Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
lnerability/dynamic-content-for-elementor/wordpress-dynamic-content-for-elementor-plugin-2-12-5-cross-site-request-forgery-csrf-leading-to-arbitrary-wordpress-options-change-vulnerability?_s_id=cve
CVE ID: CVE-2023-52151 State: PUBLISHED Published: 2024-01-05T10:52:27.352Z Last Updated: 2025-06-17T20:29:13.806Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Uncanny Automator, Uncanny Owl Products: Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Uncanny Automator, Uncanny Owl Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin.This issue affects Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin: from n/a through
affects Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin: from n/a through 5.1.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/uncanny-automator/wordpress-uncanny-automator-plugin-5-1-0-2-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE ID: CVE-2023-52152 State: PUBLISHED Published: 2023-12-28T00:00:00 Last Updated: 2024-09-03T19:57:56.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: mupnp/net/uri.c in mUPnP for C through 3.0.2 has an out-of-bounds read and application crash because it lacks a certain host length recalculation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cybergarage/mupnp/issues/21
CVE ID: CVE-2023-52153 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-22T18:17:13.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE ID: CVE-2023-52154 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-29T15:04:29.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via upload of crafted PHTML files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE ID: CVE-2023-52155 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-14T16:20:07.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE ID: CVE-2023-52159 State: PUBLISHED Published: 2024-03-18T00:00:00.000Z Last Updated: 2025-03-20T19:15:07.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service (grossd daemon crash) or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://codeberg.org/bizdelnick/gross/wiki/Known-vulnerabilities#cve-2023-52159 - https://lists.debian.org/debian-lts-announce/2024/03/msg
rg/bizdelnick/gross/wiki/Known-vulnerabilities#cve-2023-52159 - https://lists.debian.org/debian-lts-announce/2024/03/msg00027.html
CVE ID: CVE-2023-52160 State: PUBLISHED Published: 2024-02-22T00:00:00.000Z Last Updated: 2025-11-04T18:21:38.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
an adversary to impersonate Enterprise Wi-Fi networks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://w1.fi/cgit/hostap/commit/?id=8e6485a1bcb0baffdea9e55255a81270b768439c - https://www.top10vpn.com/research/wifi-vulnerabilities/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N46C4DTVUWK336OYDA4LGALSC5VVPTCC/ - https://lists.debian.org/debian-lts-announce/2024/02/msg00013.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QU6IR4KV3ZXJZLK2BY7HAHGZNCP7FPNI/
CVE ID: CVE-2023-52161 State: PUBLISHED Published: 2024-02-22T00:00:00.000Z Last Updated: 2025-11-04T22:05:31.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://iwd.wiki.kernel.org/ - https://www.top10vpn.com/research/wifi-vulnerabilities/ - https://git.kernel.org/pub/scm/network/wireless/iw
rnel.org/ - https://www.top10vpn.com/research/wifi-vulnerabilities/ - https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=6415420f1c92012f64063c131480ffcef58e60ca - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTPXEPTMASG37NDGAQMH2OTM6OPIP5A/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TL2CFNWBL2E6AT2SIY2PR3IAWVCDYJZQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KSGT4IZ23CJBOQA3AFYEMBJ5OHFZBMK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOQ6VEE3CPJAQLMMGMLCYDGW
ttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOQ6VEE3CPJAQLMMGMLCYDGWHVG7UCJI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYRPQ3OLV3GGLUCDYWBHU34DLBLM62XJ/
CVE ID: CVE-2023-52162 State: PUBLISHED Published: 2024-06-03T19:14:19.861Z Last Updated: 2025-02-13T15:46:59.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercusys MW325R EU V3 (Firmware MW325R(EU)_V3_1.11.0 Build 221019) is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code. Exploiting the vulnerability requires authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://k4m1ll0.com/cve-2023-52162.html
CVE ID: CVE-2023-52163 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-02-05T16:38:11.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.txone.com/blog/digiever-fixes-sorely-needed/ - https://www.akamai.com/blog/security-research/digiever-fix-that-iot-thing
CVE ID: CVE-2023-52164 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-02-05T16:40:33.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: access_device.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.txone.com/blog/digiever-fixes-sorely-needed/ - https://www.akamai.com/blog/security-research/digiever-fix-that-iot-thing
CVE ID: CVE-2023-52168 State: PUBLISHED Published: 2024-07-03T00:00:00.000Z Last Updated: 2025-11-03T21:50:20.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/p/sevenzip/bugs/2402/ - https://www.openwall.com/lists/oss-security/2024/07/03/10 - http://www.openwall.com/lists/oss-security/2024/07/03/10 - https://dfir.ru/2024/06
om/lists/oss-security/2024/07/03/10 - http://www.openwall.com/lists/oss-security/2024/07/03/10 - https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/
CVE ID: CVE-2023-52169 State: PUBLISHED Published: 2024-07-03T00:00:00.000Z Last Updated: 2025-11-03T21:50:23.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://
r-side 7-Zip process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/p/sevenzip/bugs/2402/ - https://www.openwall.com/lists/oss-security/2024/07/03/10 - http://www.openwall.com/lists/oss-security/2024/07/03/10 - https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/
CVE ID: CVE-2023-52173 State: PUBLISHED Published: 2023-12-29T00:00:00 Last Updated: 2024-08-27T16:13:01.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://newsgroup.xnview.com/viewtopic.php?f=35&t=46016 - https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x54D%5D%2B3%7B%2B0~3%23460c%7D%20469.15d%20%40%20xnview.exe%2B0x3ADBD0.html
CVE ID: CVE-2023-52174 State: PUBLISHED Published: 2023-12-29T00:00:00 Last Updated: 2024-08-02T22:55:40.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6. Additional Analyst Notes: - CVE Program Container: References: - https://newsgroup.xnview.com/viewtopic.php?f=35&t=46016 - https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x1C94%5D%2B4%7B%2B0~4%231b99%7D%20128.ecf%20%40%20xnview.exe%2B0x3125D6.html
CVE ID: CVE-2023-52175 State: PUBLISHED Published: 2024-02-01T10:05:06.672Z Last Updated: 2024-08-02T22:55:40.290Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Michael Uno (miunosoft) Products: Auto Amazon Links – Amazon Associates Affiliate Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Uno (miunosoft) Auto Amazon Links – Amazon Associates Affiliate Plugin allows Stored XSS.This issue affects Auto Amazon Links – Amazon Associates Affiliate Plugin: from n/a through 5.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refer
iliate Plugin: from n/a through 5.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/amazon-auto-links/wordpress-auto-amazon-links-amazon-associates-affiliate-plugin-5-0-5-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-52176 State: PUBLISHED Published: 2024-06-04T12:43:40.844Z Last Updated: 2024-08-02T22:55:40.260Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: miniorange Products: Malware Scanner Problem Types: CWE-290 Description: Authentication Bypass by Spoofing vulnerability in miniorange Malware Scanner allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Malware Scanner: from n/a through 4.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/miniorange-malware-protection/wordpress-malware-scanner-plugin-4-7-1-ip-restriction-bypass-v
.com/database/vulnerability/miniorange-malware-protection/wordpress-malware-scanner-plugin-4-7-1-ip-restriction-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2023-52177 State: PUBLISHED Published: 2024-06-12T08:42:12.347Z Last Updated: 2024-08-02T22:55:40.267Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: SoftLab Products: Integrate Google Drive Problem Types: CWE-862 Description: Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/integrate-google-drive/wordpress-integrate-google-drive-plugin-1-3-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-52178 State: PUBLISHED Published: 2024-01-05T07:51:39.388Z Last Updated: 2024-11-14T18:18:29.174Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: MojofyWP Products: WP Affiliate Disclosure Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MojofyWP WP Affiliate Disclosure allows Stored XSS.This issue affects WP Affiliate Disclosure: from n/a through 1.2.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-affiliate-disclosure/wordpress-wp-affiliate-disclosure-plugin-1-2
es: - https://patchstack.com/database/vulnerability/wp-affiliate-disclosure/wordpress-wp-affiliate-disclosure-plugin-1-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-52179 State: PUBLISHED Published: 2024-06-11T10:40:56.641Z Last Updated: 2024-08-02T22:55:40.283Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: WebCodingPlace Products: Product Expiry for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry for WooCommerce: from n/a through 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/product-expiry-for-woocommerce/wordpress-product-expiry-for-woocommerce-plugin-2-5-broken-access-control-vulnerabilit
ty/product-expiry-for-woocommerce/wordpress-product-expiry-for-woocommerce-plugin-2-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-52180 State: PUBLISHED Published: 2023-12-31T10:17:49.210Z Last Updated: 2024-08-02T22:55:41.362Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Really Simple Plugins Products: Recipe Maker For Your Food Blog from Zip Recipes Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/zip-recipes/
itional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/zip-recipes/wordpress-recipe-maker-for-your-food-blog-from-zip-recipes-plugin-8-1-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-52181 State: PUBLISHED Published: 2023-12-31T10:07:49.524Z Last Updated: 2024-08-02T22:55:40.263Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Presslabs Products: Theme per user Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Presslabs Theme per user.This issue affects Theme per user: from n/a through 1.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/theme-per-user/wordpress-theme-per-user-plugin-1-0-1-unauthenticated-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-52182 State: PUBLISHED Published: 2023-12-31T09:57:17.430Z Last Updated: 2024-08-02T22:55:40.287Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ARI Soft Products: ARI Stream Quiz – WordPress Quizzes Builder Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes Builder: from n/a through 1.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ari-stream-quiz/wordpress-ari-stream-quiz-plugin-1-3-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-52183 State: PUBLISHED Published: 2024-06-11T13:37:12.525Z Last Updated: 2024-08-02T22:55:40.825Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: WebToffee Products: WordPress Backup & Migration Problem Types: CWE-862 Description: Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-migration-duplicator/wordpress-wordpress-backup-migration-plugin-1-4-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-52184 State: PUBLISHED Published: 2024-01-05T08:00:03.657Z Last Updated: 2025-06-17T20:29:13.941Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP Job Portal Products: WP Job Portal – A Complete Job Board Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-job-portal/wordpress-wp-job-portal-plugin-2-0-6-cross-site-request-forgery-csrf-vuln
stack.com/database/vulnerability/wp-job-portal/wordpress-wp-job-portal-plugin-2-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-52185 State: PUBLISHED Published: 2023-12-31T16:50:39.274Z Last Updated: 2024-09-09T17:24:09.446Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Everestthemes Products: Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Everestthemes Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin.This issue affects Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin: from n/a through 2.1.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
& Cloning Plugin: from n/a through 2.1.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/everest-backup/wordpress-everest-backup-plugin-2-1-9-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE ID: CVE-2023-52186 State: PUBLISHED Published: 2024-06-11T09:23:17.152Z Last Updated: 2024-08-02T22:55:41.309Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Woo Products: WooCommerce Product Vendors Problem Types: CWE-862 Description: Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-product-vendors/wordpress-woocommerce-product-vendors-plugin-2-2-2-unauthenticated-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-52187 State: PUBLISHED Published: 2024-01-26T23:07:59.148Z Last Updated: 2025-06-17T21:19:31.213Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Thomas Maier Products: Image Source Control Lite – Show Image Credits and Captions Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Thomas Maier Image Source Control Lite – Show Image Credits and Captions.This issue affects Image Source Control Lite – Show Image Credits and Captions: from n/a through 2.17.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerab
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/image-source-control-isc/wordpress-image-source-control-lite-plugin-2-17-0-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE ID: CVE-2023-52188 State: PUBLISHED Published: 2024-02-01T10:00:53.945Z Last Updated: 2024-08-02T22:55:41.206Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Russell Jamieson Products: Footer Putter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Russell Jamieson Footer Putter allows Stored XSS.This issue affects Footer Putter: from n/a through 1.17. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/footer-putter/wordpress-footer-putter-plugin-1-17-cross-site-scripting-xss-vulnerab
atchstack.com/database/vulnerability/footer-putter/wordpress-footer-putter-plugin-1-17-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-52189 State: PUBLISHED Published: 2024-02-01T09:58:04.857Z Last Updated: 2024-08-02T22:55:40.341Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jhayghost Products: Ideal Interactive Map Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jhayghost Ideal Interactive Map allows Stored XSS.This issue affects Ideal Interactive Map: from n/a through 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ideal-interactive-map/wordpress-ideal-interactive-map-plugin-1-2-4-cross
- https://patchstack.com/database/vulnerability/ideal-interactive-map/wordpress-ideal-interactive-map-plugin-1-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve