated: 2024-11-20T14:26:13.849Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Plenigo Products: Plenigo Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plenigo Plenigo allows Stored XSS.This issue affects Plenigo: from n/a through 1.12.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/plenigo/wordpress-plenigo-plugin-1-12-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51833 State: PUBLISHED Published: 2024-11-19T16:31:42.668Z Last Updated: 2024-11-20T14:26:13.971Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Noman Akhtar Products: Easy Social Sharebar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noman Akhtar Easy Social Sharebar allows Stored XSS.This issue affects Easy Social Sharebar: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-social-sharebar/wordpress-easy-social-sharebar-plugin-1-0-0-cross-site-scripting-xss-vuln
om/database/vulnerability/easy-social-sharebar/wordpress-easy-social-sharebar-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51834 State: PUBLISHED Published: 2024-11-19T16:31:42.179Z Last Updated: 2024-11-20T14:36:15.442Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Luzuk Products: Luzuk Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Luzuk Luzuk Slider allows Stored XSS.This issue affects Luzuk Slider: from n/a through 0.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/luzuk-slider/wordpress-luzuk-slider-plugin-0-1-5-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51835 State: PUBLISHED Published: 2024-11-19T16:31:41.666Z Last Updated: 2024-11-20T14:36:15.620Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ajinkya N Products: OpenCart Product Display Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajinkya N OpenCart Product Display allows Stored XSS.This issue affects OpenCart Product Display: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/opencart-product-display/wordpress-opencart-product-display-plugin-1-0-cross-site-scriptin
ck.com/database/vulnerability/opencart-product-display/wordpress-opencart-product-display-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51836 State: PUBLISHED Published: 2024-11-19T16:31:41.073Z Last Updated: 2024-11-20T14:42:02.793Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Teconce Products: Wezido Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Teconce Wezido allows DOM-Based XSS.This issue affects Wezido: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wezido-elementor-addon-based-on-easy-digital-downloads/wordpress-wezido-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51837 State: PUBLISHED Published: 2024-11-11T06:05:15.508Z Last Updated: 2024-11-12T14:52:11.658Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: SONS Creative Development Products: WP Contest Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SONS Creative Development WP Contest allows SQL Injection.This issue affects WP Contest: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-contest/wordpress-wp-contest-plugin-1-0-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-51838 State: PUBLISHED Published: 2024-11-19T16:31:40.531Z Last Updated: 2024-11-20T14:42:32.697Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jon Smajda Products: Pull This Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jon Smajda Pull This allows DOM-Based XSS.This issue affects Pull This: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pull-this/wordpress-pull-this-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51839 State: PUBLISHED Published: 2024-11-19T16:31:39.973Z Last Updated: 2024-11-20T14:42:52.498Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Meini Products: Utech Spinning Earth Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meini Utech Spinning Earth allows DOM-Based XSS.This issue affects Utech Spinning Earth: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/utech-spinning-earth/wordpress-utech-spinning-earth-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id
ulnerability/utech-spinning-earth/wordpress-utech-spinning-earth-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51840 State: PUBLISHED Published: 2024-11-19T16:31:39.440Z Last Updated: 2024-11-20T15:04:16.202Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Rezaul haque Products: Wd-image-magnifier-xoss Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rezaul haque Wd-image-magnifier-xoss allows DOM-Based XSS.This issue affects Wd-image-magnifier-xoss: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wd-image-magnifier-xoss/wordpress-wd-image-magnifier-xoss-plugin-1-0-cross-site-scri
tchstack.com/database/vulnerability/wd-image-magnifier-xoss/wordpress-wd-image-magnifier-xoss-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51841 State: PUBLISHED Published: 2024-11-19T16:31:38.879Z Last Updated: 2024-11-20T15:04:50.914Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ThemeNcode Products: File Select Control For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNcode File Select Control For Elementor allows DOM-Based XSS.This issue affects File Select Control For Elementor: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/file-select-control-for-elementor/wordpress-file-select-co
: References: - https://patchstack.com/database/vulnerability/file-select-control-for-elementor/wordpress-file-select-control-for-elementor-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51842 State: PUBLISHED Published: 2024-11-19T16:31:38.332Z Last Updated: 2024-11-20T15:08:23.774Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sazzad Hu Products: Image Carousel Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sazzad Hu Image Carousel Shortcode allows DOM-Based XSS.This issue affects Image Carousel Shortcode: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/image-carousel-shortcode/wordpress-image-carousel-shortcode-plugin-1-2-cross-site-scrip
stack.com/database/vulnerability/image-carousel-shortcode/wordpress-image-carousel-shortcode-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51843 State: PUBLISHED Published: 2024-11-11T06:02:34.198Z Last Updated: 2024-11-12T14:52:36.131Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Olland.biz Products: Horsemanager Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Olland.Biz Horsemanager allows Blind SQL Injection.This issue affects Horsemanager: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fruitcake-horsemanager/wordpress-horsemanager-plugin-1-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-51844 State: PUBLISHED Published: 2024-11-19T16:31:37.758Z Last Updated: 2024-11-20T15:09:08.835Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Kiran Patil Products: Location Click Map Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kiran Patil Location Click Map allows Stored XSS.This issue affects Location Click Map: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/location-click-map/wordpress-location-click-map-plugin-1-0-stored-cross-site-scripting-xss-vulnerability
e/vulnerability/location-click-map/wordpress-location-click-map-plugin-1-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51845 State: PUBLISHED Published: 2024-11-11T06:01:28.671Z Last Updated: 2024-11-12T14:53:04.130Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Richteam Products: Share Buttons – Social Media Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Richteam Share Buttons – Social Media allows Blind SQL Injection.This issue affects Share Buttons – Social Media: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rich-web-share-button/wordpress-share-buttons-social-media-plugin-1-0-2
- https://patchstack.com/database/vulnerability/rich-web-share-button/wordpress-share-buttons-social-media-plugin-1-0-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-51846 State: PUBLISHED Published: 2024-11-19T16:31:37.192Z Last Updated: 2024-11-20T15:09:28.687Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Michael Simpson Products: Community Yard Sale Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Simpson Community Yard Sale allows Stored XSS.This issue affects Community Yard Sale: from n/a through 1.1.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/community-yard-sale/wordpress-community-yard-sale-plugin-1-1-11-cross-site-scripting-xss-v
ck.com/database/vulnerability/community-yard-sale/wordpress-community-yard-sale-plugin-1-1-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51847 State: PUBLISHED Published: 2024-11-19T16:31:36.665Z Last Updated: 2024-11-20T14:43:12.918Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: giovanebribeiro Products: WP PagSeguro Payments Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in giovanebribeiro WP PagSeguro Payments allows Stored XSS.This issue affects WP PagSeguro Payments: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-pagseguro-payments/wordpress-wp-pagseguro-payments-plugin-1-0-cross-site-scripting-x
stack.com/database/vulnerability/wp-pagseguro-payments/wordpress-wp-pagseguro-payments-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve