Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41659 State: PUBLISHED Published: 2023-10-06T14:40:58.218Z Last Updated: 2024-09-19T15:00:41.763Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Jules Colle, BDWM Products: Responsive Gallery Grid Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin <= 2.3.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/responsive-gallery-grid/wordpress-responsive-gallery-grid-plugin-2-3-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41660 State: PUBLISHED Published: 2023-10-09T13:51:35.408Z Last Updated: 2024-09-18T20:40:41.456Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: WPSynchro Products: WP Synchro Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPSynchro WP Synchro plugin <= 1.9.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpsynchro/wordpress-wordpress-migration-plugin-db-files-wp-synchro-plugin-1-9-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41661 State: PUBLISHED Published: 2023-09-29T13:36:29.118Z Last Updated: 2024-08-02T19:01:35.433Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PressPage Entertainment Inc. Products: Smarty for WordPress Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/smarty-for-wordpress/wordpress-smarty-for-wordpress-plugin-3-1-35-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41662 State: PUBLISHED Published: 2023-09-29T13:39:29.119Z Last Updated: 2025-02-19T21:23:14.400Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ulf Benjaminsson Products: WP-dTree Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-dtree-30/wordpress-wp-dtree-plugin-4-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41663 State: PUBLISHED Published: 2023-09-29T13:43:35.721Z Last Updated: 2025-02-19T21:23:04.823Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Giovambattista Fazioli Products: WP Bannerize Pro Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Giovambattista Fazioli WP Bannerize Pro plugin <= 1.6.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-bannerize-pro/wordpress-wp-bannerize-pro-plugin-1-6-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41664 State: PUBLISHED Published: 2024-12-13T14:24:11.554Z Last Updated: 2024-12-13T18:16:49.981Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: AlphaBPO Products: Easy Newsletter Signups Problem Types: CWE-862 Description: Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Newsletter Signups: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-newsletter-signups/vulnerability/wordpress-easy-newsletter-signups-plugin-1-0-4-broken-access
base/wordpress/plugin/easy-newsletter-signups/vulnerability/wordpress-easy-newsletter-signups-plugin-1-0-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41665 State: PUBLISHED Published: 2024-05-17T06:53:56.913Z Last Updated: 2024-08-02T19:01:35.316Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: GiveWP Products: GiveWP Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/give/wordpress-givewp-plugin-2-33-0-givewp-manager-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2023-41666 State: PUBLISHED Published: 2023-09-29T13:48:20.417Z Last Updated: 2024-09-20T15:42:20.051Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Stockdio Products: Stock Quotes List Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Stockdio Stock Quotes List plugin <= 2.9.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/stock-quotes-list/wordpress-stock-quotes-list-plugin-2-9-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41667 State: PUBLISHED Published: 2023-10-09T17:38:02.705Z Last Updated: 2024-09-18T20:39:42.745Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Ulf Benjaminsson Products: WP-dTree Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-dtree-30/wordpress-wp-dtree-plugin-4-4-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41668 State: PUBLISHED Published: 2023-10-09T17:47:11.116Z Last Updated: 2024-09-18T20:39:23.431Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Leadster Products: Leadster Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Leadster plugin <= 1.1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/leadster-marketing-conversacional/wordpress-leadster-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41669 State: PUBLISHED Published: 2023-10-09T18:10:33.583Z Last Updated: 2024-09-18T20:36:20.578Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: DAEXT Products: Live News Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Live News plugin <= 1.06 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/live-news-lite/wordpress-live-news-plugin-1-06-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41670 State: PUBLISHED Published: 2023-10-09T18:30:05.538Z Last Updated: 2024-09-18T20:36:06.197Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Palasthotel (in person: Edward Bock) Products: Use Memcached Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Palasthotel (in person: Edward Bock) Use Memcached plugin <= 1.0.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/use-memcached/wordpress-use-memcached-plugin-1-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41671 State: PUBLISHED Published: 2024-12-13T14:24:12.087Z Last Updated: 2024-12-13T18:50:06.304Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Tyche Softwares Products: Abandoned Cart Lite for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Abandoned Cart Lite for WooCommerce: from n/a through 5.16.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-abandoned-cart/vulnerability/wordpr
richment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-abandoned-cart/vulnerability/wordpress-abandoned-cart-lite-for-woocommerce-plugin-5-16-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41672 State: PUBLISHED Published: 2023-10-09T18:38:15.078Z Last Updated: 2024-09-18T20:35:49.372Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Rémi Leclercq Products: Hide admin notices – Admin Notification Center Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin <= 2.3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-admin-notification-center/wordpress-hide-admin-notices-admin-notification-center-plugin-2-3-2-cross-site-request-forger
-admin-notification-center/wordpress-hide-admin-notices-admin-notification-center-plugin-2-3-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41673 State: PUBLISHED Published: 2023-12-13T06:43:21.604Z Last Updated: 2024-08-02T19:01:35.408Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiADC Problem Types: CWE-285 Description: An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-23-270
CVE ID: CVE-2023-41674 State: REJECTED Published: N/A Last Updated: 2025-07-31T02:55:09.227Z Description: No description available.
CVE ID: CVE-2023-41675 State: PUBLISHED Published: 2023-10-10T16:49:55.789Z Last Updated: 2024-09-18T20:04:30.066Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiOS, FortiProxy Problem Types: CWE-416 Description: A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection. Additional Analyst Notes: -
g proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-184
CVE ID: CVE-2023-41676 State: PUBLISHED Published: 2023-11-14T18:05:39.178Z Last Updated: 2024-08-30T18:13:25.243Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiSIEM Problem Types: CWE-200 Description: An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may allow an attacker with access to windows agent logs to obtain the windows agent password via searching through the logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-290
CVE ID: CVE-2023-41677 State: PUBLISHED Published: 2024-04-09T14:24:21.614Z Last Updated: 2024-08-02T19:01:35.404Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C) Vendors: Fortinet Products: FortiOS, FortiProxy Problem Types: CWE-522 Description: A insufficiently protected credentials in Fortinet FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17 allows attacker to execute unauthorized code or commands via targeted so
.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17 allows attacker to execute unauthorized code or commands via targeted social engineering attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-23-493
CVE ID: CVE-2023-41678 State: PUBLISHED Published: 2023-12-13T06:44:44.233Z Last Updated: 2024-08-02T19:01:35.327Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiOS, FortiPAM Problem Types: CWE-415 Description: A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-23-196
CVE ID: CVE-2023-41679 State: PUBLISHED Published: 2023-10-10T16:51:44.600Z Last Updated: 2024-10-22T20:56:37.984Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiManager Problem Types: CWE-284 Description: An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions may allow a remote and authenticated attacker with at least "device management" permission on his profile and belonging to a specific ADOM to add and delete CLI script on other ADOMs Additional Analyst Notes: - CVE Program Container: -
ing to a specific ADOM to add and delete CLI script on other ADOMs Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-062
CVE ID: CVE-2023-41680 State: PUBLISHED Published: 2023-10-13T14:51:12.174Z Last Updated: 2024-10-22T20:55:31.615Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-79 Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSandbox version 4.4.1 and 4.4.0 and 4.2.0 through 4.2.5 and 4.0.0 through 4.0.3 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 and 2.5.0 through 2.5.2 and 2.4.1 allows attacker to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container:
r to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-311
CVE ID: CVE-2023-41681 State: PUBLISHED Published: 2023-10-13T14:51:08.259Z Last Updated: 2024-09-16T20:37:53.080Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-79 Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSandbox version 4.4.1 and 4.4.0 and 4.2.0 through 4.2.5 and 4.0.0 through 4.0.3 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 and 2.5.0 through 2.5.2 and 2.4.1 allows attacker to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container:
CVE ID: CVE-2023-41682 State: PUBLISHED Published: 2023-10-13T14:51:03.342Z Last Updated: 2024-09-16T20:42:19.766Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-22 Description: A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiSandbox version 4.4.0 and 4.2.0 through 4.2.5 and 4.0.0 through 4.0.3 and 3.2.0 through 3.2.4 and 2.5.0 through 2.5.2 and 2.4.1 and 2.4.0 allows attacker to denial of service via crafted http requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-280
CVE ID: CVE-2023-41683 State: PUBLISHED Published: 2024-12-13T14:24:12.640Z Last Updated: 2024-12-13T18:49:38.206Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Pechenki Products: TelSender Problem Types: CWE-862 Description: Missing Authorization vulnerability in Pechenki TelSender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TelSender: from n/a through 1.14.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/telsender/vulnerability/wordpress-telsender-plugin-1-14-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41684 State: PUBLISHED Published: 2023-10-10T06:52:13.988Z Last Updated: 2024-09-17T19:53:44.809Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Felix Welberg Products: SIS Handball Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Felix Welberg SIS Handball plugin <= 1.0.45 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sis-handball/wordpress-sis-handball-plugin-1-0-45-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41685 State: PUBLISHED Published: 2023-11-06T08:17:56.418Z Last Updated: 2024-09-05T15:44:15.483Z Vendors: ilGhera Products: Woocommerce Support System Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ilGhera Woocommerce Support System allows SQL Injection.This issue affects Woocommerce Support System: from n/a through 1.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wc-support-system/wordpress-woocommerce-support-system-plugin-1-2-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-41686 State: PUBLISHED Published: 2024-12-13T14:24:13.182Z Last Updated: 2024-12-13T18:15:47.615Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: ilGhera Products: Woocommerce Support System Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ilGhera Woocommerce Support System allows Cross Site Request Forgery.This issue affects Woocommerce Support System: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wc-support-system/vulnerability/wordpress-woocommerce-support-system-plugin-1-2-0-cross-site-request-forgery-csrf-vul
in/wc-support-system/vulnerability/wordpress-woocommerce-support-system-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41687 State: PUBLISHED Published: 2023-09-29T13:51:51.899Z Last Updated: 2024-09-20T15:34:34.976Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Irina Sokolovskaya Products: Goods Catalog Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Irina Sokolovskaya Goods Catalog plugin <= 2.4.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/goods-catalog/wordpress-goods-catalog-plugin-2-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41688 State: PUBLISHED Published: 2024-12-13T14:24:13.720Z Last Updated: 2024-12-13T18:14:59.549Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Mad Fish Digital Products: Bulk NoIndex & NoFollow Toolkit Problem Types: CWE-862 Description: Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bulk-noindex-nofollow-toolkit-by-mad-fish/vulnerability/word
erences: - https://patchstack.com/database/wordpress/plugin/bulk-noindex-nofollow-toolkit-by-mad-fish/vulnerability/wordpress-bulk-noindex-nofollow-toolkit-plugin-1-42-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41689 State: PUBLISHED Published: 2024-12-13T14:24:14.283Z Last Updated: 2024-12-13T18:14:13.527Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Koen Reus Products: Post to Google My Business (Google Business Profile) Problem Types: CWE-862 Description: Missing Authorization vulnerability in Koen Reus Post to Google My Business (Google Business Profile) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post to Google My Business (Google Business Profile): from n/a through 3.1.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-to-
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-to-google-my-business/vulnerability/wordpress-post-to-google-my-business-google-business-profile-plugin-3-1-14-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41690 State: PUBLISHED Published: 2024-12-13T14:24:15.000Z Last Updated: 2024-12-13T18:13:23.321Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Wiser Notify Products: WiserNotify Social Proof Problem Types: CWE-862 Description: Missing Authorization vulnerability in Wiser Notify WiserNotify Social Proof allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WiserNotify Social Proof: from n/a through 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wiser-notify/vulnerability/wordpress-wisernotify-social-proof-plugin-2-5-broken-access-co
.com/database/wordpress/plugin/wiser-notify/vulnerability/wordpress-wisernotify-social-proof-plugin-2-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41691 State: PUBLISHED Published: 2023-09-29T13:56:01.397Z Last Updated: 2024-09-20T15:26:42.929Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Pensopay Products: WooCommerce PensoPay Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pensopay WooCommerce PensoPay plugin <= 6.3.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-pensopay/wordpress-woocommerce-pensopay-plugin-6-3-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41692 State: PUBLISHED Published: 2023-10-02T07:26:05.365Z Last Updated: 2024-09-20T13:20:17.818Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Hennessey Digital Products: Attorney Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hennessey Digital Attorney theme <= 3 theme. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/attorney/wordpress-attorney-theme-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve